
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
File: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft (raw, json)
Hash identifier: 7eWYZCtf1F/DEyjMyXEz5hRkp2cglXekkrUxOsD4WHU=
Subject key identifier: E1:FE:AD:21:55:32:DC:7E:99:DA:1F:34:6D:3C:F4:F4:7D:E9:17:F4
Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
Certificate issuer: /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Certificate serial: 1CAA366F252F8D3EC35F3CE4C451367451008463
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:17:07 +0000
Manifest this update: Fri 24 Jul 2026 02:12:07 +0000
Manifest next update: Sat 25 Jul 2026 03:24:07 +0000
Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=)
2: 693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl (hash: dubmXw/ONpgTnwfUet+mNU3A8WBpRz3ale4n/elP/DQ=)
3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:aa:36:6f:25:2f:8d:3e:c3:5f:3c:e4:c4:51:36:74:51:00:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Validity
Not Before: Jul 24 02:12:07 2026 GMT
Not After : Jul 25 03:24:07 2026 GMT
Subject: CN=E1FEAD215532DC7E99DA1F346D3CF4F47DE917F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:1b:ae:99:16:38:6b:52:81:68:bd:5f:2f:
d5:6f:ce:ff:16:92:a7:5a:c8:3f:32:d6:64:ec:37:
fd:b8:2d:bd:e6:6c:31:7a:1e:b3:5e:c0:fc:97:69:
1d:3b:88:2d:11:f3:4e:0d:1c:ba:f2:dc:5c:bc:1d:
95:e8:b7:77:aa:8c:88:7f:84:c5:9d:71:a0:8f:7b:
8e:1b:92:0a:90:9f:3f:e2:45:06:1b:f3:e6:69:f3:
cf:4f:63:b0:52:60:3d:84:f5:60:ca:b8:6c:81:28:
5f:90:5a:a4:4b:1d:54:13:76:30:89:53:66:84:09:
dd:50:f6:d0:d2:70:de:23:e1:dd:9f:a5:4d:83:0a:
7a:87:e1:10:57:86:f8:db:10:c6:75:01:cb:9a:16:
53:1e:9f:31:4c:2c:b6:8d:5e:df:a7:89:60:dd:8a:
0a:bb:94:1d:d7:d0:04:1b:b1:aa:de:5d:da:44:39:
4f:c2:cb:43:5f:71:35:9a:a2:91:b7:42:c3:ec:5d:
f8:8a:4a:ad:f9:eb:06:f3:53:77:da:00:de:83:db:
c9:d0:ec:9c:eb:64:55:00:aa:e8:c8:47:bc:b0:90:
e4:51:80:1b:12:e7:1b:41:74:14:be:45:d5:75:89:
62:f4:2f:c1:fb:5c:01:e0:26:ec:5c:27:74:88:64:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:AD:21:55:32:DC:7E:99:DA:1F:34:6D:3C:F4:F4:7D:E9:17:F4
X509v3 Authority Key Identifier:
keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:1a:e6:ef:e5:0a:cc:ac:58:c2:c8:c6:c4:94:1a:31:3d:
15:60:54:d9:c2:aa:50:10:d0:94:e3:96:0c:af:ce:e3:b0:79:
23:90:c7:76:64:62:c6:c4:28:61:ba:4a:82:8b:e3:a5:5b:a9:
7a:ba:30:3f:8a:14:92:c6:34:82:8e:1e:cf:5d:a2:21:61:bb:
4e:93:5e:60:bd:7c:a3:62:c6:0f:39:84:70:ef:00:97:37:bf:
5c:63:c6:f4:9d:7a:c2:25:58:97:1f:37:b6:c9:7c:8e:b9:10:
8d:a4:6d:3c:b0:3f:4b:8b:19:33:32:a6:c6:e2:2f:55:5e:1d:
e5:87:e6:8e:4a:12:fa:18:3d:53:d6:84:c7:37:09:53:91:06:
5c:6e:7c:a6:ff:c6:44:40:6d:8e:0c:9f:ec:b5:04:75:46:11:
69:15:a5:32:76:10:30:f4:19:65:59:4f:62:84:2a:41:c8:33:
36:28:74:69:e7:57:ac:17:f8:98:d3:d7:87:1f:67:11:f9:5b:
d9:0c:2a:2d:54:d5:fe:64:e8:70:af:0f:f2:dd:58:d7:4e:52:
2a:1f:12:cb:94:82:d0:5e:22:4d:cf:f4:e4:d3:be:44:02:a5:
0b:43:3d:62:1f:80:5e:12:50:cd:8b:b2:7b:09:16:09:72:70:
b8:a8:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:24 2026 by rpki-client