
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json)
Hash identifier: uqcr1pkV9sfZNK0w+1mu2eLwCZ6Phce4GTCb030peY0=
Subject key identifier: 4E:7C:44:73:15:DF:7C:CF:69:B3:9C:EC:E8:E6:1A:87:B1:44:0B:53
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial: 3E223017C55E0D61826B175FD40F4B3BE0767AD0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 11:25:57 +0000
Manifest this update: Tue 28 Jul 2026 11:20:57 +0000
Manifest next update: Wed 29 Jul 2026 12:05:57 +0000
Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=)
2: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: YxcZcVc912Ym6k6XJMkO1FK0y19Gxe3T8/rX+SzxnWk=)
3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:22:30:17:c5:5e:0d:61:82:6b:17:5f:d4:0f:4b:3b:e0:76:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Validity
Not Before: Jul 28 11:20:57 2026 GMT
Not After : Jul 29 12:05:57 2026 GMT
Subject: CN=4E7C447315DF7CCF69B39CECE8E61A87B1440B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:73:42:e7:ef:62:e3:b4:71:28:26:1d:01:
fe:6c:a8:a6:23:28:db:06:50:da:53:9e:5c:6f:f8:
4a:2e:95:f2:97:7b:45:97:23:2c:86:f8:83:08:3c:
70:28:b1:83:5a:a9:63:5a:6f:ef:b4:54:c7:c1:67:
cb:bf:5a:49:a4:10:c9:e2:ae:4f:39:f6:82:e3:2e:
9d:c7:2c:77:60:3c:38:f0:b3:e4:40:e7:0a:93:84:
46:11:5c:09:16:56:02:be:09:f4:1c:98:a7:08:2a:
c6:89:10:df:bb:8f:a8:80:98:b2:36:13:a5:7f:db:
0e:a2:3c:0e:22:c2:4f:e8:30:74:ee:9a:38:e3:29:
93:0f:e2:3f:aa:f1:a7:05:07:81:64:73:1d:47:3d:
2d:af:36:fa:1c:7f:16:46:78:c1:34:4f:64:c0:94:
8a:a0:96:cf:dc:03:2d:ff:3f:58:83:db:d8:e2:37:
91:08:f2:38:48:2f:92:7d:b0:cc:75:9b:97:f9:f8:
b1:09:c1:44:77:2d:6a:e4:98:de:21:bf:da:4a:00:
c7:5a:2c:97:b6:f2:4a:ee:60:56:f5:cb:8b:84:2f:
69:81:91:df:d6:71:23:79:ae:29:21:e0:2e:43:ce:
6d:5a:73:74:f1:13:fe:83:f6:0d:77:ee:66:fa:b8:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:44:73:15:DF:7C:CF:69:B3:9C:EC:E8:E6:1A:87:B1:44:0B:53
X509v3 Authority Key Identifier:
keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:d0:35:13:0a:08:f6:66:f9:a9:82:ff:19:55:28:bb:e6:
8a:1a:c3:be:cb:f9:98:b5:35:6e:b7:b5:13:96:f4:5a:fa:9c:
b8:78:f9:f0:69:ee:af:3b:4b:b2:57:a7:bf:c0:ed:a1:d7:4a:
4c:ed:fb:fd:51:f0:ca:c0:43:e8:8b:c9:4c:04:1d:d1:94:45:
84:ff:d0:2f:73:a1:86:b2:d6:a9:6a:0d:85:d5:26:8d:8b:72:
55:c1:b7:49:49:63:dd:75:3c:2a:a0:6d:ae:d7:cc:18:e2:6b:
e0:00:7e:6f:31:ce:08:58:40:a4:88:78:0a:04:64:df:fb:b5:
9c:c5:4a:1c:81:2d:86:aa:a0:d9:0b:bf:d7:ec:cd:ff:c7:cc:
fc:c9:62:ae:ab:55:08:1a:ad:9a:ed:5f:c8:b7:49:24:2f:e4:
2c:12:46:2e:79:62:fb:a1:f7:09:e8:0a:ff:06:63:01:d3:62:
c4:e2:6a:6d:a0:74:9d:69:37:5c:b1:c1:d9:0a:b5:53:eb:37:
79:40:e6:5f:cf:d2:94:d5:65:e0:83:d1:83:11:09:1d:78:a9:
19:e4:d0:21:9f:49:e0:ee:45:1f:92:7d:b3:d6:22:ce:4d:e7:
ed:2d:b7:5c:aa:0f:03:99:a2:28:1c:8a:22:bc:d6:2a:ae:e4:
e1:f4:8e:07
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPiIwF8VeDWGCaxdf1A9LO+B2etAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5
QkMyRjIxRjAeFw0yNjA3MjgxMTIwNTdaFw0yNjA3MjkxMjA1NTdaMDMxMTAvBgNV
BAMTKDRFN0M0NDczMTVERjdDQ0Y2OUIzOUNFQ0U4RTYxQTg3QjE0NDBCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHWHNC5+9i47RxKCYdAf5sqKYj
KNsGUNpTnlxv+EoulfKXe0WXIyyG+IMIPHAosYNaqWNab++0VMfBZ8u/WkmkEMni
rk859oLjLp3HLHdgPDjws+RA5wqThEYRXAkWVgK+CfQcmKcIKsaJEN+7j6iAmLI2
E6V/2w6iPA4iwk/oMHTumjjjKZMP4j+q8acFB4Fkcx1HPS2vNvocfxZGeME0T2TA
lIqgls/cAy3/P1iD29jiN5EI8jhIL5J9sMx1m5f5+LEJwUR3LWrkmN4hv9pKAMda
LJe28kruYFb1y4uEL2mBkd/WcSN5rikh4C5Dzm1ac3TxE/6D9g137mb6uFWVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTnxEcxXffM9ps5zs6OYah7FEC1MwHwYDVR0j
BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0
ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG
MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm
MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0
ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKGI0DUTCgj2Zvmpgv8ZVSi75ooaw77L+Zi1
NW63tROW9Fr6nLh4+fBp7q87S7JXp7/A7aHXSkzt+/1R8MrAQ+iLyUwEHdGURYT/
0C9zoYay1qlqDYXVJo2LclXBt0lJY911PCqgba7XzBjia+AAfm8xzghYQKSIeAoE
ZN/7tZzFShyBLYaqoNkLv9fszf/HzPzJYq6rVQgarZrtX8i3SSQv5CwSRi55Yvuh
9wnoCv8GYwHTYsTiam2gdJ1pN1yxwdkKtVPrN3lA5l/P0pTVZeCD0YMRCR14qRnk
0CGfSeDuRR+SfbPWIs5N5+0tt1yqDwOZoigciiK81iqu5OH0jgc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:19 2026 by rpki-client