
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft (raw, json)
Hash identifier: rjFUu1M/0ssRPPE/vjcHZPqwmcg/VenUAWs8rJuiE5k=
Subject key identifier: FE:90:5E:D1:41:16:3F:A2:7A:3C:85:2C:6E:6E:28:21:8F:A5:6F:80
Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Certificate serial: 75C27D1ACD4A7E822F02E8CDFA240E2E517A2376
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:23:39 +0000
Manifest this update: Thu 24 Sep 2026 02:18:39 +0000
Manifest next update: Fri 25 Sep 2026 05:17:39 +0000
Files and hashes: 1: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: xf+UK/SwcRIX/nRJ4Hg+4DQ/f5k64bhWTyYNX0IjW+4=)
2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=)
3: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: UKBnj/25IlskFYrMWggMls6cOgB4lTLBiHIfSuSGJ+4=)
4: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl (hash: QwCFNBNNtmOXiBw76jPAe+E0SYRt7WuKTOAF/d0AyJI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c2:7d:1a:cd:4a:7e:82:2f:02:e8:cd:fa:24:0e:2e:51:7a:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Validity
Not Before: Sep 24 02:18:39 2026 GMT
Not After : Sep 25 05:17:39 2026 GMT
Subject: CN=FE905ED141163FA27A3C852C6E6E28218FA56F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:21:d4:6b:22:71:29:37:15:c9:32:bb:15:
8b:f6:8f:80:65:70:8e:76:66:48:94:c1:4c:ad:b8:
14:32:af:45:07:c7:11:0f:d5:e4:7e:08:1e:2a:40:
98:b7:82:d3:88:84:e0:b1:70:07:a3:3d:2f:2d:d6:
a6:3c:6d:f3:71:8a:91:04:ae:f9:18:69:8b:c0:d7:
4d:63:dd:86:7c:23:a5:2a:58:e3:84:f0:fb:2e:55:
1c:e1:ec:51:60:38:d2:6d:dd:2e:88:88:5b:15:a8:
9e:c3:16:de:ff:58:07:9c:7b:8e:be:55:b1:b1:f1:
f1:53:d9:fc:05:33:83:2a:e8:52:5a:b7:1b:21:a3:
cd:8f:94:d6:d1:50:23:a8:51:d4:2b:33:90:b4:bd:
e2:fa:18:b9:0f:16:12:d8:36:2f:b3:02:36:c0:af:
0b:c1:b3:e9:a1:93:98:ec:25:c6:9a:d9:89:c3:90:
4f:85:5f:ea:15:2f:af:f1:a9:f8:7d:f9:0a:54:8c:
22:24:65:f1:18:dc:81:f9:38:36:8e:cd:7e:20:c4:
c1:05:97:ae:3e:3d:85:07:ac:50:76:37:83:5d:89:
2b:9c:ac:5c:80:b5:46:08:bf:79:6c:fa:01:b2:84:
c7:6a:ce:6c:17:8e:94:7b:65:24:a1:65:7e:ba:91:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:5E:D1:41:16:3F:A2:7A:3C:85:2C:6E:6E:28:21:8F:A5:6F:80
X509v3 Authority Key Identifier:
keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:c7:12:87:03:4e:9f:5b:08:ae:b3:16:db:4b:5a:df:a4:
1d:01:4d:9b:a6:d9:6e:1d:68:a7:97:ce:2d:40:f4:63:b7:f5:
d4:a8:57:ef:40:88:a0:af:d0:4c:24:43:87:e5:e1:f5:b3:b3:
52:e5:4c:2a:57:6f:5a:80:0f:ad:58:99:b4:f9:9c:b7:34:07:
be:97:6e:6c:17:3a:e2:80:4f:35:62:e5:78:0b:a3:ca:34:83:
7a:f5:21:af:e9:08:a3:5b:a6:08:1f:79:70:32:03:eb:54:0c:
43:41:99:d8:47:17:37:ad:db:86:7c:6f:01:7d:17:90:97:9c:
95:a6:46:74:33:94:32:7c:62:fd:8b:f5:59:8d:12:b3:9c:82:
71:89:0f:fb:94:23:36:f0:2c:92:84:0f:6d:ff:c8:9c:5e:a8:
31:31:70:45:64:a7:96:45:05:f5:ca:63:96:5c:ab:78:2d:53:
5f:52:e9:fa:f2:8a:99:88:61:33:84:43:78:cf:87:33:0d:11:
5c:a4:33:ba:f1:b3:89:43:b0:2f:99:a3:ae:4b:2f:a6:de:15:
ce:6a:60:79:78:b1:a9:28:79:c3:9c:e2:c3:f8:00:8a:91:58:
52:86:98:93:a0:72:e8:0a:56:3e:73:1b:f4:1c:e4:ae:9f:de:
c9:5a:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:21 2026 by rpki-client