
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
File: 7637E963EF709E2BBD39881202E68EA7BA09EB64.mft (raw, json)
Hash identifier: XUg2+zCCTZdJtN8BQDsWJmTlFkUbB+sLwfyxPzKJZ7U=
Subject key identifier: 72:6E:48:59:1A:53:01:A1:8B:1C:19:C9:68:7C:D4:1D:D6:62:FE:09
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Certificate issuer: /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial: 208D2E564C1FCFFEBF5CD394059BBF332ADE1C81
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
Manifest number: 3C
Signing time: Mon 15 Jun 2026 05:48:21 +0000
Manifest this update: Mon 15 Jun 2026 05:43:21 +0000
Manifest next update: Tue 16 Jun 2026 08:05:21 +0000
Files and hashes: 1: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: VcEziwvajBz0ScjFh/mK+RRpNiyAva/gnfSzmxA7gy8=)
2: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: OGWj7w+3IXgMzGQNophA491Hc35+yTJ0Ol+4T3sD95Q=)
3: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=)
4: 7637E963EF709E2BBD39881202E68EA7BA09EB64.crl (hash: 1Bm0FFc5nCACgLxuWzIBzeQepTsvFItwllmkLLruVsU=)
5: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: SGR/VUMdxBsuFmwp4lsUWkYdYAOdn6A4y8vkO6Hv4pk=)
6: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nWI4uIvaFgK4Hk7GaUoKI1TVheMwIL3XscjU5iDUJX4=)
7: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: aRqarVDmeezXJU+Pwuv00vHqWnKaxtDs6IZN+swCI28=)
8: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: Yr07K6DWQdF2XKTnmuR+IZeyvkTjOYoZ4wAJOdd5cXc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8d:2e:56:4c:1f:cf:fe:bf:5c:d3:94:05:9b:bf:33:2a:de:1c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Validity
Not Before: Jun 15 05:43:21 2026 GMT
Not After : Jun 16 08:05:21 2026 GMT
Subject: CN=726E48591A5301A18B1C19C9687CD41DD662FE09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:c6:5c:38:9d:80:e3:ad:a3:75:b1:11:c5:
8b:83:b3:b8:c8:bf:92:58:b6:22:25:8f:8a:13:06:
dc:b8:b5:0d:38:96:b7:ae:ba:d7:6a:12:86:06:a0:
41:01:74:28:e2:cb:23:15:8c:13:19:b1:48:98:2b:
e8:20:9e:92:5b:02:dc:a7:cf:33:ba:19:94:2b:72:
6c:5c:e6:fa:55:49:d1:59:1e:2e:3c:80:9f:6a:76:
87:8f:99:72:49:de:5e:eb:fe:3b:5a:9d:ce:78:dd:
7a:9c:0f:cd:31:10:1a:56:06:92:fd:9d:d6:63:2a:
e1:11:98:6a:85:e3:24:1d:cb:41:f5:9f:3e:02:5e:
cf:e0:8c:15:ae:27:28:dd:96:94:3e:a5:9c:fd:9b:
f2:fc:6d:06:fc:93:d2:c2:89:da:c5:1b:bd:d3:8a:
7e:d9:bd:9b:aa:c2:c4:f1:fe:e0:90:f5:2e:14:08:
ec:b7:53:0b:e9:70:27:67:7e:30:be:36:e2:7a:a8:
ef:6f:64:e0:6b:6b:ef:97:ab:0b:7a:34:92:00:50:
e8:40:87:83:86:5e:09:67:cb:6c:60:06:42:bb:32:
53:35:4c:0b:1f:8d:14:c7:5e:ff:4c:e5:d6:33:aa:
8a:ba:5e:29:ab:e5:85:72:99:aa:15:a8:76:b2:16:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:48:59:1A:53:01:A1:8B:1C:19:C9:68:7C:D4:1D:D6:62:FE:09
