
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
File: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft (raw, json)
Hash identifier: OKfaG4jFj6Uyk14f1wOz4sPlv8Im6/Vwf6hAxmUvbI0=
Subject key identifier: F9:66:34:F7:9A:5E:27:4B:79:1D:CA:AD:9E:E6:92:14:38:A0:B7:1E
Authority key identifier: 25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED
Certificate issuer: /CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
Certificate serial: 3E1477FDF837C2B03BECD3669789D33173A01D96
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 20:19:54 +0000
Manifest this update: Thu 23 Jul 2026 20:14:54 +0000
Manifest next update: Fri 24 Jul 2026 23:31:54 +0000
Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: seLt9J4Omc3hnlGUE3OGC5XsPU9/YgeAHtEiSSm80kY=)
2: 256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl (hash: cgXrB1Ca4qMsm9blZGcrCPNd3BMdXfODtJvJ4vl2svU=)
3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: cfTJoIKD7v5E50NDw9RdyVoXvRV8kIdsxzrTBtYWbZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl
rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:14:77:fd:f8:37:c2:b0:3b:ec:d3:66:97:89:d3:31:73:a0:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256E03BC2F1DA4F9031E71C6814D0190C44946ED
Validity
Not Before: Jul 23 20:14:54 2026 GMT
Not After : Jul 24 23:31:54 2026 GMT
Subject: CN=F96634F79A5E274B791DCAAD9EE6921438A0B71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:7f:64:55:57:b9:10:25:91:f9:ea:66:14:
08:5f:03:37:39:87:ff:44:5e:94:66:b0:32:32:34:
e4:ec:ee:69:52:e7:e1:6c:0b:95:e7:12:ed:99:fe:
98:c1:8a:ee:4f:b3:18:c6:1d:8d:84:94:12:12:45:
ea:a3:b5:d8:22:4c:ab:53:0b:72:21:c8:bf:29:46:
cc:1c:ea:8e:1e:7e:b2:8d:c3:34:59:c1:00:75:00:
c9:39:eb:d3:72:9e:d2:65:67:1d:a2:62:31:55:0d:
a6:1f:a9:b9:a1:27:59:c1:c8:d4:ca:b8:03:ac:de:
22:8a:d8:ad:99:98:58:5d:29:b2:52:e7:1e:81:36:
20:14:ef:53:3f:a5:bc:05:8b:9a:85:bc:91:df:e6:
b9:98:cd:27:00:33:33:b0:d5:a5:fb:bb:76:2f:33:
51:e6:7f:b6:07:d4:a6:15:31:6d:44:1e:7f:62:37:
11:f0:75:db:3e:1e:2b:35:ec:05:dd:82:1f:24:ac:
3a:14:45:b6:75:63:9b:c2:d9:c0:f3:45:7c:28:9a:
1b:29:6f:8c:b9:c5:55:01:e8:2b:51:ad:23:5d:e4:
7d:09:ec:33:f7:bd:73:4b:9d:b3:4e:59:13:68:ee:
84:53:96:7e:43:40:5e:05:63:64:5d:0f:8f:04:5e:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:34:F7:9A:5E:27:4B:79:1D:CA:AD:9E:E6:92:14:38:A0:B7:1E
X509v3 Authority Key Identifier:
keyid:25:6E:03:BC:2F:1D:A4:F9:03:1E:71:C6:81:4D:01:90:C4:49:46:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/256E03BC2F1DA4F9031E71C6814D0190C44946ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/256E03BC2F1DA4F9031E71C6814D0190C44946ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:0e:e9:a3:fb:de:56:7f:19:bb:23:16:64:d3:2c:7f:4e:
b9:0c:f6:a8:70:cc:88:06:b8:a5:3f:82:0b:dd:4b:d8:46:af:
0b:14:35:11:03:aa:b1:7a:65:06:85:88:0e:b7:8b:11:23:e8:
b5:58:4d:21:2f:c6:63:0d:3d:89:87:20:16:ba:a8:ca:3e:68:
8a:ff:54:dd:ae:15:82:1e:ed:31:bf:9b:32:25:47:da:42:89:
f6:d4:60:0c:d7:5d:9a:3b:17:dc:a4:57:16:43:3b:35:4c:af:
ae:67:52:f3:c7:77:6b:42:10:3b:b5:e6:b5:6d:ca:83:e7:20:
d3:bc:06:de:31:96:6b:65:d9:05:ee:18:d1:24:1b:88:e1:6c:
5d:94:fa:4c:b7:e9:d8:c9:27:93:c1:b9:85:09:12:fa:28:99:
72:b7:04:6d:c8:93:89:7e:08:c7:6d:50:27:6e:ce:70:96:6d:
f0:78:8c:48:db:d3:96:90:4b:4c:ac:1e:b7:20:3a:e9:dc:e4:
3e:f2:0a:c7:08:dd:8c:22:d9:6e:3e:01:5c:e3:ed:b8:95:b4:
28:00:91:e2:f9:06:b3:b6:1d:41:73:2c:e0:b5:a3:e0:a3:29:
d3:de:e4:3b:d1:eb:d1:38:43:09:c7:74:4e:9c:fa:72:4a:cd:
38:aa:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:59 2026 by rpki-client