
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File: 63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier: 3T3NSiIwFvYOMaoHZsgV/u1Vlg5v4Uzb7NhKFwdWod0=
Subject key identifier: BA:F1:5C:54:C7:C2:AD:57:35:54:E2:E8:D9:CE:3B:02:6A:CF:DC:D7
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer: /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial: 20C6B2ADB69EB1FF1C8D89E77D14518C0BC3AA36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number: DC
Signing time: Mon 12 Oct 2026 23:46:26 +0000
Manifest this update: Mon 12 Oct 2026 23:41:26 +0000
Manifest next update: Wed 14 Oct 2026 02:32:26 +0000
Files and hashes: 1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
2: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: P0czUbV69GRCHrqkZmKxARMA3Amk60KCjOTSSdLAOks=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c6:b2:ad:b6:9e:b1:ff:1c:8d:89:e7:7d:14:51:8c:0b:c3:aa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Validity
Not Before: Oct 12 23:41:26 2026 GMT
Not After : Oct 14 02:32:26 2026 GMT
Subject: CN=BAF15C54C7C2AD573554E2E8D9CE3B026ACFDCD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:ad:ea:4d:86:41:01:60:89:6d:12:37:85:
97:a2:fb:7f:37:ed:1f:33:bd:24:30:2a:ed:e9:45:
61:86:1f:3a:6b:62:0c:1b:29:06:d7:cf:70:9c:b1:
0c:b8:52:c7:5d:24:94:ed:e7:77:df:a3:94:0c:e8:
31:27:f6:a4:ca:50:e3:9b:cb:77:fb:a1:e7:52:87:
01:82:57:f0:d4:8f:53:a1:3f:01:d7:ca:f6:53:e8:
eb:a0:9d:35:81:d3:3e:e9:a2:b7:18:d3:24:37:e0:
58:09:bc:a1:a1:be:f5:ba:53:d9:6c:67:80:1d:10:
7a:06:75:0a:e9:04:56:68:c3:67:56:81:92:41:78:
bc:3c:51:9e:36:ae:96:15:02:43:ba:e6:78:4e:bc:
6f:4b:2c:3a:c8:00:82:c1:e2:c5:54:47:8b:b6:94:
2f:43:33:37:77:b1:d8:52:83:9f:8f:b4:42:f6:b9:
93:a5:40:f9:39:a8:95:b4:59:78:40:86:b3:49:5d:
b3:1b:c9:be:de:65:07:a4:10:14:fb:7e:6d:38:b2:
36:83:25:b6:a7:ad:b7:95:3b:5b:0c:c9:bd:87:a9:
db:b9:cc:9c:1d:e8:86:83:22:e8:13:77:f5:51:29:
5e:2a:d1:a5:64:ce:27:bb:ea:e9:5e:5c:aa:7a:32:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:5C:54:C7:C2:AD:57:35:54:E2:E8:D9:CE:3B:02:6A:CF:DC:D7
X509v3 Authority Key Identifier:
keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:73:95:c3:87:b1:d0:3b:1e:78:c5:9e:1f:05:65:df:34:e3:
e1:27:dd:01:73:39:54:49:37:1c:62:42:64:d7:42:11:e5:7d:
d7:3f:f1:9d:58:a3:01:33:b4:f2:4f:f5:47:b2:42:90:97:25:
3b:3b:20:25:90:dc:bb:e6:c5:39:25:94:02:fa:c2:c4:2d:f1:
cd:c1:6d:12:59:18:29:ae:ff:fa:cc:57:d7:7e:e7:d7:b1:6e:
71:c4:82:23:45:2c:6b:8e:a8:ae:a4:eb:2b:fb:c8:4c:c5:3d:
68:b2:99:4a:7d:1f:87:f9:86:94:12:9a:64:1f:8c:79:87:74:
4a:2e:f3:71:f8:c4:de:24:d1:6c:c5:d2:a8:7a:30:ba:f2:90:
e3:a1:f2:97:ec:27:61:d3:e8:c6:ba:46:4d:df:b4:1a:59:63:
05:d5:13:8a:e9:91:37:01:f4:29:19:5d:28:45:d0:15:36:86:
4d:1e:0b:8b:5e:4a:01:df:05:d2:9b:c4:86:8b:50:be:d9:41:
66:93:c1:d6:4f:81:05:02:88:37:ae:a9:4f:f6:56:1f:bf:19:
c6:55:94:25:ba:2d:6c:d2:83:56:fc:da:80:d6:66:55:99:f3:
5f:2a:f9:cf:1d:71:d8:d7:1d:cc:df:f0:29:13:ef:f1:ca:77:
42:01:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:44:44 2026 by rpki-client