
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
File: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft (raw, json)
Hash identifier: mydY6TEEhOls6cfU/a2Dv8vkXd5GmltEAzzLNGCIvrw=
Subject key identifier: E3:9F:95:45:16:58:A7:D7:E0:91:0A:F9:7A:3C:D9:6A:CB:DB:69:AB
Authority key identifier: 63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
Certificate issuer: /CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Certificate serial: 5A5B14FE04BA04DFA0EC5B263AE0F800965E23E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 14:02:44 +0000
Manifest this update: Wed 29 Jul 2026 13:57:44 +0000
Manifest next update: Thu 30 Jul 2026 17:49:44 +0000
Files and hashes: 1: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: SBuezJoeFSmiJFbpK3vYJJG/KYxSwTomdhAqA9qmqSc=)
2: 63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl (hash: CRTFd/qI6q1BJp4L9o3u6Hb5I0/BJZAftY/TIavCHF4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5b:14:fe:04:ba:04:df:a0:ec:5b:26:3a:e0:f8:00:96:5e:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42
Validity
Not Before: Jul 29 13:57:44 2026 GMT
Not After : Jul 30 17:49:44 2026 GMT
Subject: CN=E39F95451658A7D7E0910AF97A3CD96ACBDB69AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:a1:ac:c0:6c:8c:53:7b:30:a7:72:42:4b:
2b:51:ce:c5:63:d8:e3:9e:c0:94:1f:14:1d:8b:80:
b8:a1:65:d5:7c:53:ad:5d:de:a2:46:97:b6:4b:3c:
6b:d2:a7:bd:cc:ae:44:52:b3:96:ed:6b:7e:61:75:
ed:af:49:6b:72:dc:ab:b6:eb:44:47:7a:01:3a:76:
cd:ec:40:40:aa:1c:8d:4d:fb:04:4b:cc:6e:76:1d:
b8:47:fc:b2:14:20:e4:0b:a3:55:8c:fa:f7:fb:54:
bd:31:84:fa:c8:83:6d:19:d1:ab:f9:7b:b1:1f:b6:
59:71:42:23:42:b7:22:21:64:3b:af:bd:64:94:fc:
86:1c:0e:21:0f:09:53:b5:5c:a1:f3:a0:fd:11:9f:
3b:12:b1:9f:ac:cb:b2:db:84:78:63:18:99:81:89:
50:bd:1a:66:d7:33:f0:ee:e4:1e:7f:ab:5d:19:5d:
7b:73:d4:4b:ec:41:f7:be:2a:c8:ef:6b:b1:2e:fb:
55:db:c2:e9:1b:3e:f9:13:f8:93:b7:48:c0:92:26:
04:86:ac:c1:4d:9b:a5:ef:aa:c4:da:70:b2:34:53:
75:cf:f4:27:24:61:45:f6:e1:02:29:12:e8:de:2a:
d5:f3:db:3f:52:38:a5:a0:5b:61:fd:ea:2f:90:0b:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:95:45:16:58:A7:D7:E0:91:0A:F9:7A:3C:D9:6A:CB:DB:69:AB
X509v3 Authority Key Identifier:
keyid:63:DB:2C:D7:7B:3D:F9:5A:C0:F9:FC:5B:BB:85:C6:33:4A:CD:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/63DB2CD77B3DF95AC0F9FC5BBB85C6334ACD5A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6c:a1:a2:b5:2f:b9:2b:c0:88:62:78:2b:f4:59:fa:1e:aa:
d8:ed:b6:20:f0:b5:58:dc:ac:4e:de:2a:72:ad:9b:01:07:aa:
23:0c:a5:16:5b:93:2f:26:35:13:9e:45:6f:b8:13:3b:00:99:
8a:f9:2e:90:81:15:d0:9e:13:33:f9:85:35:39:51:42:ca:80:
0c:81:a5:4f:66:42:75:e2:ab:40:05:cd:0d:67:ce:ac:ef:e4:
fa:47:79:8e:a6:ee:89:93:de:fc:32:a9:8b:95:0f:84:bf:37:
de:87:d1:5d:5f:f9:86:cc:08:19:9d:07:9e:f2:da:b0:83:79:
c6:bc:cb:ca:2c:03:d4:49:90:de:64:34:ac:dd:ad:81:c6:07:
93:dc:13:28:a4:c7:87:4f:95:d2:e7:63:06:97:b6:22:c7:1d:
47:08:ee:10:89:46:ef:cb:88:8c:2d:d5:77:53:8a:23:2e:2d:
d5:38:b5:1b:41:ae:c3:5e:48:3b:93:dc:5e:70:e3:9b:83:2d:
3c:02:b5:05:57:09:70:ad:85:03:e9:2b:ed:49:ba:3e:77:80:
ea:33:92:8d:9f:32:42:76:c9:21:e8:4a:f0:0b:73:da:80:40:
fd:ee:68:a8:40:ac:7e:65:5b:0f:32:9a:2c:6b:e8:64:28:13:
6e:1a:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:55:15 2026 by rpki-client