
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json)
Hash identifier: o0rM50jS5lDPpCGRfYtcpmrNZHSx5bQhdximEpWKO3Y=
Subject key identifier: 39:C6:A9:6B:85:0B:F6:A0:82:63:04:EA:8F:08:78:A9:DE:69:A7:E5
Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Certificate serial: 726EAB236983A0577C2F90694E40809C2D3EAF1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 20:21:39 +0000
Manifest this update: Tue 28 Jul 2026 20:16:39 +0000
Manifest next update: Wed 29 Jul 2026 23:51:39 +0000
Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=)
2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=)
3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: vP8gnRpSRPC9bM9Uq1qNLF9Y5EH+UFVOsh5nnSRp57Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6e:ab:23:69:83:a0:57:7c:2f:90:69:4e:40:80:9c:2d:3e:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9
Validity
Not Before: Jul 28 20:16:39 2026 GMT
Not After : Jul 29 23:51:39 2026 GMT
Subject: CN=39C6A96B850BF6A0826304EA8F0878A9DE69A7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:79:64:ac:7f:61:d3:84:70:e7:77:d7:d7:82:
01:2e:d1:c3:02:78:dc:72:54:d6:eb:0e:46:50:5c:
99:4f:b7:df:43:82:fd:b3:cf:2a:35:a4:15:aa:b0:
d5:01:4b:c9:79:73:55:6f:1d:41:88:70:b9:18:09:
14:52:71:0b:19:31:0f:93:13:89:14:17:f2:76:93:
de:c1:8a:8a:57:8c:54:18:0a:c9:5f:b3:d6:69:d7:
a0:73:e1:a8:a1:e3:93:27:f0:42:6c:06:d6:21:a0:
80:bd:19:64:35:7b:e5:0a:e9:a3:e3:0f:43:6b:dc:
57:fe:79:ad:2b:13:a5:48:a5:48:7c:98:15:31:ac:
39:85:e7:70:df:e2:c6:72:0f:9b:57:df:32:c6:83:
61:4a:72:64:74:7e:fe:c0:f0:cb:1a:cf:7a:cc:3a:
9a:ff:c4:b2:11:2e:ca:28:f7:50:5e:56:b4:e9:89:
58:a0:9f:94:b7:b0:89:89:22:2c:02:d5:fc:31:a4:
55:31:25:16:69:ba:a0:6f:2e:14:b1:55:2e:bd:b9:
2e:9c:af:5f:16:46:88:59:ea:af:07:e8:88:40:c9:
27:0f:a8:bc:c2:17:22:81:0c:1e:05:b1:86:e1:18:
36:81:04:d8:9a:78:f6:4f:35:40:59:86:42:0f:4a:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:A9:6B:85:0B:F6:A0:82:63:04:EA:8F:08:78:A9:DE:69:A7:E5
X509v3 Authority Key Identifier:
keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:f1:84:0c:0c:06:00:77:d0:c5:ee:63:4e:d9:5d:96:73:
f6:75:2b:ad:d8:3f:ff:be:96:c2:4d:ef:f6:50:bd:c9:41:b5:
53:e1:7e:72:d9:3d:62:1a:d3:8b:b1:35:dd:55:8c:46:9e:0a:
cb:e9:e2:05:02:45:6c:9e:7a:5f:cd:cb:91:fc:73:08:4a:82:
5c:f5:2c:cd:3c:74:b9:20:c4:fb:af:17:36:5c:11:6b:8d:ae:
9a:47:e7:48:a3:db:17:80:da:5f:12:7b:22:33:26:a2:18:8c:
80:f2:01:7d:ec:ed:3c:cd:9e:b1:fe:8c:15:93:d4:55:de:68:
71:78:66:8d:3c:93:c0:04:e6:39:7d:70:7c:d2:46:00:d4:c2:
bb:ac:fd:50:17:1d:c8:b1:28:e6:14:8f:2e:2a:97:9e:0b:de:
2d:0c:20:a4:29:ec:27:d3:08:e6:4d:29:70:e4:e2:54:59:72:
f7:f0:42:5e:7b:9b:7d:6e:53:71:e1:0c:ae:7d:92:0d:c0:9a:
80:b6:45:d4:98:b7:c3:6b:b1:66:28:09:cf:34:30:76:08:55:
dd:63:37:f9:85:ee:d0:1a:21:8f:d3:42:ca:26:7c:af:66:cc:
f1:57:32:2d:4a:71:5d:50:8e:49:63:73:b3:3d:cb:38:45:a0:
48:fc:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:23 2026 by rpki-client