
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
File: 88505636AC2C683A0A15AF1041DEF625BB5D7643.mft (raw, json)
Hash identifier: prwzJzJTjBg9cNZW4IgnPxVVjLbfvwx1mbENXkN6qZU=
Subject key identifier: 53:92:F8:8C:8C:18:29:38:E3:4F:BF:ED:3C:5E:5E:89:0C:45:B6:F2
Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Certificate serial: 42F33E592D864D3FAA33E38CAEA60A9C050CB090
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 23:36:23 +0000
Manifest this update: Thu 03 Sep 2026 23:31:23 +0000
Manifest next update: Fri 04 Sep 2026 23:47:23 +0000
Files and hashes: 1: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: ev2m6+xbvR7mwpXdtEeo7OjxoqRgr494Tm2SeygBLMQ=)
2: 88505636AC2C683A0A15AF1041DEF625BB5D7643.crl (hash: QF3P6/YhCHvYNqPFzZkzWTSx1si662oN0f3NDiDS+uw=)
3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=)
4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: EBf2wSQkajGGPJlM2meU3WwUz7lzn4ofe8fel+KfemQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 23:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f3:3e:59:2d:86:4d:3f:aa:33:e3:8c:ae:a6:0a:9c:05:0c:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643
Validity
Not Before: Sep 3 23:31:23 2026 GMT
Not After : Sep 4 23:47:23 2026 GMT
Subject: CN=5392F88C8C182938E34FBFED3C5E5E890C45B6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:63:27:ca:70:48:e0:51:58:d7:3f:86:11:
ae:39:8d:6d:c5:e5:56:1f:96:c0:c2:ea:26:09:5b:
43:6b:9e:ba:43:68:65:25:23:04:f8:a2:68:47:c0:
50:3d:5c:52:f2:01:31:ea:1a:89:44:69:38:f2:bc:
f7:74:ef:26:cc:cd:7f:c8:bc:dd:eb:50:dc:b5:c5:
6f:b3:cc:60:37:12:ef:de:59:49:d7:f0:b4:fd:5e:
90:2e:d6:27:24:43:2e:eb:9a:f7:d7:79:90:29:52:
34:1e:f6:c7:88:b9:0f:5e:f5:59:a1:d9:e7:c8:85:
b3:10:20:14:41:e7:a5:db:ed:26:36:e2:8a:22:02:
31:48:37:87:11:70:e7:c0:91:5b:12:e7:79:7d:86:
2d:67:66:39:09:50:c7:37:da:22:a4:81:11:e1:ef:
4a:ec:d6:0e:cb:ed:f7:d9:12:b1:ec:9a:e4:08:b0:
ca:c4:90:3d:fd:85:cd:df:8e:8f:dd:85:ca:c8:cd:
74:29:64:0a:34:26:c8:07:fa:ff:23:6a:eb:5a:26:
32:13:64:5d:96:30:76:1f:22:d0:cb:4e:d7:73:24:
1a:26:89:9c:90:15:a5:34:c0:b2:0d:33:f3:c8:3f:
4a:cc:b5:b4:1b:94:b1:0e:50:62:29:63:22:95:7e:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:F8:8C:8C:18:29:38:E3:4F:BF:ED:3C:5E:5E:89:0C:45:B6:F2
X509v3 Authority Key Identifier:
keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2e:a0:bf:fb:9c:ed:c6:cc:bf:0d:de:b6:bc:25:fb:f2:c9:
03:e6:ac:5d:6e:8b:e1:89:ff:4b:b9:57:d9:0e:01:c0:14:ac:
00:38:6b:ed:a8:3b:aa:f7:cc:80:fc:21:b1:96:2a:18:bb:1b:
01:b2:3e:4e:47:fd:32:85:e6:e4:14:f3:00:b8:5d:23:87:9b:
d7:4f:69:b3:69:02:38:90:e2:d3:08:59:c9:97:01:35:8a:7c:
f4:40:79:50:cc:fc:b7:89:8c:55:7a:1c:18:f3:f7:03:47:17:
99:69:ac:6f:d5:07:06:f2:8c:d1:9c:50:d3:26:5e:27:53:71:
3a:67:7d:00:7d:89:9e:c3:a3:1f:12:40:db:62:eb:55:2d:be:
3c:b2:62:2f:c0:c7:4b:75:61:0d:47:84:e7:cf:da:4d:b3:e6:
f2:92:c4:f7:40:8c:d8:c3:06:25:82:eb:9f:a2:45:8e:81:e4:
a6:ab:54:33:21:2c:59:ef:ff:5e:8c:08:f3:da:29:a7:a6:ca:
60:e7:46:16:6f:1f:0c:60:7f:5b:88:d1:62:ba:74:c2:80:3f:
1d:21:94:d0:9d:4a:c0:10:cf:c8:6a:e2:a3:6a:88:0d:04:4e:
d4:00:7d:70:ce:65:98:46:ae:91:15:4d:96:61:91:e4:fd:ec:
05:63:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 12:19:23 2026 by rpki-client