
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json)
Hash identifier: B5JWrWv2432F8VVkJD7gu16PJpVbrA61dswcL5cj0UE=
Subject key identifier: 42:30:F9:DC:8F:23:B2:E8:FE:B0:C3:53:AE:E8:91:D1:61:74:73:30
Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A
Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
Certificate serial: F063722A0BA0905C0AA1847B8914CD349C5283
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:43:38 +0000
Manifest this update: Wed 17 Jun 2026 04:38:38 +0000
Manifest next update: Thu 18 Jun 2026 05:11:38 +0000
Files and hashes: 1: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: X50zXWzVyu10B4OAV5AQ3fsh7JZP20WWgk7i9EhZEfA=)
2: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl
rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f0:63:72:2a:0b:a0:90:5c:0a:a1:84:7b:89:14:cd:34:9c:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
Validity
Not Before: Jun 17 04:38:38 2026 GMT
Not After : Jun 18 05:11:38 2026 GMT
Subject: CN=4230F9DC8F23B2E8FEB0C353AEE891D161747330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:75:4c:98:09:b4:bb:6c:56:d2:72:0c:b9:
ff:8b:d6:7a:43:49:68:bd:95:95:75:f3:e8:6c:27:
dd:0b:37:27:ff:30:21:3a:3d:12:63:9c:6a:73:d0:
bd:92:65:74:f0:be:ee:04:01:6a:a6:0e:c6:93:e7:
3a:9d:ed:2d:db:d9:de:8b:92:2b:db:90:7e:98:47:
b9:96:9e:ea:1c:fd:7b:b8:3c:cf:be:f2:a8:65:ed:
ed:75:b0:e0:99:cf:e3:1e:ff:d5:e9:eb:82:5f:da:
a3:88:76:c0:79:e1:5e:09:62:f4:67:b0:9c:16:83:
61:03:2e:c8:bb:0e:7a:74:f3:71:e2:e9:ef:e6:f0:
4b:28:dd:c1:76:1a:41:bb:d1:e8:ef:e1:db:c0:04:
4b:13:76:82:52:c1:6b:7e:38:45:60:a1:44:49:ad:
1e:1f:d7:a7:d6:64:09:c5:ed:95:fe:99:c0:6c:e3:
82:0a:87:e0:90:29:14:2e:6c:c9:1d:ef:f6:c5:11:
e3:45:1d:3b:6c:0b:8a:8f:b5:e8:ae:25:cd:87:ac:
79:4c:1c:f5:79:f5:81:ac:68:f9:3d:8b:46:c7:e9:
d8:07:b5:f8:ad:d8:7f:02:3b:1f:f3:80:7d:e0:3f:
1f:e0:b5:15:96:e0:f0:01:d4:c6:3f:35:de:c6:9c:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:F9:DC:8F:23:B2:E8:FE:B0:C3:53:AE:E8:91:D1:61:74:73:30
X509v3 Authority Key Identifier:
keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:68:14:21:3e:d9:d3:84:84:73:c6:4f:82:33:81:88:ac:
1b:a4:b8:ad:62:48:5c:51:32:0c:a5:f9:e0:44:a4:b4:77:cd:
5b:10:0e:9d:de:68:4f:45:74:7d:a9:e9:93:1d:21:8c:cc:69:
ed:5b:43:f3:7d:41:1c:24:5e:65:a3:66:1c:5d:ee:2d:98:eb:
04:4d:87:85:99:3b:ef:c9:02:c0:fb:f6:31:f2:dd:a6:a7:d1:
d6:fb:a3:5a:bd:01:b7:dd:98:54:d9:95:64:13:d9:17:8c:3b:
8e:24:11:bf:a5:9e:61:36:7c:14:50:27:fd:51:24:7b:0c:3d:
ed:ab:2b:28:0c:25:6e:05:da:b2:fd:c5:62:b4:19:4d:25:56:
90:ba:59:0d:c9:7d:f0:1d:42:30:6f:80:01:d0:59:cf:36:1d:
9e:54:2e:7a:b5:a2:3e:8b:77:68:72:18:3d:cd:01:98:64:35:
a2:e9:ce:a0:a0:b0:2b:92:6c:85:f2:1d:4e:85:3d:66:01:54:
38:76:8c:6f:0c:97:2f:0b:14:cc:50:64:98:b8:1e:8e:89:6a:
75:b4:c6:4b:ad:3a:4b:19:30:81:73:79:27:40:6e:06:2a:30:
62:26:61:06:7e:6e:36:40:0d:fd:ff:b2:f7:ee:3c:25:a9:ae:
14:8a:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:33 2026 by rpki-client