
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft
File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json)
Hash identifier: vellZ5gD8a+6UUr2kXpykMyIPuJ3U+48kuwdbZuhbr0=
Subject key identifier: 76:91:11:72:B1:72:50:9F:94:72:E9:AB:71:3A:76:62:13:AB:EF:1D
Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D
Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D
Certificate serial: 63B5DFD62FC083DE827D2E37B8577B08DA2C52BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 14:07:15 +0000
Manifest this update: Thu 23 Jul 2026 14:02:15 +0000
Manifest next update: Fri 24 Jul 2026 17:28:15 +0000
Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=)
2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=)
3: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: MOniL3r7TN9bChiCsCFgzaTv5AmySbrX7wVD0mhBoec=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl
rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b5:df:d6:2f:c0:83:de:82:7d:2e:37:b8:57:7b:08:da:2c:52:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D
Validity
Not Before: Jul 23 14:02:15 2026 GMT
Not After : Jul 24 17:28:15 2026 GMT
Subject: CN=76911172B172509F9472E9AB713A766213ABEF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:84:17:4d:58:78:bf:90:5f:d4:37:52:18:
b0:6a:41:56:d4:9d:18:c8:16:ba:9b:0a:7b:a7:41:
54:69:55:6a:e3:50:7a:57:43:5d:b9:22:f2:f9:43:
be:18:1e:3a:78:71:c5:fa:3a:51:aa:2c:91:03:fe:
c8:f9:82:29:2b:99:5f:b0:16:15:e6:05:b9:3d:03:
14:e1:98:00:b2:bb:fe:b2:86:ab:08:c7:bb:05:62:
27:a0:57:b7:f2:ec:ff:75:ee:ac:51:af:d3:c4:88:
bb:3f:0a:55:2d:3f:81:04:62:ee:6d:85:6a:ce:15:
4e:5d:8a:48:20:d1:3d:f9:59:f5:13:d0:29:82:69:
10:5a:3a:2d:2c:4f:63:6c:e5:96:d8:02:3e:8a:40:
df:de:94:77:c4:42:33:72:ec:2c:c6:e3:5a:b2:9d:
2f:bb:bf:c0:de:c3:13:18:41:e5:c0:b5:f1:7f:d6:
de:f3:c2:3a:61:99:b8:4d:67:c9:c7:fc:49:20:f0:
ec:51:df:c8:fe:05:14:6b:17:49:04:02:23:e8:6b:
74:0e:c4:b0:bb:a8:6b:d6:ed:d9:97:a9:12:38:7b:
b3:83:c4:c6:59:76:eb:16:b2:68:68:2f:ff:84:f8:
c2:47:a6:1b:71:00:32:ca:68:fc:d8:ff:bd:d1:db:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:11:72:B1:72:50:9F:94:72:E9:AB:71:3A:76:62:13:AB:EF:1D
X509v3 Authority Key Identifier:
keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ad:ae:5d:e1:1d:e0:09:f6:f1:c7:65:de:58:1a:29:7d:56:
fe:c9:7f:20:16:98:21:83:5e:61:3f:a3:fd:da:de:b1:5e:90:
79:4e:35:91:4c:78:2a:1c:53:f0:98:28:84:cb:5a:9a:e0:a7:
86:89:2b:94:1c:59:f8:fa:ae:b7:6a:8e:c5:f2:6d:a0:a6:50:
5e:70:3f:e2:51:c8:3f:b6:d6:1f:e8:a8:a7:b8:35:7e:c5:b6:
aa:ab:2a:99:5f:59:17:12:a9:7b:ae:21:14:d5:c4:c5:ae:48:
ba:62:0b:a2:16:ac:f4:c2:7c:89:15:75:8a:38:82:0a:33:37:
25:e1:82:7e:13:db:ad:41:60:ab:b9:98:53:29:8f:30:65:cb:
01:3e:3b:0d:c9:42:07:50:dd:3e:c7:db:3e:d0:85:d4:bf:69:
96:3d:ff:e4:50:8e:63:e4:34:73:ba:81:92:37:bb:ae:90:1c:
b5:4d:6f:a4:67:be:f4:14:16:c4:76:1d:9e:c5:a0:d2:86:8e:
38:39:90:c0:d5:0f:e9:41:83:5d:8a:31:fc:17:e3:80:cf:a1:
e5:1e:84:0a:60:21:5a:70:a3:24:ed:3c:32:92:bc:5d:0e:34:
3e:67:76:e9:78:81:24:3e:a4:19:8e:5d:e7:9a:09:09:ef:a1:
f7:fa:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:18 2026 by rpki-client