
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
File: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft (raw, json)
Hash identifier: qbRlLCYk9dxbe1TVxNFe1Zi3+R1Q5PTKf3UGu5q76Kg=
Subject key identifier: 28:6C:14:91:49:3C:4E:06:EB:70:6D:B2:58:C1:3E:E0:57:E3:B9:EE
Authority key identifier: 63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
Certificate issuer: /CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Certificate serial: 0EC2973ED3BA4B073ABA46E38389093CF6B263C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:58:06 +0000
Manifest this update: Tue 12 May 2026 06:53:06 +0000
Manifest next update: Wed 13 May 2026 09:05:06 +0000
Files and hashes: 1: 6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl (hash: f3Iibrnb+SzHthn6VP8rDflqqgt3sc7yjG3V2OucbHM=)
2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: Iu8i3UFA5NfxNCWcLP6UJ8lab0FJ/BYVXvfcqAte7gA=)
3: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: xf+UK/SwcRIX/nRJ4Hg+4DQ/f5k64bhWTyYNX0IjW+4=)
4: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: UKBnj/25IlskFYrMWggMls6cOgB4lTLBiHIfSuSGJ+4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c2:97:3e:d3:ba:4b:07:3a:ba:46:e3:83:89:09:3c:f6:b2:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363B96D9294EBB9876AABF2EA1A2DB0DD553D87
Validity
Not Before: May 12 06:53:06 2026 GMT
Not After : May 13 09:05:06 2026 GMT
Subject: CN=286C1491493C4E06EB706DB258C13EE057E3B9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:f7:09:44:48:49:e5:53:34:7c:47:9e:8c:
0e:6e:41:2c:99:c1:1d:53:0a:79:c2:dc:16:8a:b7:
3b:16:15:29:6f:82:36:22:9c:70:c9:90:62:85:3c:
b1:56:c8:8f:69:d7:33:11:f0:3d:26:1b:f5:29:42:
70:a6:1a:e5:dc:79:17:d3:f5:01:c6:5a:03:ff:cb:
6b:de:85:23:eb:1e:da:0a:97:96:0a:f2:5e:86:2b:
85:a9:c1:7f:e2:e5:6a:89:2e:f4:6f:6a:86:b6:63:
0a:7d:30:6a:a9:dc:e8:e4:56:fe:26:5a:2d:d2:f4:
72:b0:ff:06:f4:0a:8d:23:a9:eb:f8:ab:dd:6e:aa:
46:73:1e:0f:2f:87:91:56:c1:ca:8d:48:c5:8f:89:
f2:b5:7f:f3:36:21:41:70:5e:ff:84:fd:4b:7e:31:
4b:f7:19:32:8e:5d:12:32:93:8c:05:73:e1:41:35:
cf:b1:c2:a2:58:c3:9b:f9:cf:a6:36:34:e7:3d:ea:
af:93:89:8c:05:91:85:a4:77:6c:52:52:a7:95:f9:
b4:06:e3:8b:52:16:df:56:74:c4:8b:7d:f6:3a:38:
54:0f:b9:45:25:28:48:7b:9b:7a:09:10:91:a1:2d:
f2:02:9a:ae:db:99:8b:5a:31:f4:31:a9:f3:14:f7:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:14:91:49:3C:4E:06:EB:70:6D:B2:58:C1:3E:E0:57:E3:B9:EE
X509v3 Authority Key Identifier:
keyid:63:63:B9:6D:92:94:EB:B9:87:6A:AB:F2:EA:1A:2D:B0:DD:55:3D:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/6363B96D9294EBB9876AABF2EA1A2DB0DD553D87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d3:c1:f6:1a:a4:a7:23:66:13:d2:b1:43:5e:7c:7a:22:35:
46:be:c7:0f:e4:88:6b:e7:e1:68:d9:05:01:05:12:b2:3d:d8:
fd:ca:d1:90:ef:e7:d4:a1:63:0d:d3:dc:ce:67:10:8e:e9:6e:
57:a0:af:71:35:59:69:4d:1c:45:71:fe:6f:24:d3:6c:1d:4f:
56:61:e6:fd:57:3d:8c:a1:14:69:8b:4a:53:b9:d7:09:f8:c0:
30:df:62:29:c0:33:04:6a:b2:e0:7d:d0:ee:8f:a1:a9:32:42:
7c:f7:69:b4:b1:4a:c7:96:fe:42:d4:b9:0d:2a:ee:32:74:a3:
39:1c:7e:16:fe:e6:1a:90:ba:39:5c:ee:43:37:4a:db:1a:ed:
2c:70:c6:79:17:23:89:b8:c2:72:a8:1e:5a:3e:ea:99:d2:30:
61:ad:f8:e7:af:72:84:17:03:9e:49:2b:f2:ca:73:95:48:20:
65:a7:83:6f:b4:f0:ce:6b:1d:0f:ea:8e:92:7f:80:48:a4:5e:
11:45:7b:39:b7:6c:e3:b0:54:e5:c2:1e:ea:5e:67:cd:91:d4:
cd:d9:9e:50:4b:1d:46:9a:9a:6d:d4:31:03:76:01:26:df:9d:
74:42:c9:26:4e:13:f2:a1:55:05:ab:cb:51:bf:5c:62:31:40:
84:c1:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:51 2026 by rpki-client