
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
File: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft (raw, json)
Hash identifier: hCa5G4LiwCAboCVLoKg/EiY3n7xkDMr94TJ98RydLEM=
Subject key identifier: 65:13:C4:A3:DD:25:B6:F0:F8:B0:25:FE:4E:BC:33:DA:1C:6B:B6:F8
Authority key identifier: 14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD
Certificate issuer: /CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
Certificate serial: 1B57D290792FF0F25B57543A23A2BF41DE4E9B63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 01:12:40 +0000
Manifest this update: Wed 29 Jul 2026 01:07:40 +0000
Manifest next update: Thu 30 Jul 2026 01:15:40 +0000
Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: 6AZ8JAgtI94iBZvhn289sOw/311Gf5HWF9lx3CgDg/c=)
2: 1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl (hash: SSZVk8WttrGL8vXDCQrSp49yFE9Hkg7XW7vx1qThOC8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl
rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:57:d2:90:79:2f:f0:f2:5b:57:54:3a:23:a2:bf:41:de:4e:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1420484BD98BF83C1C6C5FF62F97723CB369F3CD
Validity
Not Before: Jul 29 01:07:40 2026 GMT
Not After : Jul 30 01:15:40 2026 GMT
Subject: CN=6513C4A3DD25B6F0F8B025FE4EBC33DA1C6BB6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:2e:7a:56:7a:ae:0b:9b:17:ff:5a:5f:68:
a9:db:6f:d1:93:ac:2b:7f:d6:ae:10:f4:ea:24:5f:
b6:bc:62:16:42:33:65:c1:fd:32:df:32:82:b9:75:
f1:02:87:0b:6b:bf:ac:33:7e:00:99:63:50:ee:8b:
7d:07:cd:0b:a0:28:70:f0:ee:d1:36:56:8f:27:ab:
2a:ac:22:7e:cb:95:fe:a3:2f:de:d8:20:90:79:17:
90:86:2e:d2:aa:83:4a:3a:ae:ac:f3:46:a3:ea:e2:
e4:09:6f:88:cd:f8:4c:a6:28:32:80:cb:a9:8d:ba:
19:58:45:61:82:44:5c:5d:26:a8:47:ff:c9:46:fc:
3f:51:01:3a:2a:be:42:0e:a0:38:89:ae:1e:52:3b:
6e:08:87:6e:05:2a:50:94:93:f7:ac:72:28:8c:f8:
ec:69:51:69:41:e1:a9:76:e5:01:fc:ea:f6:36:82:
16:b7:9a:68:6f:16:12:90:60:be:4a:e9:c9:f6:76:
4a:41:4b:26:e0:3f:3d:a2:82:87:51:05:8c:02:38:
d6:30:ef:f0:25:9f:9b:45:e5:5c:ad:53:66:b9:3a:
b0:68:01:c2:fa:fa:06:d4:f5:4d:45:c9:59:c6:a9:
2e:74:97:a0:88:12:85:32:b1:5c:a7:fd:bb:0e:20:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:C4:A3:DD:25:B6:F0:F8:B0:25:FE:4E:BC:33:DA:1C:6B:B6:F8
X509v3 Authority Key Identifier:
keyid:14:20:48:4B:D9:8B:F8:3C:1C:6C:5F:F6:2F:97:72:3C:B3:69:F3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1420484BD98BF83C1C6C5FF62F97723CB369F3CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6e:86:b0:82:4b:12:e3:f4:21:a7:5b:25:6b:a0:ea:c5:ef:
