
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json)
Hash identifier: e9odOC5FFeu5YWsEionLKQ13w0wo/Xv35Po1UfqVad0=
Subject key identifier: 6A:BD:C4:0B:6B:2D:B5:6A:06:2A:82:BB:CE:27:19:7C:8D:BC:8F:B5
Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Certificate serial: 6FCB0E0C1A9FAA1B7E1E2D31A734523D6A524624
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 09:16:53 +0000
Manifest this update: Wed 29 Jul 2026 09:11:53 +0000
Manifest next update: Thu 30 Jul 2026 11:32:53 +0000
Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: kNC+N83breU9eaJqb+1G8csVcT2DHdl0VwSXiy6XMgs=)
2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cb:0e:0c:1a:9f:aa:1b:7e:1e:2d:31:a7:34:52:3d:6a:52:46:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Validity
Not Before: Jul 29 09:11:53 2026 GMT
Not After : Jul 30 11:32:53 2026 GMT
Subject: CN=6ABDC40B6B2DB56A062A82BBCE27197C8DBC8FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:06:4d:69:dd:08:71:15:e8:54:c9:f8:23:
09:67:76:d4:16:c3:1b:29:5f:7c:92:96:9d:2d:63:
e7:d1:d2:2c:0b:60:a8:9f:f5:97:18:41:45:8f:98:
f0:cc:92:24:61:95:e0:40:d4:98:f6:02:eb:ef:20:
5b:2f:fa:af:29:eb:e7:7c:10:3e:e3:61:f0:01:e6:
75:c3:d1:e8:06:e9:29:c5:42:07:1d:9a:d5:ce:13:
95:59:7f:8b:f0:0c:81:f8:e1:b1:74:83:de:95:3d:
25:d4:fb:34:4f:b3:3e:ba:8a:58:ea:4e:1c:f9:c8:
bc:02:b6:8b:d8:27:81:28:f5:15:01:d4:c4:d1:e4:
c8:73:b8:90:60:ca:2b:58:40:fd:76:4d:d0:ec:67:
22:12:06:d9:6e:cc:2c:90:10:49:4e:39:18:10:10:
b9:41:a0:30:89:33:6e:6d:98:d2:26:0f:5b:8c:02:
12:f8:46:bc:b7:63:39:22:57:f2:eb:07:e9:ea:f8:
65:fd:3c:2d:ed:70:d1:0c:50:f6:1f:6b:de:2b:bc:
65:53:eb:bc:dd:28:d9:58:bd:e4:c0:8b:28:ca:bc:
41:10:73:59:27:33:0b:f4:6f:97:fe:cf:8e:01:aa:
59:66:c6:ae:9c:4a:9c:03:da:0d:66:54:1d:bb:81:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:C4:0B:6B:2D:B5:6A:06:2A:82:BB:CE:27:19:7C:8D:BC:8F:B5
X509v3 Authority Key Identifier:
keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:e7:28:82:60:16:19:b1:72:98:1b:56:4e:15:d6:75:93:
6c:50:b1:b0:34:96:6f:80:70:c2:59:c8:e2:35:4b:41:95:88:
dc:cc:3d:b5:05:c1:01:a0:8b:96:62:b8:9b:d4:ec:ff:12:25:
45:9b:68:ce:11:8f:89:ed:03:7e:0c:1f:96:b9:05:8f:07:3d:
06:65:01:a6:1a:59:ba:7f:f2:82:ff:2c:69:40:50:02:d0:59:
77:50:88:83:eb:81:75:1f:96:0b:e6:04:3b:9d:65:44:78:b7:
55:a2:54:bb:3f:b5:1a:6d:99:18:b9:bb:0b:fd:d8:9c:c0:5a:
e6:65:54:eb:54:71:9e:0e:08:ee:62:75:02:25:ed:80:fe:a4:
d5:6e:73:84:75:cb:4c:a4:8e:74:06:4a:42:bc:b2:6c:04:42:
63:7b:54:57:6d:00:65:ef:2c:cf:b6:8b:61:33:a3:fe:73:61:
fa:36:cb:28:6d:73:6f:19:0f:4f:7a:05:73:73:76:ed:13:f0:
06:cc:66:3b:15:80:92:dd:b9:39:7f:92:77:5c:b2:20:c5:23:
78:d8:27:f7:98:a9:87:8f:47:1b:d9:17:75:0f:55:3f:37:be:
6d:ea:19:12:0b:c1:be:bb:e7:3a:e6:ed:ac:3a:1b:cf:bc:51:
0d:5b:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:30 2026 by rpki-client