
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
File: 883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json)
Hash identifier: VeMwpYM4CUIokmNM/BsQKtX0CfUTELVeOGf2MHJ5ubE=
Subject key identifier: C7:B5:60:B6:54:79:7A:82:5D:91:49:24:0E:9E:4A:50:46:61:0F:9B
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial: 2830DBB8905F6FBF833E8F1D7B52DD2FDEE0DD12
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 19:26:37 +0000
Manifest this update: Wed 02 Sep 2026 19:21:37 +0000
Manifest next update: Thu 03 Sep 2026 19:52:37 +0000
Files and hashes: 1: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: 6w8tPpDRPv8cqjVPyXQ+puGMSjydN33VwAniP4fVPYQ=)
2: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=)
3: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=)
4: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 19:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:30:db:b8:90:5f:6f:bf:83:3e:8f:1d:7b:52:dd:2f:de:e0:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Validity
Not Before: Sep 2 19:21:37 2026 GMT
Not After : Sep 3 19:52:37 2026 GMT
Subject: CN=C7B560B654797A825D9149240E9E4A5046610F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:5b:10:c8:c3:21:30:b3:de:5e:b0:1c:40:
62:01:62:8a:85:02:90:c2:ae:6e:ea:d2:68:21:d8:
f2:14:f2:38:36:5b:01:bc:93:ad:36:20:4c:d6:ce:
ac:45:54:ba:74:36:8a:d6:02:f7:5f:a1:b3:d6:04:
0f:55:20:3a:e3:56:ea:63:d1:b1:0f:d1:3a:cc:1e:
56:0e:7d:c8:d0:b8:e2:50:ba:42:17:6a:6f:be:ad:
c8:da:3f:46:ee:e3:d2:da:da:20:40:67:ed:fb:da:
c7:bd:f8:51:9c:8a:0e:92:95:7a:42:9d:6e:a2:10:
4d:14:aa:4a:31:ed:af:b3:43:74:7d:71:52:8e:35:
1d:d4:36:d8:f6:e4:74:d5:f6:58:59:00:be:09:3c:
7c:b3:bd:06:4c:db:40:c2:28:00:15:9d:ed:6e:6b:
93:f7:35:e9:46:5a:ae:ad:80:93:02:60:fa:b6:1e:
3a:c7:e3:de:8d:05:57:4b:1e:1e:a9:e3:79:63:e4:
bf:06:20:97:66:93:b6:55:be:7d:e2:e8:ca:d1:87:
4b:12:0c:f6:9c:ee:b0:83:c4:94:8f:33:f2:0b:68:
cd:52:e4:bd:b2:8d:06:19:32:64:bd:0e:fd:f0:dd:
8f:d9:67:93:a0:fb:52:08:4d:8a:4c:5e:c8:a0:42:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:60:B6:54:79:7A:82:5D:91:49:24:0E:9E:4A:50:46:61:0F:9B
X509v3 Authority Key Identifier:
keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:ad:61:df:22:78:33:2f:64:44:c9:36:8d:ed:85:34:59:
ad:f1:c6:22:da:96:d3:de:45:ce:05:76:24:ae:bf:6b:ff:2b:
c7:41:28:45:16:8e:95:6e:d8:8a:94:4e:03:b3:53:dc:02:eb:
5e:33:05:01:dd:db:03:88:56:e7:24:5c:c1:5b:20:43:6d:42:
ff:c0:ac:97:a1:ee:8c:40:cd:be:3f:bb:1b:87:9b:ca:f0:1e:
16:ae:c9:b7:f0:de:c8:90:c5:6a:a2:e2:bb:e2:22:98:e0:6a:
c0:0c:f0:5d:d5:d1:cb:f5:e1:b6:e8:76:c4:27:63:cb:69:a2:
55:8e:1e:ed:e9:01:3f:10:7e:43:b9:57:69:12:b7:ca:dc:bf:
d0:0e:03:ee:aa:9e:72:70:fb:92:d5:89:eb:ec:74:7a:be:d1:
ce:c2:4b:7c:0a:8d:28:61:c4:ae:ae:3c:b3:d4:6d:70:f1:b9:
0b:88:97:91:f3:87:61:f6:23:53:6e:83:20:a0:26:97:7a:b5:
f7:1e:8f:9b:b9:98:79:0e:c9:15:ae:d0:6d:43:60:fa:fe:4d:
d5:27:d3:ec:32:ed:46:b7:7f:da:80:f0:cc:99:82:4e:8e:91:
8d:dd:51:9f:5e:cf:62:d3:a7:7d:43:3e:76:67:6a:47:2d:66:
ac:08:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:01:05 2026 by rpki-client