
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json)
Hash identifier: asHgY0iF6EBZpg4VuO7WVNVGFxuKojL7SYxzV0S5rFc=
Subject key identifier: B2:4C:3B:EB:B2:A0:B4:14:CD:A0:AE:C8:A8:18:F2:C9:8D:34:C9:F8
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial: 211028840EFF1FC7B3B691087B2FBF9FB33DA2DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 13:11:08 +0000
Manifest this update: Thu 23 Jul 2026 13:06:08 +0000
Manifest next update: Fri 24 Jul 2026 14:19:08 +0000
Files and hashes: 1: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=)
2: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=)
3: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=)
4: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: n4EwF655lG15eO65sxMTKvYZPXuLpJEWQaTiLFP5DGw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 14:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:10:28:84:0e:ff:1f:c7:b3:b6:91:08:7b:2f:bf:9f:b3:3d:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Validity
Not Before: Jul 23 13:06:08 2026 GMT
Not After : Jul 24 14:19:08 2026 GMT
Subject: CN=B24C3BEBB2A0B414CDA0AEC8A818F2C98D34C9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:82:0b:97:2a:12:b4:9d:55:00:9b:00:57:
bb:5e:60:7b:79:e6:cb:0d:a9:c2:28:d8:7b:d9:fc:
53:0b:bd:fb:ee:86:fa:33:5b:36:6a:97:38:0b:b8:
44:1c:03:b7:ff:55:56:98:7f:5d:72:1e:5f:8e:95:
2e:7c:95:13:b4:4e:55:4a:f5:97:b9:dc:94:ac:4c:
fd:3e:42:57:93:05:82:82:78:4d:c2:52:46:d4:a0:
d1:89:38:0f:0c:14:4a:9f:47:d3:0d:8c:9f:5d:1b:
58:80:c7:43:57:c8:51:1a:b4:0f:d5:a5:9f:50:61:
2a:1b:b5:8a:54:04:cd:9e:15:92:b5:38:d2:df:dc:
83:94:b0:ce:7b:20:20:f9:5c:16:03:11:f1:f2:f6:
50:34:92:de:37:8f:c3:ef:6d:13:4a:5d:09:13:4e:
bc:0c:2d:e2:75:d6:99:b3:28:3c:56:02:7f:97:00:
11:c2:b6:18:ca:a2:4d:d8:87:06:34:8d:4c:84:36:
ea:1e:a6:f9:9f:f0:00:48:82:f4:f4:6a:18:54:db:
31:bd:5a:81:d8:fe:d7:f3:e1:52:10:dc:91:6c:2d:
53:9f:eb:41:a2:9f:b0:e6:15:06:9c:99:6b:cf:67:
07:63:79:5f:04:a7:fd:25:6d:e3:db:8d:da:f6:7a:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:3B:EB:B2:A0:B4:14:CD:A0:AE:C8:A8:18:F2:C9:8D:34:C9:F8
X509v3 Authority Key Identifier:
keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:e6:72:3a:65:63:13:84:27:e5:d1:ba:14:9a:0a:e8:44:
6b:e3:b5:dd:3a:7e:0e:f1:c1:ac:51:37:6d:44:c3:12:89:f2:
80:7b:ef:d6:9d:04:39:2d:31:a1:62:54:cf:9c:b6:cc:25:3d:
97:39:fc:45:e3:ea:26:42:68:95:2d:0b:8c:b2:63:03:bb:52:
4e:07:e7:5f:44:60:a9:17:2b:4c:48:03:d3:e9:79:04:76:71:
5c:e1:46:d8:30:b1:a4:21:68:da:3b:9d:c5:4d:7c:d8:60:04:
aa:9a:f7:77:8a:45:12:81:ba:cc:a0:37:66:83:3d:71:78:45:
db:fc:34:dc:23:e6:cb:c8:7e:74:5e:cf:a5:53:6c:4c:9e:08:
d5:c8:e8:e6:08:7e:f5:06:00:ad:c2:fa:44:a7:29:08:7a:5f:
b4:b4:89:e9:fc:83:29:ed:14:25:69:24:e2:28:7f:98:72:58:
ac:47:ff:f2:00:c6:f4:8b:19:04:d5:83:35:b8:0c:fb:36:29:
2d:e7:f5:5e:91:e3:37:ae:91:1f:32:71:d2:00:d6:13:48:a9:
fb:c8:cb:4c:b6:ae:b2:e6:84:91:2b:40:f9:cc:1d:7d:a1:83:
80:ae:b2:61:76:37:2f:c5:c8:b3:6c:cf:5c:e8:80:b7:b7:50:
81:a5:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:55 2026 by rpki-client