
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
File: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft (raw, json)
Hash identifier: xzKfk8AwdU5Dm8qJY2rxeoEK/56D3285eapjGqsISOA=
Subject key identifier: 52:3A:21:27:89:57:8E:8C:FD:55:B8:83:68:61:12:BA:84:08:2C:E6
Authority key identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23
Certificate issuer: /CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
Certificate serial: 5934FB9611CDD4BC810BFC10FF8BBB56410FFC1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 07:41:25 +0000
Manifest this update: Tue 28 Jul 2026 07:36:25 +0000
Manifest next update: Wed 29 Jul 2026 10:26:25 +0000
Files and hashes: 1: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl (hash: IFSm/dD+YyZRq8t8mBDsHqb84p0PMr1Jozcx2ygT5rc=)
2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: rfB6zIUPCXAZ3rM7YYBLHBGPxWnBvq/A8DFJMLeaqGo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl
rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:34:fb:96:11:cd:d4:bc:81:0b:fc:10:ff:8b:bb:56:41:0f:fc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
Validity
Not Before: Jul 28 07:36:25 2026 GMT
Not After : Jul 29 10:26:25 2026 GMT
Subject: CN=523A212789578E8CFD55B883686112BA84082CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:72:bb:67:52:cb:de:84:db:51:a1:0f:56:
9c:1f:bf:3e:b5:8c:84:fe:7e:88:ee:86:e5:24:a9:
9c:42:6d:80:fd:bf:b4:b0:2f:97:23:b7:84:04:1e:
a8:4f:77:27:f5:d9:c2:70:54:c3:57:70:e4:16:cd:
c7:6d:b5:a4:8d:62:36:3d:c4:db:07:18:95:fc:e1:
26:bf:6c:85:b0:e5:0e:83:12:5b:c4:ef:01:5a:c0:
cd:76:50:d0:a1:c5:51:d0:0c:3c:c9:05:f7:1b:26:
ad:b2:3b:f8:24:60:d8:67:af:0a:41:b3:d5:cc:eb:
52:61:bb:5f:9c:ac:03:a7:d3:cc:06:44:17:16:8c:
7a:47:f3:d4:58:0b:00:73:37:c8:a7:c1:0a:12:33:
c7:f8:c4:99:04:29:5f:ef:4a:ad:e2:85:73:47:1e:
c9:40:35:84:45:de:16:ce:eb:e4:0b:5e:62:a1:35:
a1:61:6f:c0:39:44:d2:38:99:5e:53:63:13:8f:55:
24:5e:48:1b:56:3a:2f:b1:c3:1b:8f:a6:6b:df:55:
4d:69:c7:f0:be:8c:c9:e0:81:b9:3d:49:a4:bb:45:
80:f2:ea:ee:13:c5:ae:75:80:77:f6:bd:ed:be:99:
ca:73:99:b2:1f:2a:ed:3a:74:a5:08:85:05:b5:49:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:21:27:89:57:8E:8C:FD:55:B8:83:68:61:12:BA:84:08:2C:E6
X509v3 Authority Key Identifier:
keyid:60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:92:db:0c:71:a5:27:04:c7:a4:f0:44:11:74:ff:b5:ea:
63:b5:d4:ba:ae:c8:1c:54:d3:da:ae:55:85:ff:c1:f3:af:4a:
c5:26:59:59:09:2a:f6:57:2e:07:24:a3:ff:c2:84:9a:18:4e:
7c:64:7c:25:01:dd:eb:9c:9b:b6:43:58:c5:2a:21:ba:34:3c:
51:5e:15:5c:61:ba:05:a3:ea:c1:d1:f7:0a:5c:29:0e:94:db:
74:36:97:79:0a:4e:84:22:8c:f4:b9:52:9a:1c:7a:c0:58:5d:
77:4e:ca:78:13:95:e5:e2:09:ed:fd:fc:53:2b:06:01:13:4c:
25:79:8c:a2:94:7a:3c:7a:b6:19:a7:e8:16:67:da:8c:f0:30:
53:ee:f3:0b:31:bb:e5:eb:b3:d0:3d:cb:ea:68:fe:60:81:c8:
d8:e5:a2:26:7b:d7:cc:3d:11:e5:07:18:d4:37:a7:56:51:0c:
07:fc:cf:dd:32:ae:02:cf:aa:48:e3:52:eb:cb:68:1b:82:13:
aa:a8:25:28:94:ab:78:d4:75:d6:0b:98:27:48:de:50:8c:7c:
72:09:d1:e2:89:e3:44:7c:12:c7:4a:bc:4a:8f:e6:78:b6:a8:
c4:ed:ae:b2:90:06:9f:cb:ff:40:7d:89:16:de:5b:ca:ad:57:
a5:4e:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:58 2026 by rpki-client