
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json)
Hash identifier: y6QKcooQuRE8Xq/+5ssSDReTPRE7wffb+ekIqYKJDXo=
Subject key identifier: 99:C1:C1:68:B4:9E:C0:E0:12:0F:4D:C3:F5:4D:43:55:BF:7A:A7:FF
Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Certificate serial: 06C41B82C554C939C10AD966D59CE05BE9F74938
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 14:03:50 +0000
Manifest this update: Tue 28 Jul 2026 13:58:50 +0000
Manifest next update: Wed 29 Jul 2026 16:53:50 +0000
Files and hashes: 1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: AaldvnJCxEqzAP3gAHrS9AcGlA16zFgMrsMzmy/WZSU=)
2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c4:1b:82:c5:54:c9:39:c1:0a:d9:66:d5:9c:e0:5b:e9:f7:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Validity
Not Before: Jul 28 13:58:50 2026 GMT
Not After : Jul 29 16:53:50 2026 GMT
Subject: CN=99C1C168B49EC0E0120F4DC3F54D4355BF7AA7FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:24:c0:1f:0f:7b:e4:a2:51:18:ed:db:f6:
50:da:76:b7:6e:db:0b:af:ec:39:a3:ac:76:e9:66:
59:7a:78:43:08:36:8b:52:e6:56:fc:23:d8:20:d1:
20:37:7c:80:9f:e1:3a:5b:98:cd:18:10:ff:43:b4:
11:70:4a:4f:63:5d:b1:38:e7:54:8e:c2:9d:38:5a:
30:7e:92:80:a4:da:13:4a:b6:74:1f:93:a7:27:9a:
1c:4c:a5:4c:84:90:a4:c8:3a:8f:fb:f9:57:05:52:
46:08:df:69:ed:38:08:e8:8a:e9:49:9d:4e:d9:14:
24:58:eb:6d:ea:ea:c0:a9:52:cc:92:17:c4:1d:36:
67:1e:f0:84:35:89:e0:c6:7d:dc:de:27:ea:3a:89:
60:7f:92:8c:97:d7:ab:7f:5d:18:19:cf:2d:6d:c3:
67:ac:df:b1:37:aa:d1:82:6b:5e:7b:95:c9:3b:f5:
7f:d3:b4:8d:8f:04:e9:ce:14:61:62:55:9a:f5:f8:
26:21:fe:1b:58:38:53:b8:b4:46:f0:2d:32:a8:04:
4e:08:68:09:7d:16:40:c7:bf:0d:57:02:37:8a:ca:
6e:52:11:96:5a:e7:1b:27:b8:20:8a:9a:99:a4:9c:
7c:c4:64:38:33:a7:b3:99:2e:7e:35:6c:fd:20:bf:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:C1:68:B4:9E:C0:E0:12:0F:4D:C3:F5:4D:43:55:BF:7A:A7:FF
X509v3 Authority Key Identifier:
keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:17:81:fc:19:2f:81:00:a8:b5:07:e5:67:ca:bb:97:3a:
6d:d1:4c:dc:fc:96:fb:66:0c:80:3d:de:0e:f3:ed:b9:b1:f3:
5f:d6:07:0d:8d:f1:c5:3a:03:2d:5e:c6:1d:8e:60:ba:b7:25:
a7:c3:cf:cd:9b:ec:c2:92:8d:cb:d2:3a:3b:f2:99:37:b2:20:
c5:f9:7d:d9:b9:9d:1f:1e:a1:f1:e8:e4:14:42:16:52:ce:e1:
e4:b6:d1:34:ee:18:ce:98:e8:16:75:98:7b:bd:73:cd:72:cf:
a0:74:fb:1e:a7:86:a7:9c:f2:bd:36:74:29:1a:a5:73:50:9c:
90:b1:ed:44:61:63:40:a5:ac:dc:93:3e:4a:b3:99:e9:c7:57:
6d:a6:a0:8a:8c:d0:71:ad:a7:3a:69:19:c3:1d:1f:f3:76:f0:
cd:ad:a1:68:b9:0b:ec:2b:ba:fa:fc:65:64:77:5d:e7:89:b6:
3f:5d:e9:ec:ce:55:e8:bc:61:4a:2c:a6:ec:1e:66:cf:8d:a1:
ef:01:34:7a:cf:4a:63:b0:55:8f:c7:75:4b:55:22:82:7f:38:
4f:ae:e2:72:67:55:33:1a:b4:e5:ad:09:ad:8d:3e:e3:c2:50:
4f:05:f8:9d:14:c8:8c:13:6d:bd:37:7f:ba:b7:4e:6f:d9:ad:
e6:ff:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:10 2026 by rpki-client