
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft
File: C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft (raw, json)
Hash identifier: Cw2AMmbWX3we/ZRaZfs36m2BbR6HZko7ojCeUfYRSlA=
Subject key identifier: 9F:2B:F5:BB:D1:D6:69:BD:C1:AA:C4:7D:6B:63:29:6E:3F:22:CE:DF
Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C
Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C
Certificate serial: 030BCA05BE4D21B19BFE34E2D11F7CED7BDB0404
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:12:00 +0000
Manifest this update: Thu 23 Jul 2026 22:07:00 +0000
Manifest next update: Sat 25 Jul 2026 02:04:00 +0000
Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=)
2: C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl (hash: siY2SmoipW+XQAoFhsNwtAJ82/rQxPm4tnqH68sZa80=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl
rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0b:ca:05:be:4d:21:b1:9b:fe:34:e2:d1:1f:7c:ed:7b:db:04:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C
Validity
Not Before: Jul 23 22:07:00 2026 GMT
Not After : Jul 25 02:04:00 2026 GMT
Subject: CN=9F2BF5BBD1D669BDC1AAC47D6B63296E3F22CEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:17:18:a0:b8:d6:d4:7f:64:2a:5e:76:82:
31:22:17:ec:f1:97:25:a6:0f:76:9e:f9:f2:9e:ad:
8e:f7:56:bc:0e:3f:e1:cf:c3:07:49:37:e0:72:87:
c5:ee:13:d6:45:ea:f1:e1:ae:5c:2c:e3:8e:20:5c:
d7:ce:94:88:82:bb:a3:3c:26:2d:20:08:13:d7:3c:
bd:4f:89:20:d6:b1:37:b1:d4:1d:ac:34:88:75:97:
c8:13:2e:4f:00:82:4e:c7:02:7b:f8:61:73:fe:fc:
df:c7:92:d6:20:03:8a:09:9a:6a:29:90:c2:3a:f3:
f9:3b:c9:0f:18:fa:b0:91:07:15:d2:3a:34:be:25:
21:61:e8:f1:37:dc:28:20:d6:1e:64:2e:ba:69:71:
9b:1a:8d:9e:ec:d9:af:72:10:74:7b:14:8a:b9:10:
8d:70:db:bb:fd:c1:b2:36:3f:5b:a1:e5:71:b5:03:
ba:88:0a:c0:f7:bd:7e:4b:a0:9d:0b:5a:c9:ab:de:
58:b6:d0:a4:16:ae:fc:37:b7:a5:0d:cd:c3:13:19:
b5:d5:85:88:83:5f:9b:0d:64:ee:c1:ef:14:72:33:
10:9b:93:1b:2e:1f:96:b3:e9:29:5f:b8:5a:c8:2b:
e1:0a:f4:a1:7e:e9:5f:18:c4:72:16:31:a0:c0:78:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:F5:BB:D1:D6:69:BD:C1:AA:C4:7D:6B:63:29:6E:3F:22:CE:DF
X509v3 Authority Key Identifier:
keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:a1:4b:70:f6:aa:92:08:d8:0e:9b:83:81:af:14:36:43:
6d:60:5e:46:02:6e:ad:96:af:ec:d8:88:28:04:13:40:fa:d5:
6c:cf:66:0c:02:40:a8:52:0b:3f:58:d2:2c:ef:9f:1e:b9:d5:
8c:16:02:1c:7d:99:c2:6f:5f:ae:b3:6c:dd:7e:78:90:09:6f:
d7:a9:c1:6c:f9:a8:9c:8a:8b:9d:5c:4c:ba:ea:f2:07:a2:a9:
b8:77:23:72:66:10:74:06:d4:09:d6:e6:fa:2d:79:2a:e2:98:
ca:45:5e:59:d8:fd:75:a4:33:4c:8e:8b:f0:a1:c2:40:51:e6:
6d:47:5d:bd:ed:da:69:70:27:41:1d:44:c9:af:c7:8d:6f:fa:
7f:aa:0f:9c:9d:57:0c:e7:9d:b3:59:a4:d7:86:cc:9c:53:88:
27:23:5a:2e:46:27:a6:7a:91:cb:41:4f:34:b5:8f:3d:7b:ba:
29:b4:61:83:b9:83:f2:4c:fe:b5:ab:51:b5:f2:2f:b0:c6:dc:
bd:30:9b:e9:27:d8:bf:2e:2c:75:d7:cb:0d:32:d8:9a:d0:9d:
9c:3b:1c:22:a9:f9:54:b8:14:b4:2e:fa:8a:04:24:ad:92:67:
20:4b:ac:46:6d:7b:df:00:17:06:2d:6c:f9:3b:31:23:03:a9:
7e:e1:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:06 2026 by rpki-client