
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
File: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft (raw, json)
Hash identifier: TDQ4Zb5exunfHaMuXsLcZq5jHo3K/lAquou9xI98sI4=
Subject key identifier: EC:13:DE:57:2C:48:38:C1:BF:46:CC:44:13:BD:C3:8D:06:A4:0C:17
Authority key identifier: D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C
Certificate issuer: /CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
Certificate serial: 5104DF7AE696DC1E46B4EBE68EC1922D564C1E6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 20:14:45 +0000
Manifest this update: Thu 23 Jul 2026 20:09:45 +0000
Manifest next update: Fri 24 Jul 2026 21:53:45 +0000
Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: qJeB9IbjX5ag+QxaHUzr5lUIsrKHS9OTMwiaemsfQJ0=)
2: D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl (hash: 6ImVTEp3iZZcYyy0y2JxAVwHwcjpwN2h3X0MiCRjfJw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl
rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:04:df:7a:e6:96:dc:1e:46:b4:eb:e6:8e:c1:92:2d:56:4c:1e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5484CC7340FD38FD152B951A812A7BB0D2DC74C
Validity
Not Before: Jul 23 20:09:45 2026 GMT
Not After : Jul 24 21:53:45 2026 GMT
Subject: CN=EC13DE572C4838C1BF46CC4413BDC38D06A40C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:05:e2:45:08:99:e5:cd:d1:6a:a6:cf:8c:
01:5b:32:e5:88:0c:11:aa:74:42:4f:c1:87:d5:1b:
b4:77:33:1a:b4:46:1c:cd:88:5f:2e:dc:6a:00:a6:
fb:e8:66:ae:96:08:9c:85:da:6c:a6:05:94:7b:6e:
5c:69:f6:56:85:de:67:ad:b8:35:19:87:29:60:a1:
f8:5b:b7:49:cd:66:88:5a:98:32:2f:e4:18:54:1e:
56:64:fa:d3:0b:4a:c1:46:cc:bd:de:66:ce:42:95:
a9:35:86:82:20:0e:77:56:5a:85:01:23:08:9c:5b:
17:af:43:61:3a:cf:1c:e1:6a:19:e6:29:da:3e:a6:
ae:dc:d0:f6:8e:3d:d8:b3:51:8d:a5:b6:7c:46:c2:
67:b6:51:e2:c2:24:02:4a:74:aa:21:b5:d7:46:f2:
6a:86:e5:f1:7f:cd:63:cf:8c:ae:7b:98:2f:77:a0:
4b:3e:47:2f:e8:7c:dd:e0:8c:c2:0d:92:b5:3f:8b:
ad:ac:60:17:b2:b7:3c:2d:2b:92:39:3f:da:7c:c4:
ce:19:a4:b3:92:92:6e:f4:d3:22:29:f4:8f:47:d1:
c8:c3:a9:8b:ec:ed:4e:83:be:72:64:f5:ef:ad:cb:
bf:4b:e1:95:3c:d6:6e:db:c8:20:06:4c:49:4d:d6:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:DE:57:2C:48:38:C1:BF:46:CC:44:13:BD:C3:8D:06:A4:0C:17
X509v3 Authority Key Identifier:
keyid:D5:48:4C:C7:34:0F:D3:8F:D1:52:B9:51:A8:12:A7:BB:0D:2D:C7:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/D5484CC7340FD38FD152B951A812A7BB0D2DC74C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:27:17:ed:ec:ca:eb:22:76:3c:7e:c9:33:8e:52:f2:99:c6:
50:ba:e9:a4:63:b4:67:51:23:c6:05:71:69:d8:ab:06:6d:aa:
84:94:76:ed:7f:2b:0b:13:4c:c1:a3:f6:70:03:2b:aa:68:a9:
06:7e:fb:fe:59:f5:d2:bd:b1:91:8c:cc:3b:8f:d1:c9:8a:66:
6f:13:72:33:06:5c:35:42:ee:45:90:09:8c:67:e9:9a:7f:b4:
55:f8:8e:6d:b5:fc:dc:21:5e:c2:c2:61:87:27:8c:a0:03:41:
71:9d:4a:3c:37:24:6c:cd:ce:68:00:43:39:5c:5a:50:41:8c:
76:09:f1:c2:4f:c4:28:ae:ca:87:c0:a3:2c:97:09:05:ec:e2:
27:b7:9d:5e:39:c8:9e:9e:06:25:fb:87:9f:86:84:49:59:e4:
78:63:a0:fc:c1:f7:43:87:ef:a5:bc:e3:bd:eb:80:10:17:53:
3f:a1:3c:e5:eb:34:ac:a2:af:c6:a7:58:30:8b:77:6d:00:b9:
7d:97:f1:4b:0a:43:6a:fa:80:28:49:c1:bc:9c:d7:0a:75:99:
8f:f4:22:3f:d0:aa:30:65:34:1c:ab:ac:80:cb:96:89:e3:50:
56:f9:e7:6e:15:04:28:ca:d6:e2:29:cc:39:a3:20:92:61:70:
a3:32:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:28 2026 by rpki-client