
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json)
Hash identifier: asdfrU9qko3im9hA8rHEw6ria031IzDQKsokoAdvEj8=
Subject key identifier: 03:45:23:41:DF:5F:99:DE:9F:B9:56:08:84:F3:58:A7:27:74:B6:A3
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial: 3C66B2D70F79787A5FA4945E135E758F2E427BE1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 06:47:40 +0000
Manifest this update: Fri 24 Jul 2026 06:42:40 +0000
Manifest next update: Sat 25 Jul 2026 07:44:40 +0000
Files and hashes: 1: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=)
2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=)
3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=)
4: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: M2fxou50YAuuy4tmlvZpdbtl7IrQYG59eDlbBMiYSEY=)
5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:66:b2:d7:0f:79:78:7a:5f:a4:94:5e:13:5e:75:8f:2e:42:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Validity
Not Before: Jul 24 06:42:40 2026 GMT
Not After : Jul 25 07:44:40 2026 GMT
Subject: CN=03452341DF5F99DE9FB9560884F358A72774B6A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:bf:d1:12:4f:5c:6f:22:7c:0a:98:51:30:
17:56:1e:1f:ef:0f:29:c2:b9:5f:09:88:40:70:2e:
3b:b7:6f:b6:fe:df:46:d1:6e:dc:d0:20:b2:f9:1a:
e4:0f:c7:10:e6:25:1a:95:95:99:98:b5:c4:eb:1b:
5e:4f:1d:ed:b2:b0:e0:d5:c5:08:dd:14:12:40:6b:
dc:f3:0f:24:27:96:74:d8:ac:bd:fb:ef:62:e6:75:
33:a0:3e:63:c7:b7:17:c0:3a:5e:e1:22:52:47:7c:
c7:d2:0b:fa:75:5d:68:85:eb:1a:4a:13:bf:4f:62:
7f:9a:e8:e4:8c:0a:0e:d0:04:00:4b:09:72:e5:f9:
55:cf:93:9c:6a:dd:b4:4b:dd:78:6b:28:be:98:9f:
b9:3a:98:b5:5e:70:71:d8:07:c8:3c:62:ff:25:e4:
20:28:7f:c9:cb:23:39:f9:28:38:ca:ac:bf:bd:a8:
87:39:26:5b:56:31:2d:ea:b0:49:60:6d:1a:63:08:
96:91:2b:34:c1:1e:ed:cb:8c:2e:2e:ea:4d:93:b2:
d2:1a:3c:d1:d6:dd:a4:f9:c8:66:20:68:fa:d8:89:
e6:87:3d:32:b6:50:a5:7f:58:00:fb:57:81:7b:23:
08:4e:01:bb:20:4f:6b:ea:0a:1e:a0:0a:b3:2c:1e:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:23:41:DF:5F:99:DE:9F:B9:56:08:84:F3:58:A7:27:74:B6:A3
X509v3 Authority Key Identifier:
keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:83:79:69:c4:7b:3a:64:5d:2a:c4:2d:c5:92:97:f4:e6:
28:d5:7e:97:bb:39:bd:c2:3f:96:a6:59:4d:b7:a6:57:bc:2c:
a5:a9:7e:70:cc:e2:73:6a:84:e7:a8:87:e3:56:48:90:37:db:
5a:66:9b:b9:fc:a6:09:39:17:e4:17:26:01:cc:6f:46:5d:6e:
fd:3d:db:aa:d1:0c:8d:6c:ff:d4:02:54:8d:d9:02:9a:ce:d0:
bd:45:ab:d2:0d:43:ae:0d:7a:56:fd:5e:8f:b8:24:a0:58:b7:
e1:9b:63:83:0b:02:cc:65:7c:96:77:19:8e:f5:19:71:3c:37:
bf:9d:69:da:91:40:8d:a2:42:c8:cb:4b:1b:b4:b9:aa:d5:01:
56:49:2f:84:da:fc:43:82:43:fd:75:4b:54:72:d8:95:f0:e1:
f4:ee:99:48:02:1f:86:c6:6a:20:61:30:71:47:44:84:d4:0c:
9e:7d:5d:be:79:88:ca:4d:42:b1:d4:68:a1:2f:82:47:b5:ff:
c6:be:17:85:39:fc:8e:2a:ac:2a:2d:44:7e:dd:f5:9e:de:96:
60:40:a6:b9:36:d4:4d:ae:87:57:31:d4:19:64:f5:a4:79:c9:
a5:61:ad:75:61:94:54:c2:7e:74:c2:5b:37:67:dd:ac:9e:13:
d2:15:4e:4d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPGay1w95eHpfpJReE151jy5Ce+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0
RjRBMkVGMTAeFw0yNjA3MjQwNjQyNDBaFw0yNjA3MjUwNzQ0NDBaMDMxMTAvBgNV
BAMTKDAzNDUyMzQxREY1Rjk5REU5RkI5NTYwODg0RjM1OEE3Mjc3NEI2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9b/REk9cbyJ8CphRMBdWHh/v
DynCuV8JiEBwLju3b7b+30bRbtzQILL5GuQPxxDmJRqVlZmYtcTrG15PHe2ysODV
xQjdFBJAa9zzDyQnlnTYrL3772LmdTOgPmPHtxfAOl7hIlJHfMfSC/p1XWiF6xpK
E79PYn+a6OSMCg7QBABLCXLl+VXPk5xq3bRL3XhrKL6Yn7k6mLVecHHYB8g8Yv8l
5CAof8nLIzn5KDjKrL+9qIc5JltWMS3qsElgbRpjCJaRKzTBHu3LjC4u6k2TstIa
PNHW3aT5yGYgaPrYieaHPTK2UKV/WAD7V4F7IwhOAbsgT2vqCh6gCrMsHtE/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUA0UjQd9fmd6fuVYIhPNYpyd0tqMwHwYDVR0j
BBgwFoAUwHSD/Rj/GDnmKiT/jtYHpE9KLvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDY3ZmI4MzctMWIyZi00YzRlLWI5OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQx
OEZGMTgzOUU2MkEyNEZGOEVENjA3QTQ0RjRBMkVGMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMDc0ODNGRDE4RkYxODM5RTYyQTI0RkY4RUQ2MDdBNDRGNEEy
RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5
OTktNmU5OTBkZGMxNDk5LzAvQzA3NDgzRkQxOEZGMTgzOUU2MkEyNEZGOEVENjA3
QTQ0RjRBMkVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG+bg3lpxHs6ZF0qxC3Fkpf05ijVfpe7Ob3C
P5amWU23ple8LKWpfnDM4nNqhOeoh+NWSJA321pmm7n8pgk5F+QXJgHMb0Zdbv09
26rRDI1s/9QCVI3ZAprO0L1Fq9INQ64Nelb9Xo+4JKBYt+GbY4MLAsxlfJZ3GY71
GXE8N7+dadqRQI2iQsjLSxu0uarVAVZJL4Ta/EOCQ/11S1Ry2JXw4fTumUgCH4bG
aiBhMHFHRITUDJ59Xb55iMpNQrHUaKEvgke1/8a+F4U5/I4qrCotRH7d9Z7elmBA
prk21E2uh1cx1Blk9aR5yaVhrXVhlFTCfnTCWzdn3ayeE9IVTk0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:04 2026 by rpki-client