
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
File: 6372758CCA381920292B5E0D338ECF89D0000FEE.mft (raw, json)
Hash identifier: 3qubrOEacZUvXrSTZ36C50WifqZZ4zR/sFJEluhnWq8=
Subject key identifier: 3B:92:21:F4:65:25:56:54:B5:0C:75:A8:DE:B0:7F:B1:D6:AF:5B:63
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial: 53C465A8A439429D0DD6C513F4B3591C14095C74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 09:57:15 +0000
Manifest this update: Thu 23 Jul 2026 09:52:15 +0000
Manifest next update: Fri 24 Jul 2026 13:48:15 +0000
Files and hashes: 1: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (hash: qVD+Jwv4pLsFsaxaJgqqF4GhPj5gMv8oiQOKOq7eBlk=)
2: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (hash: ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=)
3: 6372758CCA381920292B5E0D338ECF89D0000FEE.crl (hash: dO0bgqUOR6FDQjgAwxJRwVJQ9lYCTkHWpGH3yqjsH2Q=)
4: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (hash: mNLYMhzy89PxQTAE+kur6oFEKDHuq9q324ipGGtSuR0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c4:65:a8:a4:39:42:9d:0d:d6:c5:13:f4:b3:59:1c:14:09:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Validity
Not Before: Jul 23 09:52:15 2026 GMT
Not After : Jul 24 13:48:15 2026 GMT
Subject: CN=3B9221F465255654B50C75A8DEB07FB1D6AF5B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:83:08:67:2d:8c:2f:cf:59:d2:7b:c2:f3:
fd:32:f9:a7:d6:ce:b3:ac:44:57:06:37:98:d7:23:
ad:cd:61:70:83:09:45:23:29:d3:4e:12:89:86:d1:
84:bf:c0:e5:a9:e5:15:bf:3e:33:43:a6:fe:56:9c:
86:07:a3:cf:e9:cd:08:65:9d:e9:78:e1:62:a2:8e:
5b:09:34:48:bb:8f:0e:03:08:3e:a3:c2:4c:a6:ff:
e0:be:e8:7b:f7:c2:c7:b8:4d:63:23:a5:4e:9f:25:
a8:b2:b5:6f:4e:74:1d:8b:70:be:db:20:60:3d:12:
a1:b4:cf:43:bc:17:95:fc:5b:7b:76:ef:3f:98:7c:
cc:b0:bf:13:83:b4:a7:00:70:c2:5c:09:f7:36:d9:
e0:04:b6:db:d0:dc:17:3e:a9:01:85:9d:47:78:b3:
78:d5:4f:21:5b:e2:f9:15:36:38:63:85:59:9e:47:
95:c9:84:d3:de:50:19:1e:ac:ed:e1:20:9f:48:6f:
61:a0:58:c9:3b:cf:1c:f0:fc:3a:09:b8:ba:e8:da:
b4:e4:54:43:49:03:f5:1b:6c:c1:6f:ec:2f:97:51:
35:f3:6d:23:5c:3d:8d:64:1f:d7:39:cf:6c:6f:ab:
de:c2:64:c2:17:78:65:5b:0a:da:bb:5d:fa:4f:2b:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:92:21:F4:65:25:56:54:B5:0C:75:A8:DE:B0:7F:B1:D6:AF:5B:63
X509v3 Authority Key Identifier:
keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8f:27:40:92:55:52:fc:09:f1:01:e7:6f:50:fc:1a:50:7c:
f9:2b:10:b9:97:47:5e:90:e1:da:6b:29:74:b7:4f:9b:da:4c:
48:63:e5:f1:5c:0d:c3:c4:fb:57:61:5d:f9:4e:25:6b:31:de:
56:4e:71:c5:58:0e:65:a0:43:8d:40:f5:26:63:aa:e3:44:62:
7d:fa:f6:d2:ad:47:e2:d4:af:5b:0c:db:75:5d:c4:d5:2a:49:
67:56:98:31:0f:45:52:26:07:d7:f5:08:fa:b0:9c:82:b5:0b:
bf:fd:a4:97:4b:d0:f9:ee:c4:aa:bb:5b:91:0d:73:ba:6b:97:
7e:78:fa:2c:32:3d:18:f7:df:51:60:f9:20:86:a7:ae:b8:dd:
ce:3e:13:40:59:a2:06:e9:fc:80:a3:73:fc:79:d7:85:46:18:
8b:82:cc:e3:99:df:33:56:55:fb:c1:cc:1a:dc:f9:aa:70:0c:
7e:2b:34:9b:b7:40:68:7c:81:db:88:a1:71:23:12:b4:5a:de:
19:5e:63:54:35:e0:a4:6a:ea:04:b9:a9:98:5a:63:6a:53:0a:
67:bd:05:51:d6:48:df:aa:be:87:38:18:80:d4:f6:7d:33:1d:
59:37:ef:e2:8b:bf:f9:09:eb:6b:79:64:cc:f9:41:1a:1a:4b:
fa:ef:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:37 2026 by rpki-client