
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json)
Hash identifier: qkWSd+dSlPt9LPIp5WQb/RVr+gxtmrjHOT4ICKBu52E=
Subject key identifier: A4:FD:07:4F:E1:E2:D9:61:83:7D:91:92:3E:9D:1C:A4:62:66:A3:E3
Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E
Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
Certificate serial: 6236E9CBDC4222AF99F10E73577059F5EF45BBF5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 11:41:15 +0000
Manifest this update: Tue 28 Jul 2026 11:36:15 +0000
Manifest next update: Wed 29 Jul 2026 15:39:15 +0000
Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=)
2: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: BDg9Y5hbBXKEN66tfRvtUzto0dbcAljN8i1g3JFAMGM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl
rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:36:e9:cb:dc:42:22:af:99:f1:0e:73:57:70:59:f5:ef:45:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
Validity
Not Before: Jul 28 11:36:15 2026 GMT
Not After : Jul 29 15:39:15 2026 GMT
Subject: CN=A4FD074FE1E2D961837D91923E9D1CA46266A3E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:cd:96:83:9c:7e:57:63:8e:95:ba:1c:e4:
90:e4:6c:50:b7:5f:00:0b:24:dc:2e:b7:24:9c:b8:
5e:f0:70:7c:2d:96:b7:85:e2:d8:2f:db:88:5c:5b:
62:48:75:a3:b8:fc:9a:25:47:6d:14:d9:68:e4:b4:
92:b9:b0:a3:bf:91:f6:01:68:45:e6:e9:59:38:3b:
f6:73:02:69:42:be:79:9f:ec:c3:ba:2d:6a:9d:01:
ed:0b:c8:fd:9c:d4:4c:dc:9f:d5:24:cc:b4:c6:40:
68:dd:9d:0c:e9:8a:24:96:b1:9b:1d:66:7c:68:13:
c2:f1:c3:48:92:ab:19:92:f4:72:a2:a1:c3:b3:59:
81:c9:af:c0:25:82:92:01:22:5b:01:6b:ce:6d:b2:
c1:63:ed:ed:e8:e3:21:85:3e:46:50:44:55:03:b1:
3e:c9:d6:a8:28:85:31:78:10:ee:4e:cf:8f:ee:e9:
00:61:d7:36:1c:c6:75:af:cd:22:18:8c:6f:dd:94:
92:36:29:f5:58:25:1e:ec:0e:cc:01:8c:d3:24:d7:
e5:89:f7:97:20:ed:f1:fd:61:49:e6:a8:b2:37:81:
d0:c9:a9:ac:74:a2:8d:a5:af:df:74:9e:c5:ef:dc:
8e:99:20:cd:b8:d9:c3:5b:37:09:6c:bc:6f:c2:8d:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:07:4F:E1:E2:D9:61:83:7D:91:92:3E:9D:1C:A4:62:66:A3:E3
X509v3 Authority Key Identifier:
keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bf:05:d7:79:74:73:d2:2b:e4:11:39:ed:91:d9:14:76:f9:
10:c4:3d:d5:6f:52:05:b4:07:1b:f4:6a:cc:3f:93:91:33:25:
af:66:e4:27:81:be:d9:65:00:dc:34:de:47:cd:1d:56:84:11:
35:5d:49:e1:8c:d4:fe:3e:dc:5a:71:c0:a4:74:2d:94:bc:24:
1c:6f:54:e9:b0:15:e0:34:b8:60:43:dd:1d:62:5e:b9:1b:85:
34:2a:5f:6c:9c:e6:65:9b:03:a8:cf:3f:a5:64:5c:25:d2:5b:
95:85:71:a3:c7:ab:37:86:da:83:7a:ec:5c:cc:80:fc:6a:f3:
22:a2:3b:e5:fe:d5:bb:03:13:71:45:0f:aa:5d:ac:69:3f:71:
8d:40:68:1d:00:dd:07:2f:33:39:7f:60:d7:4f:2a:c9:77:e5:
a8:5e:4e:60:f1:a2:ac:f7:36:d7:82:a3:bb:0f:04:7e:37:59:
9e:2e:79:da:16:a8:c8:fd:29:6b:e3:eb:0e:54:d8:5b:0b:14:
6a:04:59:0a:15:be:69:69:c8:8c:07:23:f6:11:e4:8e:69:67:
d4:42:13:e7:7f:b2:5b:0a:c8:83:01:65:ed:3b:c2:d8:78:ba:
93:db:ac:3c:8b:98:bf:0a:d2:fe:51:1b:63:6e:24:ea:df:04:
53:81:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:57 2026 by rpki-client