
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft (raw, json)
Hash identifier: mZO1Hi+Y/zXkvBuvMmctBXqhD18bLYS7uyxj4L7Nglg=
Subject key identifier: 85:67:D2:B6:60:61:AB:6D:22:95:17:40:3A:B1:E1:5D:51:8D:C9:40
Authority key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
Certificate issuer: /CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Certificate serial: 7106EB4F5B260663F9190AB4E275934E822F31F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 18:52:13 +0000
Manifest this update: Sat 13 Jun 2026 18:47:13 +0000
Manifest next update: Sun 14 Jun 2026 19:28:13 +0000
Files and hashes: 1: C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl (hash: gg5Rc3UYqpKiQy3xtUIxoMSrRojpSaqUABEq25sOzBE=)
2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: /TEOvHICrNlzqHKdTSQimWH4eZASaMfqjyKyEfSs2B4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:06:eb:4f:5b:26:06:63:f9:19:0a:b4:e2:75:93:4e:82:2f:31:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B
Validity
Not Before: Jun 13 18:47:13 2026 GMT
Not After : Jun 14 19:28:13 2026 GMT
Subject: CN=8567D2B66061AB6D229517403AB1E15D518DC940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3a:76:0f:be:f9:1e:7c:a3:64:52:0b:31:b2:
d7:4e:3e:4b:ea:08:35:dd:9e:6b:a2:8d:77:07:2b:
7c:18:c6:12:ee:67:7f:4c:74:5c:03:f5:6b:15:08:
ae:76:8f:0a:70:54:9a:71:96:a2:82:7e:6d:9c:1f:
64:9b:d3:b0:69:49:ed:0a:b0:7b:6b:a9:6d:e8:54:
a0:c0:b2:66:4a:ff:96:45:d1:72:cf:e2:3d:7f:f4:
2b:5f:e6:cd:bb:83:ac:01:4c:97:a6:47:dd:76:12:
81:9b:ed:6f:a5:76:01:43:b0:6a:a0:5b:17:66:c7:
51:cc:75:0b:06:65:3c:39:95:6e:38:9a:8d:25:c0:
6f:0b:d2:99:a9:eb:b3:42:f4:cd:46:4f:34:4b:57:
0a:bc:1c:e8:25:e5:f8:5d:58:87:e0:a7:f5:29:ea:
f3:97:05:ae:63:1c:29:40:3c:9b:20:f7:de:07:b5:
72:39:6d:97:d1:f7:1b:0d:8d:e1:ab:0a:e3:04:82:
fe:b6:b8:7b:76:2c:ec:28:3b:b8:df:dd:50:28:30:
38:ac:ae:a1:79:94:f8:36:3e:6e:70:7a:3f:90:88:
ba:2a:dd:4a:39:f0:ec:28:c4:fb:1e:a0:1f:db:0c:
97:35:90:56:01:20:b4:c2:86:41:88:b2:b7:6c:eb:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:D2:B6:60:61:AB:6D:22:95:17:40:3A:B1:E1:5D:51:8D:C9:40
X509v3 Authority Key Identifier:
keyid:C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8b:3c:ba:cc:23:e2:78:f9:ef:91:a2:78:19:3a:75:00:04:
c3:04:36:a5:8d:c5:d4:c6:e0:e9:9a:6a:eb:72:04:1c:bd:7e:
51:1f:cb:fa:87:3e:db:f6:bc:cb:a2:0d:79:b6:41:1c:46:17:
55:6d:be:26:b9:d0:fb:de:bd:39:0c:65:4e:1a:00:1d:fc:35:
43:f0:0e:c5:8d:3b:b6:ba:f1:99:14:2e:ae:58:13:ad:85:86:
d4:eb:90:c1:03:f1:26:ad:59:af:15:34:55:7a:10:c7:e8:6f:
91:35:6b:25:0d:30:1d:1f:55:69:d0:c0:6c:d5:51:4d:1f:32:
87:f3:dc:62:3b:cc:ad:4b:19:96:8d:ff:c4:84:05:33:0a:56:
e4:23:3a:af:10:cf:3f:7c:fd:d5:19:26:81:10:18:8c:2d:45:
4d:05:7f:ed:c0:f8:a1:a9:c2:4f:43:ee:da:66:91:1c:40:d6:
21:62:5a:07:67:61:e0:7c:7c:50:b0:5a:f6:65:c9:5c:af:30:
8f:d5:4e:b3:4b:8a:5c:e7:13:30:fd:9a:df:2a:46:e7:4f:7c:
a3:7c:63:5e:22:63:65:fa:7b:22:fe:17:fc:2c:bd:d4:ee:5a:
89:ee:a3:43:a0:94:4d:4b:74:23:6a:37:9b:e8:a6:30:fa:49:
9b:e6:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:09 2026 by rpki-client