
$ rpki-client -vvf rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft
File: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft (raw, json)
Hash identifier: taS3Q3nb8rpALZ6DX4rmK1aZ27U04rD7Xn0uJn0j6kU=
Subject key identifier: 05:64:E2:FD:FA:FD:E2:6E:A7:56:B3:9D:D4:8F:61:59:68:36:77:86
Authority key identifier: AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A
Certificate issuer: /CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A
Certificate serial: 1DA684DC6C20C7925C5D995FBA578D18EB05B648
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:52:45 +0000
Manifest this update: Thu 23 Jul 2026 22:47:45 +0000
Manifest next update: Sat 25 Jul 2026 02:02:45 +0000
Files and hashes: 1: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: NH4yUQHyXjk48GXKuIwjhyG7vZ+Cx25bwYRUGuZituk=)
2: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K0hWr7nblRa/oP+EjsYT3ozmxs7zbRuzowY36KyLRjU=)
3: AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl (hash: t9UpiUuLd8bI3ykAUJ3xfO5enHXt5djT+lMYqPPar9Y=)
4: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: HdNzGHLZKPYzFVkh/tdlOMNe0NE8KbyBRcBVr8tLORE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl
rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a6:84:dc:6c:20:c7:92:5c:5d:99:5f:ba:57:8d:18:eb:05:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A
Validity
Not Before: Jul 23 22:47:45 2026 GMT
Not After : Jul 25 02:02:45 2026 GMT
Subject: CN=0564E2FDFAFDE26EA756B39DD48F615968367786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:e7:4d:07:48:49:8a:e0:39:67:9a:79:fb:
78:4c:a5:72:d3:e4:2f:e2:8a:0c:e9:8c:55:b1:38:
6e:6f:32:97:4f:f2:c1:4b:26:16:fa:78:9e:bf:25:
67:bc:30:6e:78:e8:6f:90:04:65:5d:79:8e:a7:3a:
57:14:56:38:37:a0:30:65:f2:63:cf:7e:c0:51:35:
64:93:24:20:03:25:a2:b5:02:f6:b4:e0:db:cc:93:
6d:2a:62:73:1d:18:16:7d:f3:06:9d:95:c4:db:5f:
b3:a8:c0:bb:0d:5e:51:89:f3:c1:cd:fb:e2:ca:2b:
24:bf:1d:d5:1a:4c:4f:07:b9:55:c5:d1:65:32:ed:
df:3a:fc:7d:0e:c1:be:f2:0e:2f:9d:f0:58:5d:43:
85:74:0e:02:d1:05:1b:da:3d:97:e3:cf:4d:86:e7:
d0:26:2d:64:a6:f1:0e:89:76:76:9f:2f:fb:48:54:
7f:cc:4b:af:80:4f:6c:df:17:a2:a1:7e:bc:2a:9c:
39:47:e7:e9:25:95:30:51:67:43:6a:32:88:f5:ce:
20:02:f8:c9:2f:ba:bb:53:12:19:2c:fa:d6:7d:63:
13:8f:44:ee:8d:a8:25:0c:c7:30:00:a0:75:1c:c9:
61:25:27:7b:0f:ce:64:b3:e4:08:a0:0b:8b:b0:e3:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:E2:FD:FA:FD:E2:6E:A7:56:B3:9D:D4:8F:61:59:68:36:77:86
X509v3 Authority Key Identifier:
keyid:AD:6B:0A:2D:06:A8:57:71:D2:A2:F1:AF:69:B2:9A:53:51:A6:FE:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/AD6B0A2D06A85771D2A2F1AF69B29A5351A6FE2A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e8:86:66:5a:f9:6d:09:ef:ca:07:c7:ed:91:fa:c0:50:fc:
d8:79:96:62:93:b7:8c:70:bf:15:94:fe:20:39:2f:27:08:84:
f4:99:14:e3:93:da:d0:e7:fa:26:f0:17:63:67:51:73:df:bb:
4a:bf:c4:3e:d5:4d:75:1a:ff:d5:68:2f:3a:9d:e5:78:85:7f:
4e:ca:44:b9:60:6e:86:19:be:00:a5:10:f6:67:27:c8:20:62:
e9:03:91:45:d9:78:51:78:f8:4b:67:69:79:93:76:fd:8d:d6:
f4:93:f0:cc:c2:ff:d8:53:95:77:12:56:7c:e5:88:b5:80:8d:
1a:b9:3e:a3:80:ac:77:76:d3:b3:3b:ec:60:fc:18:a6:bc:83:
55:87:d9:e7:73:4d:8a:eb:e2:5d:77:b6:27:a0:e3:74:ea:41:
b4:63:a3:4a:4f:d8:5e:56:4d:2c:70:46:8a:b8:19:84:a7:0e:
bb:a5:13:14:19:05:a4:dc:84:1f:a5:a6:62:44:e6:4f:c2:4f:
b6:9b:ae:b3:35:6d:08:79:ee:23:89:14:ce:24:ac:1f:14:6e:
0e:59:71:18:5c:af:04:cc:59:d6:d1:8f:5a:33:88:54:e4:b4:
ee:82:cd:be:b8:d3:fd:8c:8d:49:88:cc:ef:9e:eb:2f:80:34:
d9:cc:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:35 2026 by rpki-client