
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
File: 11FFFA845980AD12347D7297657117A393722635.mft (raw, json)
Hash identifier: my4u3nmxWQJv54gf+flyDIDMOHF6DXSH5k2eMYEB7yk=
Subject key identifier: 78:EE:D0:E7:2C:DB:7A:1B:38:9A:B8:5E:97:E0:9F:A9:E1:D5:71:9D
Authority key identifier: 11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
Certificate issuer: /CN=11FFFA845980AD12347D7297657117A393722635
Certificate serial: 5AFCCC0B003F61FC6FC26D819182651108FFADB3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 07:43:58 +0000
Manifest this update: Fri 24 Jul 2026 07:38:58 +0000
Manifest next update: Sat 25 Jul 2026 10:22:58 +0000
Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: lcXF2ukAyeD79WJ/+d/LiALmLjnDTwGdGGkGmI9GuQ8=)
2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: 1j1MwArF7+GiMoyA2GSO7NK/M/081FoP97bqeWhfFHU=)
3: 11FFFA845980AD12347D7297657117A393722635.crl (hash: FyQbeGvNqJT8x6pkCL3rzODDUaE5hiF4nBJDwSNCsLI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fc:cc:0b:00:3f:61:fc:6f:c2:6d:81:91:82:65:11:08:ff:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11FFFA845980AD12347D7297657117A393722635
Validity
Not Before: Jul 24 07:38:58 2026 GMT
Not After : Jul 25 10:22:58 2026 GMT
Subject: CN=78EED0E72CDB7A1B389AB85E97E09FA9E1D5719D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:2d:95:09:68:3c:0d:9a:40:f6:ca:7a:3b:
62:87:14:1e:85:93:27:8e:e0:12:be:0f:c9:53:fa:
a2:da:c2:ba:d9:e8:35:da:bc:f3:5c:3a:d2:d6:cd:
a6:fc:33:b1:8b:f6:bb:20:43:5a:f3:86:ab:85:9e:
d2:41:b0:47:03:bb:b5:7a:6d:19:a1:bb:cf:b9:e3:
1b:90:12:65:7b:5e:f5:05:82:46:0f:e7:36:b3:ec:
33:4e:85:89:7c:15:dc:28:29:eb:52:e5:03:39:f6:
cf:7b:bc:ac:4b:d1:a2:d3:08:8a:9d:22:93:84:68:
d1:14:60:27:d6:30:e7:7f:e8:68:80:ab:0d:b8:5e:
60:1d:b6:9f:b7:11:a3:52:bf:f2:b9:fd:97:86:43:
9c:08:2b:44:12:63:af:ad:02:17:6b:bf:25:c8:c4:
51:81:39:43:76:89:a4:bb:46:57:32:21:3a:29:b7:
17:79:ad:1e:72:34:4f:5b:f3:53:ab:76:fb:a1:4a:
11:6c:c5:14:0b:f9:d9:2c:14:32:06:04:92:50:9f:
1f:40:24:6f:25:79:f7:ad:f8:96:ed:0f:a5:4c:5b:
f7:49:2b:a5:6a:6e:df:45:19:b5:9b:ba:97:ef:de:
1f:41:3b:5c:1a:ac:b9:b0:38:52:71:bd:fe:0d:1b:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:D0:E7:2C:DB:7A:1B:38:9A:B8:5E:97:E0:9F:A9:E1:D5:71:9D
X509v3 Authority Key Identifier:
keyid:11:FF:FA:84:59:80:AD:12:34:7D:72:97:65:71:17:A3:93:72:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11FFFA845980AD12347D7297657117A393722635.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/11FFFA845980AD12347D7297657117A393722635.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f9:3d:d3:87:ca:37:32:65:0e:15:3c:2d:2d:36:a2:eb:ab:
e0:86:d1:7c:4f:b0:0f:4d:6e:7c:94:56:ea:70:e3:e5:1f:8c:
21:ce:2b:fe:ae:8d:e0:5f:52:9f:22:4e:0f:9d:4c:4d:4d:02:
d7:81:6a:76:29:37:c2:8f:cb:4d:b6:00:c4:17:e9:e0:54:54:
37:4a:b3:3e:d9:e5:bb:65:e6:a5:f6:9e:95:99:1e:9b:82:2b:
f1:4c:f7:70:ca:ce:f6:52:98:6a:92:a9:31:97:e4:ce:a0:33:
37:f2:4c:37:3f:bb:b4:21:fc:25:71:0b:e3:6e:6d:ce:9f:79:
91:ef:1b:17:cc:ed:c2:ac:52:59:59:09:55:9b:d6:6b:8b:10:
a5:5d:75:20:29:2d:8c:79:c5:9a:f6:b9:5b:6d:13:6e:bb:44:
a7:86:80:ef:2d:d1:7f:28:34:09:20:50:d6:85:bd:7d:31:ed:
b9:b2:42:35:6f:15:55:a4:2b:37:3d:d2:27:9b:53:00:ca:ab:
78:bf:4e:8c:5d:ee:61:b2:be:ae:12:08:de:3e:bc:ef:c1:23:
23:f8:2c:e9:e5:b0:16:ef:5d:18:40:25:d7:2d:c1:4d:eb:e3:
6f:db:89:27:34:32:dd:42:30:f8:49:4e:81:d8:09:b9:e6:cd:
de:d5:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:12 2026 by rpki-client