X509v3 Authority Key Identifier:
keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:72:63:27:06:be:f2:d5:5a:39:c4:11:e4:87:66:de:13:3a:
4b:d8:c1:ed:de:59:4f:9a:3a:a8:c8:da:5f:19:36:d0:4a:a4:
17:07:96:94:fa:3a:72:db:eb:12:0e:47:48:d7:2b:4b:f6:06:
96:bb:fd:e0:de:fd:48:72:f2:b3:18:0f:40:c2:c1:e4:6d:83:
ac:ff:c1:47:1b:87:1a:3f:d0:91:bd:d4:33:b7:5d:b5:50:53:
bd:39:28:fb:66:3c:e9:b8:cb:ff:5c:52:11:5b:3e:78:94:aa:
a5:5c:e1:db:e0:43:a0:d1:37:e9:84:5d:33:7f:db:63:d2:98:
d6:c5:60:37:67:c1:cf:3e:b9:52:aa:96:93:59:10:8a:7c:99:
d7:62:28:0d:68:e1:4b:e5:3b:aa:12:a9:ea:c5:b4:16:9a:8d:
2e:1d:cc:a6:90:f5:da:d3:4a:90:61:85:a3:80:cf:39:df:9c:
e9:cd:08:20:4e:0e:9a:5b:b1:39:47:c3:77:3f:02:d9:4f:29:
34:e5:d5:90:c7:ad:6a:67:8b:63:4e:d1:78:62:7a:c4:f4:22:
8d:b8:42:b3:08:50:bf:53:3a:b9:ba:5f:ab:fa:34:26:bf:83:
91:df:87:53:2a:81:c0:80:7f:a6:69:0f:fd:42:08:29:63:8c:
5e:d3:79:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUII0uVkwfz/6/XNOUBZu/MyreHIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdC
QTA5RUI2NDAeFw0yNjA2MTUwNTQzMjFaFw0yNjA2MTYwODA1MjFaMDMxMTAvBgNV
BAMTKDcyNkU0ODU5MUE1MzAxQTE4QjFDMTlDOTY4N0NENDFERDY2MkZFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FsZcOJ2A462jdbERxYuDs7jI
v5JYtiIlj4oTBty4tQ04lreuutdqEoYGoEEBdCjiyyMVjBMZsUiYK+ggnpJbAtyn
zzO6GZQrcmxc5vpVSdFZHi48gJ9qdoePmXJJ3l7r/jtanc543XqcD80xEBpWBpL9
ndZjKuERmGqF4yQdy0H1nz4CXs/gjBWuJyjdlpQ+pZz9m/L8bQb8k9LCidrFG73T
in7ZvZuqwsTx/uCQ9S4UCOy3UwvpcCdnfjC+NuJ6qO9vZOBra++Xqwt6NJIAUOhA
h4OGXglny2xgBkK7MlM1TAsfjRTHXv9M5dYzqoq6Ximr5YVymaoVqHayFp1lAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcm5IWRpTAaGLHBnJaHzUHdZi/gkwHwYDVR0j
BBgwFoAUdjfpY+9wniu9OYgSAuaOp7oJ62QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWYxYzc5ZjEtMjY0ZS00MjNmLTllMDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNF
RjcwOUUyQkJEMzk4ODEyMDJFNjhFQTdCQTA5RUI2NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjM3RTk2M0VGNzA5RTJCQkQzOTg4MTIwMkU2OEVBN0JBMDlF
QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll
MDgtMGIyOTAwZGE2OTQ5LzAvNzYzN0U5NjNFRjcwOUUyQkJEMzk4ODEyMDJFNjhF
QTdCQTA5RUI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGVyYycGvvLVWjnEEeSHZt4TOkvYwe3eWU+a
OqjI2l8ZNtBKpBcHlpT6OnLb6xIOR0jXK0v2Bpa7/eDe/Uhy8rMYD0DCweRtg6z/
wUcbhxo/0JG91DO3XbVQU705KPtmPOm4y/9cUhFbPniUqqVc4dvgQ6DRN+mEXTN/
22PSmNbFYDdnwc8+uVKqlpNZEIp8mddiKA1o4UvlO6oSqerFtBaajS4dzKaQ9drT
SpBhhaOAzznfnOnNCCBODppbsTlHw3c/AtlPKTTl1ZDHrWpni2NO0XhiesT0Io24
QrMIUL9TOrm6X6v6NCa/g5Hfh1MqgcCAf6ZpD/1CCCljjF7TeTM=
-----END CERTIFICATE-----
Generated at Mon Jun 15 14:12:40 2026 by rpki-client