
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
File: 63C9C3AAF95A607F8365E51C375621EF611B029E.mft (raw, json)
Hash identifier: BTETnA3fhnXbmnd3z8lQjvbhVDdpUY3MmvcL5r+5tZY=
Subject key identifier: 1E:35:F2:DC:15:FE:D8:3A:32:28:AE:24:50:58:82:9B:D1:55:CF:40
Authority key identifier: 63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
Certificate issuer: /CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Certificate serial: 533D2F89A2FEC4B9A0635B395ABC968109D02301
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 20:18:57 +0000
Manifest this update: Sat 13 Jun 2026 20:13:57 +0000
Manifest next update: Sun 14 Jun 2026 22:40:57 +0000
Files and hashes: 1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: Gj72PKyTW4uThzHAv98WsY3O2r0uo97/yFBA+Iq7xgw=)
2: 63C9C3AAF95A607F8365E51C375621EF611B029E.crl (hash: l20m1g8E2oTlmuqKx3PhlOS07Gfnwfn9NUPjyEc7ZM4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3d:2f:89:a2:fe:c4:b9:a0:63:5b:39:5a:bc:96:81:09:d0:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C9C3AAF95A607F8365E51C375621EF611B029E
Validity
Not Before: Jun 13 20:13:57 2026 GMT
Not After : Jun 14 22:40:57 2026 GMT
Subject: CN=1E35F2DC15FED83A3228AE245058829BD155CF40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:b8:a5:f6:5d:a1:47:ea:fe:0a:3e:9a:fd:
81:e6:53:17:1e:bf:bb:8f:36:f7:40:53:50:b5:39:
cc:31:74:8d:7c:f0:e5:4d:f4:79:9c:3c:e2:8d:38:
bc:cd:73:64:6c:15:8c:3d:03:64:2e:50:61:03:8e:
7f:c7:8d:5e:c8:03:f9:0d:5f:b3:95:9e:bd:a8:5a:
ba:b4:11:ec:5e:34:5c:7c:4a:27:dd:ec:6a:49:01:
fd:c6:e8:83:cc:e4:85:1e:f3:ed:78:6e:27:68:7d:
92:0f:88:1d:0b:39:f1:e4:a7:62:66:a7:48:5a:12:
2d:41:26:92:77:ef:29:04:a2:78:07:06:e2:84:11:
16:d5:2f:80:2a:54:1d:eb:6e:f8:3a:96:6c:04:d2:
04:f7:10:60:5b:1c:31:1c:c4:2d:12:e5:8a:31:a2:
cf:b4:90:61:72:c2:b6:a3:f2:de:72:7f:dd:0f:bd:
4c:7d:71:37:14:9f:85:fd:06:4d:ec:5a:79:19:ba:
39:23:fa:d1:1b:66:8b:2e:be:91:9e:37:b4:9f:38:
49:d7:6d:44:f5:ba:93:3e:a5:f9:25:87:37:7c:cc:
36:b1:de:29:57:b2:59:98:c4:bf:0a:5a:23:7e:bf:
ec:ef:fb:bd:16:1a:6f:65:65:45:53:56:52:12:9b:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:F2:DC:15:FE:D8:3A:32:28:AE:24:50:58:82:9B:D1:55:CF:40
X509v3 Authority Key Identifier:
keyid:63:C9:C3:AA:F9:5A:60:7F:83:65:E5:1C:37:56:21:EF:61:1B:02:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C9C3AAF95A607F8365E51C375621EF611B029E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/63C9C3AAF95A607F8365E51C375621EF611B029E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:56:43:ca:8d:5f:ae:80:5b:2b:54:b8:8c:9b:26:18:7a:
f2:bc:a8:49:59:d3:80:42:af:e4:55:7a:cc:95:52:d8:ab:05:
96:b8:5c:e2:15:28:2f:fe:cb:22:09:7e:d7:82:87:e2:08:9e:
3a:c7:95:73:ef:77:8f:2b:26:b8:e4:ae:14:a4:44:60:4f:f6:
c6:83:3e:fe:b8:75:0b:92:de:a2:6e:4c:a7:fc:e9:83:1f:38:
9e:c1:63:36:06:3d:67:00:7d:29:68:1f:59:10:a9:f3:c6:63:
8d:7d:24:51:54:4d:64:b3:88:b6:69:11:82:83:ef:f6:88:ce:
c2:bc:df:91:7e:bf:2f:a2:ed:6c:de:8b:e4:51:f7:56:95:2b:
92:7d:0a:1c:4e:45:27:b9:73:24:b1:c1:e1:5a:10:bb:78:43:
48:ef:95:23:df:6f:2d:9c:a2:b1:26:c4:7b:26:9c:ed:aa:2e:
cc:74:4e:ae:4e:cd:45:1c:58:04:ee:89:76:7e:67:63:87:81:
2d:6c:1f:0d:0a:aa:91:3a:7c:c9:3a:39:b0:b8:29:4f:f6:21:
2b:bc:8f:d0:35:82:1a:f9:3e:1b:78:6b:04:3f:ca:ab:8e:ef:
81:f0:bf:63:74:10:34:1a:29:af:05:5a:d5:94:7f:5a:d9:3c:
31:5d:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:39:42 2026 by rpki-client