
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
File: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft (raw, json)
Hash identifier: 6oD9Zwtsjzjrxt1lTFKA1ysS3QN1STPu4synxwa4i28=
Subject key identifier: D9:A8:16:17:30:59:E6:C2:39:38:24:34:0E:71:6C:89:F6:63:0C:13
Authority key identifier: 81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4
Certificate issuer: /CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
Certificate serial: 5C41268328A78D413C7980A078E0C43634B8BC40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 05:13:09 +0000
Manifest this update: Mon 21 Sep 2026 05:08:09 +0000
Manifest next update: Tue 22 Sep 2026 05:43:09 +0000
Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: qHmMyZbiN3k/cS5UVLVJqORSDX8DOjqv/PbL7rfrzl0=)
2: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl (hash: fI4WA0/I4DyaIUEnp9iOW1mC1mBE3ES8SGR8ajkg4vA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl
rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:41:26:83:28:a7:8d:41:3c:79:80:a0:78:e0:c4:36:34:b8:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4
Validity
Not Before: Sep 21 05:08:09 2026 GMT
Not After : Sep 22 05:43:09 2026 GMT
Subject: CN=D9A816173059E6C2393824340E716C89F6630C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:36:33:f6:3f:8c:48:a9:c7:42:cd:34:ed:
0e:61:b3:c7:66:e6:21:64:b9:0a:4c:eb:d9:16:a8:
bd:dc:95:75:36:ec:0c:11:f6:76:2c:59:40:11:66:
b3:7c:ca:4c:54:2c:94:10:77:22:56:a9:ca:ce:55:
e5:e0:ea:f6:12:91:1f:c9:0d:ce:27:9d:f5:d7:9d:
18:ca:4e:04:a6:9d:5c:9c:83:16:71:0c:b4:bc:eb:
0f:46:24:53:0b:22:55:5d:ad:87:79:ba:03:1a:d5:
d9:02:c2:03:87:4e:c9:10:49:2a:d5:10:b2:2f:6e:
56:df:c2:4d:80:2a:60:8f:19:cf:d6:92:a7:0a:12:
99:b6:2a:d9:6c:ac:b9:27:95:36:3f:95:99:cb:9a:
14:f7:c3:89:ec:0e:c9:e2:cd:a7:c7:2d:75:97:6e:
40:35:eb:21:b0:4b:53:a3:e4:59:ac:68:28:75:80:
d1:f9:8e:4c:15:bb:3f:f3:0a:47:d0:ef:60:a3:9c:
5b:30:6b:5e:14:b3:f8:00:02:48:97:eb:30:50:47:
a2:b4:b3:38:f8:d4:7e:97:9c:ae:73:f9:51:8a:fb:
51:df:0c:02:40:0e:46:8b:81:da:8a:dd:d2:77:e1:
bd:10:f4:53:da:87:30:f6:5d:30:ab:b8:24:b6:00:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A8:16:17:30:59:E6:C2:39:38:24:34:0E:71:6C:89:F6:63:0C:13
X509v3 Authority Key Identifier:
keyid:81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:38:ea:d4:6d:47:82:1c:e8:67:ba:6c:da:7d:54:6d:9d:c1:
77:2a:c7:54:23:8d:a1:b4:e6:f3:17:fc:3d:9c:48:09:61:b7:
9c:2f:e2:55:46:8a:af:24:ed:05:29:03:00:78:7e:b7:84:ad:
a5:28:f9:42:ea:b5:40:20:28:0e:b9:99:61:c0:59:92:5c:95:
f5:38:fc:f3:d1:21:c4:c7:ac:53:1e:4b:02:20:20:a5:42:3e:
8b:c2:06:6a:69:5b:65:82:51:42:92:28:92:6b:c8:82:a8:94:
b6:ae:09:42:36:26:97:0e:c7:0a:39:d1:8c:4a:9f:9c:ad:79:
07:7d:6f:a6:ca:14:29:45:89:69:45:21:3a:38:a3:5f:fb:5a:
73:30:27:d2:ce:ad:fa:d6:f0:ab:ca:6f:9d:ea:28:34:a6:08:
9d:77:fc:e3:59:2f:fd:72:c9:2c:9e:c3:95:2f:36:fb:86:bd:
dc:04:57:07:f5:02:31:95:44:4c:6e:43:d8:8f:e8:c1:e9:16:
76:65:9b:b1:e2:62:36:99:d4:57:94:12:4d:bd:04:8e:be:ed:
ad:7b:ca:26:ff:48:5c:8a:b6:df:a0:50:a4:74:d7:89:bb:2c:
30:e0:bd:66:40:8d:cf:1b:e4:6f:a8:bf:88:19:e3:49:f5:39:
fd:41:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:13 2026 by rpki-client