
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
File: 6372758CCA381920292B5E0D338ECF89D0000FEE.mft (raw, json)
Hash identifier: t2yBiE4Rp1ap551Y6oRmWpK5POv1KqoYZwIxONM+0nI=
Subject key identifier: E2:03:E8:A9:F3:93:C7:1D:39:6F:CC:97:EB:44:5B:4E:86:4F:E5:BA
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial: 59FE217DA07B1D9C0DA8AC69260F7899EFB5BD03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
Manifest number: FF
Signing time: Tue 10 Nov 2026 21:33:15 +0000
Manifest this update: Tue 10 Nov 2026 21:28:15 +0000
Manifest next update: Thu 12 Nov 2026 00:15:15 +0000
Files and hashes: 1: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (hash: qVD+Jwv4pLsFsaxaJgqqF4GhPj5gMv8oiQOKOq7eBlk=)
2: 3130332e35332e302e302f32322d3234203d3e203633383733.roa (hash: mNLYMhzy89PxQTAE+kur6oFEKDHuq9q324ipGGtSuR0=)
3: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (hash: ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=)
4: 6372758CCA381920292B5E0D338ECF89D0000FEE.crl (hash: jYjlYCQ157dWvHtBQ+BHqnk81JkWleo1PEoZiC+4pD8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 08:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:21:7d:a0:7b:1d:9c:0d:a8:ac:69:26:0f:78:99:ef:b5:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Validity
Not Before: Nov 10 21:28:15 2026 GMT
Not After : Nov 12 00:15:15 2026 GMT
Subject: CN=E203E8A9F393C71D396FCC97EB445B4E864FE5BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:2b:ac:be:52:8b:70:cb:28:99:fe:b0:ba:
87:82:3f:0e:e9:cc:72:94:0e:74:5c:25:8b:b3:72:
e8:8f:cf:5c:bc:68:95:62:b9:18:d3:ec:4e:c8:18:
f9:49:83:df:99:a5:de:88:11:6a:d0:82:e1:2a:d3:
e1:ae:a5:ff:5f:f9:73:c5:df:86:d7:e9:d6:6d:52:
50:8b:e2:90:f9:db:81:c5:5b:9f:40:fd:c7:a4:85:
48:bf:a6:f3:c8:1a:72:23:49:14:cb:3f:a7:bf:0d:
e7:cf:61:35:3f:79:83:a9:31:30:af:f1:0b:ed:5f:
d9:5c:80:61:7f:56:e5:13:e2:c7:50:8d:07:7b:91:
96:b6:fe:9e:47:8a:ec:4d:45:19:ad:b5:ec:49:16:
78:30:81:4d:fc:4a:83:73:19:20:28:c5:66:20:07:
cd:c1:d4:7d:85:c5:16:ee:90:b2:9c:16:f9:01:d0:
37:04:9a:19:1e:44:d8:b6:5d:94:e1:42:15:89:8a:
fd:3f:8a:a2:e3:0a:18:31:57:46:ff:b4:ff:3b:28:
b3:ef:49:b7:f4:b4:67:f7:fc:7c:30:f3:49:75:aa:
49:41:0f:b0:b0:66:0a:15:d8:e9:34:78:fa:2a:a9:
43:96:7f:38:48:df:bd:72:9e:5b:fe:cd:dc:1d:7b:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:E8:A9:F3:93:C7:1D:39:6F:CC:97:EB:44:5B:4E:86:4F:E5:BA
X509v3 Authority Key Identifier:
keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:73:8b:23:18:55:81:d0:9e:4d:33:61:5a:d2:bf:8a:cb:
6d:6d:23:65:f4:d3:d4:ab:a9:08:9f:ad:85:ff:07:10:51:73:
63:47:8a:2d:d3:9f:de:39:cf:5c:ee:14:2e:4a:1d:7d:03:f7:
2d:c9:f6:8a:f5:7e:6a:36:b5:dc:d2:3d:a2:e8:58:1d:0f:b4:
70:cc:ee:49:4f:1e:39:18:6b:e9:fd:cd:52:07:98:ba:84:10:
b3:b2:68:89:69:2c:a4:bd:27:25:5c:eb:b4:e7:98:53:1d:28:
82:45:2d:e9:09:7b:49:09:f0:eb:f9:3f:3d:bb:33:97:db:da:
d7:62:23:46:93:c1:6a:c3:4b:2b:e1:89:0b:0b:e7:72:86:88:
52:01:83:9f:3d:c4:4c:5b:3d:cc:f2:40:42:aa:da:1b:aa:f9:
2c:b3:0e:64:3c:fc:ee:3e:a5:a8:c4:ed:a8:07:81:84:62:1e:
66:1f:b1:9b:0e:4a:7a:67:c7:9f:b8:8e:0a:fb:a7:13:34:2d:
97:26:fa:c9:e3:bc:c3:5c:90:77:ab:06:90:38:44:3c:78:a6:
5e:90:cb:99:53:74:8c:90:79:4f:63:fa:97:cb:53:25:7a:9a:
7d:a1:26:ed:ac:85:43:2f:2e:fb:43:5c:fe:17:4b:fa:55:f3:
0a:ec:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:44:02 2026 by rpki-client