
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: +mmHhKk9n8NRfytl8xH2gWnST8ktY5EucaE6ukooaaY=
Subject key identifier: 66:3F:5F:A6:73:4B:94:A7:A2:FD:60:CB:96:14:20:FC:DC:B0:95:88
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 5BE65782BD6FAC0EB0EDCA825939B29902F6AE53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:35:07 +0000
Manifest this update: Fri 24 Jul 2026 04:30:07 +0000
Manifest next update: Sat 25 Jul 2026 06:39:07 +0000
Files and hashes: 1: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
2: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: ZZY8gfspDk9waNJB556ue2fE4yOy1yf8ScHesY3adSU=)
3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
4: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e6:57:82:bd:6f:ac:0e:b0:ed:ca:82:59:39:b2:99:02:f6:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: Jul 24 04:30:07 2026 GMT
Not After : Jul 25 06:39:07 2026 GMT
Subject: CN=663F5FA6734B94A7A2FD60CB961420FCDCB09588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3d:6f:10:4d:22:0f:b0:4e:fa:83:87:3c:5b:
d7:8c:38:92:dc:96:b1:ae:00:41:32:1a:f0:49:ee:
02:20:df:f3:45:9f:53:97:d6:15:f5:65:eb:bb:59:
9b:2d:88:30:9d:25:c2:52:9d:c4:53:c5:ff:13:d4:
9f:29:17:6d:d5:b9:73:78:11:de:d5:89:a9:76:c3:
cb:00:d4:6c:d7:e6:91:55:d2:4a:3c:bd:70:01:83:
5a:e9:81:bc:88:3d:c2:ba:12:e9:a6:88:dd:c1:37:
ee:c3:10:71:9d:ad:a3:31:6b:91:6f:f5:ee:64:41:
c9:db:3d:8b:4c:48:1c:07:a3:a0:7e:a3:f6:25:62:
d6:95:7a:47:bb:2c:b9:3b:11:bc:c3:8c:24:e8:41:
de:ea:ff:a1:c9:f2:9f:69:2e:db:1b:95:d4:f2:8c:
fc:c4:9d:34:57:a9:8a:c9:74:86:97:4c:d9:bb:46:
7e:73:65:4f:29:a3:d0:4a:ee:33:fb:a7:51:d8:43:
cf:b2:a4:09:57:44:f9:b0:e9:4d:ce:bb:c4:f4:d6:
b7:2a:f2:09:26:0c:27:e5:71:1d:30:8a:9a:fb:22:
b4:ee:5d:86:3c:4a:65:af:60:21:3d:63:70:a9:8f:
75:ac:69:4b:01:8d:dd:d1:42:ab:54:d4:c7:81:db:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:5F:A6:73:4B:94:A7:A2:FD:60:CB:96:14:20:FC:DC:B0:95:88
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1e:b1:69:51:1f:b9:f6:56:6d:46:80:91:c2:1b:6b:16:3e:
7d:30:ef:77:c8:e6:ca:92:02:b1:92:5b:4c:7f:fb:a6:ec:d2:
18:50:61:fe:b0:3d:bc:02:66:bd:5d:64:a4:d3:82:d0:2d:3a:
a6:2b:b2:32:81:fb:b0:f3:42:95:08:91:0b:c6:dd:7c:1e:01:
8e:37:6b:af:2e:02:b1:8a:2e:82:16:99:96:c9:1f:e7:ce:92:
2c:65:99:ff:7f:3d:3c:e3:a8:39:b2:25:27:c4:96:b6:e1:7d:
e1:47:6b:0e:36:5e:8b:5b:21:bd:88:ed:30:60:50:85:58:42:
d4:26:ce:15:3d:e5:d2:25:f8:27:66:d4:6e:9f:06:8c:31:e1:
eb:9f:42:bf:79:53:2a:d6:0c:71:61:8b:dd:71:02:9e:51:36:
f4:3d:b4:a7:ac:d1:93:e4:e9:4a:d7:a5:f8:9c:c4:be:2a:d3:
c0:d9:20:34:e6:bd:f4:56:f0:e0:e0:ec:b8:db:4a:5a:5f:19:
83:5b:98:8e:bc:4f:c2:f0:4a:38:fe:60:65:78:af:95:2e:2c:
c9:db:cf:29:13:be:30:9a:30:df:78:bd:fe:66:05:8b:26:31:
3f:7a:f0:1f:4e:02:d5:46:68:cd:7b:ab:cf:4c:8c:e5:ad:2e:
51:a7:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:51 2026 by rpki-client