
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
File: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft (raw, json)
Hash identifier: YBpM1sq74clO+QAjFv+vaEwwgRpSymBm4vETGAm3IaE=
Subject key identifier: FA:95:36:45:60:6B:51:F1:BF:3D:E3:A7:A9:92:BA:7A:3A:D6:FD:E8
Authority key identifier: 0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
Certificate issuer: /CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Certificate serial: 393B4451BD7DCE07B2A2B30A7D15F829F4667745
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 08:16:24 +0000
Manifest this update: Fri 04 Sep 2026 08:11:24 +0000
Manifest next update: Sat 05 Sep 2026 09:27:24 +0000
Files and hashes: 1: 0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl (hash: gwNg+L7FERaF7aCe9TrAPDEgC03WpYPLOLuVrLOrC2w=)
2: 3130332e38332e302e302f32342d3234203d3e20313530323532.roa (hash: ESYFLhLUVsrTAfVtaCjm2iupLDG9Q3qv3T4W73aB/40=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3b:44:51:bd:7d:ce:07:b2:a2:b3:0a:7d:15:f8:29:f4:66:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8E7FF529A30407FEDE18CF892F4E205578CFF4
Validity
Not Before: Sep 4 08:11:24 2026 GMT
Not After : Sep 5 09:27:24 2026 GMT
Subject: CN=FA953645606B51F1BF3DE3A7A992BA7A3AD6FDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:9b:ff:62:bd:d4:d7:f6:45:8d:9a:3e:d6:
bd:1e:0f:cb:2d:06:f5:9d:8f:b4:90:a1:8e:49:a0:
ab:d3:5e:2d:c6:8c:56:f8:3d:64:75:fc:f0:e9:1f:
c9:a6:f0:96:aa:45:0f:e3:50:8c:b1:5d:bb:a2:7d:
bf:7b:b1:62:58:44:84:03:5e:78:a5:b8:8c:70:21:
4e:4f:40:0c:51:78:b0:e7:e6:f8:83:e9:71:5c:56:
7f:f9:11:fc:ad:68:50:87:eb:41:c3:43:7e:a1:be:
f0:2c:8e:ac:b9:b5:45:d7:0f:5c:9c:3a:48:52:9a:
4e:1d:44:12:7d:ca:eb:c7:8b:f0:ea:dc:56:ba:84:
13:90:7c:89:6d:24:05:e1:d1:d1:61:fb:75:c4:79:
a9:44:2a:fa:85:8a:32:09:1f:bc:23:67:fc:1d:18:
9a:08:13:09:c8:aa:35:91:66:a4:05:d3:3f:7d:cb:
b5:cd:63:16:a9:e2:d3:6b:4a:4e:f0:23:c6:8a:74:
74:6a:4a:66:10:a4:91:1e:20:03:0e:63:02:46:7f:
f1:25:2a:98:da:9c:32:13:ac:db:af:20:d9:42:3a:
a6:48:99:17:97:23:70:5b:0b:c3:1a:95:4f:52:cc:
8d:b6:56:31:ee:8f:1a:ef:f4:02:df:cb:ed:af:3c:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:36:45:60:6B:51:F1:BF:3D:E3:A7:A9:92:BA:7A:3A:D6:FD:E8
X509v3 Authority Key Identifier:
keyid:0E:8E:7F:F5:29:A3:04:07:FE:DE:18:CF:89:2F:4E:20:55:78:CF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/662c2366-f9ec-4455-a9ff-ff696a107e62/0/0E8E7FF529A30407FEDE18CF892F4E205578CFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:33:02:fe:e9:79:01:0e:ba:71:71:c3:47:e9:27:d0:f1:d9:
4d:3f:2c:84:b9:52:35:be:5c:de:bf:09:a5:5e:30:35:12:8c:
18:11:34:02:f7:d0:d4:9b:84:8f:15:8c:7b:58:aa:27:33:76:
73:40:0f:7d:13:2b:6a:5a:6c:bb:e9:12:92:e4:5c:07:70:aa:
2d:7d:72:6a:0b:05:74:a7:b8:58:29:03:ef:aa:05:78:e3:6b:
68:8f:c7:06:2e:d0:29:1a:ab:24:b0:84:83:ea:2d:f3:e8:a8:
42:2e:4a:0f:5f:97:88:b5:61:b8:a9:88:35:1e:ed:80:72:3d:
c0:03:49:d4:04:77:49:c2:2a:0f:1f:c2:a6:d1:79:5e:85:51:
9c:1c:0e:ee:af:7a:3e:61:2f:f8:8a:dc:16:fb:30:9a:64:2b:
a0:85:b9:d9:bd:14:27:ca:10:30:88:16:c0:12:77:26:22:bd:
db:32:95:f2:d4:78:9c:1f:e5:a3:2d:26:a0:fc:54:b2:96:b5:
0b:ed:4c:e4:b2:4a:5d:32:a4:c9:9c:84:e8:99:10:d5:79:42:
ae:24:2f:9c:fb:28:d2:ba:a6:fe:4d:0f:ca:26:9c:6a:54:2e:
aa:64:de:cc:3b:3e:8c:04:13:1b:f1:4e:49:9e:59:94:3d:6b:
ea:dd:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:47 2026 by rpki-client