
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
File: 7114DCC67CA188857960AB8205FF64878ABC3A2C.mft (raw, json)
Hash identifier: BBRB8vI+EeamMlbA5tiAvmI0DeUc2m0gqKaycO+MsSE=
Subject key identifier: 69:AB:B5:18:C8:30:31:83:00:2F:45:EF:D0:0C:2D:EB:44:3F:00:32
Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
Certificate issuer: /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Certificate serial: 172B895DC35CDF552E9DB1753346F3D742207B6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 17:08:43 +0000
Manifest this update: Wed 02 Sep 2026 17:03:43 +0000
Manifest next update: Thu 03 Sep 2026 18:40:43 +0000
Files and hashes: 1: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: XXL+jrySck8YOfCgNHqgkAmnQwL01WtL6AIXMhWluBI=)
2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=)
3: 7114DCC67CA188857960AB8205FF64878ABC3A2C.crl (hash: 6dA+omKf178+zvINHUWet6WhObnWVq3jE5E/QhQaOA4=)
4: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: dM86g1KJjcw4ZcRJ1Gbl9gY8oFj7Vsah0QHgp5jAvIU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 18:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2b:89:5d:c3:5c:df:55:2e:9d:b1:75:33:46:f3:d7:42:20:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Validity
Not Before: Sep 2 17:03:43 2026 GMT
Not After : Sep 3 18:40:43 2026 GMT
Subject: CN=69ABB518C8303183002F45EFD00C2DEB443F0032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:1b:80:a1:75:19:54:30:44:47:f8:98:dc:
c7:bf:fe:d7:8d:57:9e:89:56:0e:9e:bc:cf:5c:e9:
bc:d9:6b:b0:61:65:01:78:6c:61:2a:6d:46:0e:11:
0c:19:15:2a:fd:6c:f1:f3:d9:e1:0f:e0:bb:72:62:
8c:c4:8e:a2:04:5f:bb:33:67:9e:9d:2b:5d:14:24:
38:a4:df:b1:fc:6d:48:83:71:be:7d:eb:61:e9:54:
eb:ac:c8:1f:b8:f2:2d:97:f6:05:aa:fc:a4:2e:a6:
dc:f1:d2:21:8c:fb:bd:f2:c5:a7:99:a7:5c:c0:dc:
4d:43:e1:14:7d:f6:7a:50:67:38:9d:06:d8:4e:d8:
f8:27:c0:40:c4:c6:cf:5c:10:07:6c:98:a3:19:86:
30:4c:6d:1f:03:e4:85:2d:ee:26:28:1e:0e:19:d0:
df:ab:50:17:c9:b2:73:40:77:82:6b:2b:dc:e2:90:
ab:8d:57:04:29:71:3f:ea:5b:bd:a0:98:cb:7d:61:
66:14:b0:59:13:56:54:da:3e:7b:fa:e1:e4:e7:ad:
51:89:df:36:20:2a:42:ba:c0:18:3b:14:9b:d7:09:
39:1c:a7:a4:83:db:45:f9:7f:6a:45:a2:87:ed:1b:
93:1a:ac:3d:54:44:d3:68:49:4e:2d:69:d0:38:5e:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:B5:18:C8:30:31:83:00:2F:45:EF:D0:0C:2D:EB:44:3F:00:32
X509v3 Authority Key Identifier:
keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b4:85:45:b7:8e:2c:5e:36:ae:b7:85:3b:4c:bb:72:0c:43:
58:e7:c7:12:5c:a2:03:d0:2b:93:1d:9b:e7:c5:55:72:01:f1:
98:eb:80:29:59:56:82:86:d6:4f:3e:1e:37:64:68:1a:7c:0d:
4e:a6:a1:4a:9e:7c:7b:e9:e1:93:0a:1c:85:08:e2:61:62:77:
ae:74:76:b5:80:fb:8c:ac:b8:47:1b:af:7f:3c:71:35:5f:d3:
52:be:de:27:c6:a9:01:75:9e:82:86:ae:2d:3d:41:3f:10:5a:
b7:5d:fa:14:83:f9:e4:3c:56:7b:d3:e2:b0:72:ce:10:89:b6:
59:5b:7d:3f:4d:58:0b:84:1f:00:11:2f:29:e8:72:c6:f9:a4:
c5:e6:ee:f7:99:50:ea:19:8d:fb:d8:17:e8:b7:9d:d1:b2:f6:
60:79:55:77:ee:1b:22:82:0d:1e:65:7f:0d:fe:c0:63:8d:4f:
c9:39:91:a7:a0:68:f3:53:f3:14:51:47:14:19:31:1e:c9:8b:
29:7a:fe:ce:dd:11:c8:24:66:8f:6c:b5:a9:37:e6:8f:7e:06:
ef:51:91:d1:20:f5:bb:41:29:3f:ed:08:9d:59:d8:b0:ac:dc:
0f:7e:a2:00:be:eb:a5:04:23:e6:0a:e5:c4:39:2e:bf:55:04:
28:fa:f6:6b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFyuJXcNc31UunbF1M0bz10Ige20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4
QUJDM0EyQzAeFw0yNjA5MDIxNzAzNDNaFw0yNjA5MDMxODQwNDNaMDMxMTAvBgNV
BAMTKDY5QUJCNTE4QzgzMDMxODMwMDJGNDVFRkQwMEMyREVCNDQzRjAwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nBuAoXUZVDBER/iY3Me//teN
V56JVg6evM9c6bzZa7BhZQF4bGEqbUYOEQwZFSr9bPHz2eEP4LtyYozEjqIEX7sz
Z56dK10UJDik37H8bUiDcb5962HpVOusyB+48i2X9gWq/KQuptzx0iGM+73yxaeZ
p1zA3E1D4RR99npQZzidBthO2PgnwEDExs9cEAdsmKMZhjBMbR8D5IUt7iYoHg4Z
0N+rUBfJsnNAd4JrK9zikKuNVwQpcT/qW72gmMt9YWYUsFkTVlTaPnv64eTnrVGJ
3zYgKkK6wBg7FJvXCTkcp6SD20X5f2pFooftG5MarD1URNNoSU4tadA4XhHlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaau1GMgwMYMAL0Xv0Awt60Q/ADIwHwYDVR0j
BBgwFoAUcRTcxnyhiIV5YKuCBf9kh4q8OiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDNhNzlkOTUtNjRhOS00ODA5LTk0YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3
Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4QUJDM0EyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MTE0RENDNjdDQTE4ODg1Nzk2MEFCODIwNUZGNjQ4NzhBQkMz
QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0
YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0
ODc4QUJDM0EyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJG0hUW3jixeNq63hTtMu3IMQ1jnxxJcogPQ
K5Mdm+fFVXIB8ZjrgClZVoKG1k8+HjdkaBp8DU6moUqefHvp4ZMKHIUI4mFid650
drWA+4ysuEcbr388cTVf01K+3ifGqQF1noKGri09QT8QWrdd+hSD+eQ8VnvT4rBy
zhCJtllbfT9NWAuEHwARLynocsb5pMXm7veZUOoZjfvYF+i3ndGy9mB5VXfuGyKC
DR5lfw3+wGONT8k5kaegaPNT8xRRRxQZMR7Jiyl6/s7dEcgkZo9stak35o9+Bu9R
kdEg9btBKT/tCJ1Z2LCs3A9+ogC+66UEI+YK5cQ5Lr9VBCj69ms=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:20:15 2026 by rpki-client