
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
File: 354106638019F94606F5ABA3A90FEB87A8A7FA76.mft (raw, json)
Hash identifier: ONJ4l06Z7ioc92HEMONQm6CNqhOw4ZbKh+I1q3IdZUo=
Subject key identifier: 1E:89:33:42:75:FC:C5:6E:7F:9C:9A:60:82:6E:77:D1:E5:A5:4C:96
Authority key identifier: 35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
Certificate issuer: /CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Certificate serial: 3703C87D2C071768D1313ED307AFC31EEE75B17A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:31:13 +0000
Manifest this update: Fri 24 Jul 2026 05:26:13 +0000
Manifest next update: Sat 25 Jul 2026 06:03:13 +0000
Files and hashes: 1: 354106638019F94606F5ABA3A90FEB87A8A7FA76.crl (hash: O812Jr5QQO4x7C7QJwi8f/Q2EFEA0/rVqP9CfQmxhqc=)
2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: ikR4B1sB9IhhiTpM9SD6KX5Vk82b9oPtczvgaIgOyo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:03:c8:7d:2c:07:17:68:d1:31:3e:d3:07:af:c3:1e:ee:75:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354106638019F94606F5ABA3A90FEB87A8A7FA76
Validity
Not Before: Jul 24 05:26:13 2026 GMT
Not After : Jul 25 06:03:13 2026 GMT
Subject: CN=1E89334275FCC56E7F9C9A60826E77D1E5A54C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:c4:77:e9:e7:3f:82:36:65:7e:e0:7d:2f:
ba:22:8f:15:87:13:3b:96:72:52:df:0b:ea:15:ba:
85:68:41:c0:9d:64:f9:77:a6:ef:87:86:22:8a:51:
f2:7d:10:8c:39:13:79:d7:13:87:5b:7d:84:44:65:
b9:18:dc:e0:c1:99:5e:b4:33:99:fa:68:d4:a7:ad:
5a:04:56:cd:d3:9c:56:3e:03:c6:d9:1a:5d:c2:fd:
bc:fc:be:a0:e4:08:46:dc:c5:93:46:c9:a7:cf:6f:
e1:82:46:92:a2:27:c0:b0:59:3e:09:76:7e:b7:22:
48:36:5e:8f:f4:0a:f9:4c:6b:64:36:c7:b7:b7:79:
90:a2:b2:63:87:51:6b:06:85:49:82:fc:bd:9a:3b:
60:05:f3:e0:51:f0:4c:bf:48:2b:c6:50:0a:14:a3:
ca:d0:1b:81:81:a6:5b:c6:cb:42:43:be:74:bc:2d:
3b:3a:7b:97:0d:c4:e4:d1:13:38:d8:14:9c:bf:63:
6a:f2:ea:61:f2:1f:f8:c9:31:62:8d:84:52:37:f3:
b2:26:98:09:89:eb:ec:cb:f4:b5:75:05:3b:7c:87:
19:b4:ec:c7:55:f2:fb:bd:69:f3:26:20:60:e3:4d:
8b:7e:f7:51:da:38:f3:20:05:f1:85:1c:d4:c8:f9:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:33:42:75:FC:C5:6E:7F:9C:9A:60:82:6E:77:D1:E5:A5:4C:96
X509v3 Authority Key Identifier:
keyid:35:41:06:63:80:19:F9:46:06:F5:AB:A3:A9:0F:EB:87:A8:A7:FA:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/354106638019F94606F5ABA3A90FEB87A8A7FA76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/354106638019F94606F5ABA3A90FEB87A8A7FA76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:63:ab:02:f4:89:0c:0a:b5:a0:b9:b4:ed:83:d1:c4:49:
36:46:74:08:8a:84:ed:40:de:b6:c9:b9:0c:88:ab:c3:91:58:
03:b8:83:07:a5:49:34:7d:b3:4b:15:14:5f:0d:e0:29:74:03:
e2:bf:aa:e5:c7:6f:24:02:f5:a5:93:f1:01:83:7e:0e:ae:cb:
19:fa:4f:99:74:b6:0b:01:c3:e6:20:7e:54:3f:a7:a8:fe:12:
6b:4c:8b:58:a0:2c:a2:6d:ca:d1:5e:9e:5c:c3:dd:a9:2e:3a:
72:d9:ab:29:32:48:88:34:82:ab:99:ec:85:41:d1:c1:73:ee:
3c:7a:83:75:1a:b3:be:21:3f:5c:ad:4c:9f:4e:71:5b:6d:5c:
a3:4e:0e:bf:43:a5:e7:4a:50:7b:8e:49:b9:2c:6a:20:82:fe:
c7:66:0a:15:69:02:77:6f:cd:df:25:aa:05:f1:5c:3a:87:15:
e9:58:99:b9:04:7c:e0:a6:74:64:06:73:67:c7:9f:4f:d2:2e:
33:d5:17:ed:40:54:bb:b0:02:96:80:7b:d1:77:6a:9b:a0:12:
7f:05:90:88:cf:3b:8c:cc:b0:4d:bc:bd:52:f7:36:37:4b:a8:
c8:c5:53:c2:55:87:45:ca:08:95:70:a9:5d:f8:27:c4:34:22:
86:44:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:24 2026 by rpki-client