1b:44:6d:38:b0:c5:e0:ee:37:a5:5d:5e:1d:87:5e:97:7d:57:
ae:c3:98:68:39:f4:d2:cf:af:44:31:66:5a:52:58:5e:f3:af:
e3:4a:21:b9:ef:e0:f0:76:f4:68:a6:a6:af:9a:be:79:f1:dc:
24:05:7a:6e:b5:3f:c0:c0:fb:5b:4c:a9:90:cb:4e:16:7a:85:
d9:bf:cd:59:59:ff:4f:50:4a:72:9e:5f:ea:3d:82:57:45:03:
f6:31:6a:fd:64:fa:1a:b8:fc:b0:85:17:61:06:e5:ad:3c:f4:
42:fe:36:84:0a:59:00:dc:91:3e:50:0e:ad:a3:22:36:d8:d1:
3c:cb:0d:0c:ba:27:55:72:bd:40:d3:1a:38:8f:4b:59:07:47:
06:3e:01:e1:a6:7b:b9:ad:66:b9:bf:0d:f8:c3:0a:40:8d:f2:
03:cf:c2:2e:71:f8:14:2d:fb:13:ad:d9:08:70:a2:4e:d5:dd:
8b:1d:65:a0:8e:d1:65:bf:35:8c:a7:78:a0:b8:fc:6c:13:65:
28:53:49:25:29:f6:99:be:27:bf:e0:15:30:a8:84:75:c0:39:
16:cd:8c:c1:00:ca:83:9e:a4:30:3a:74:e3:71:70:3a:da:d1:
3c:4a:82:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG1fSkHkv8PJbV1Q6I6K/Qd5Om2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5NzcyM0NC
MzY5RjNDRDAeFw0yNjA3MjkwMTA3NDBaFw0yNjA3MzAwMTE1NDBaMDMxMTAvBgNV
BAMTKDY1MTNDNEEzREQyNUI2RjBGOEIwMjVGRTRFQkMzM0RBMUM2QkI2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaS56VnquC5sX/1pfaKnbb9GT
rCt/1q4Q9OokX7a8YhZCM2XB/TLfMoK5dfEChwtrv6wzfgCZY1Dui30HzQugKHDw
7tE2Vo8nqyqsIn7Llf6jL97YIJB5F5CGLtKqg0o6rqzzRqPq4uQJb4jN+EymKDKA
y6mNuhlYRWGCRFxdJqhH/8lG/D9RAToqvkIOoDiJrh5SO24Ih24FKlCUk/esciiM
+OxpUWlB4al25QH86vY2gha3mmhvFhKQYL5K6cn2dkpBSybgPz2igodRBYwCONYw
7/Aln5tF5VytU2a5OrBoAcL6+gbU9U1FyVnGqS50l6CIEoUysVyn/bsOIKONAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZRPEo90ltvD4sCX+Trwz2hxrtvgwHwYDVR0j
BBgwFoAUFCBIS9mL+DwcbF/2L5dyPLNp880wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmJlMTVlNmYtMDY4OS00NzEzLWIwZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJE
OThCRjgzQzFDNkM1RkY2MkY5NzcyM0NCMzY5RjNDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNDIwNDg0QkQ5OEJGODNDMUM2QzVGRjYyRjk3NzIzQ0IzNjlG
M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw
ZmMtOTQzMDYyYWM1OTJlLzAvMTQyMDQ4NEJEOThCRjgzQzFDNkM1RkY2MkY5Nzcy
M0NCMzY5RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFhuhrCCSxLj9CGnWyVroOrF7xtEbTiwxeDu
N6VdXh2HXpd9V67DmGg59NLPr0QxZlpSWF7zr+NKIbnv4PB29Gimpq+avnnx3CQF
em61P8DA+1tMqZDLThZ6hdm/zVlZ/09QSnKeX+o9gldFA/Yxav1k+hq4/LCFF2EG
5a089EL+NoQKWQDckT5QDq2jIjbY0TzLDQy6J1VyvUDTGjiPS1kHRwY+AeGme7mt
Zrm/DfjDCkCN8gPPwi5x+BQt+xOt2Qhwok7V3YsdZaCO0WW/NYyneKC4/GwTZShT
SSUp9pm+J7/gFTCohHXAORbNjMEAyoOepDA6dONxcDra0TxKghU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:46 2026 by rpki-client