
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json)
Hash identifier: kEo8wzenUbquuXD5tnQ3qsNwEqoNlIuu29V/s8piYOE=
Subject key identifier: 02:88:FE:C6:A5:94:0F:9B:4D:52:72:25:31:76:41:C7:4A:82:BA:CB
Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C
Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C
Certificate serial: 15C91511C81D9C3156A67A94BD2830925E1C03F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 09:53:41 +0000
Manifest this update: Mon 20 Jul 2026 09:48:41 +0000
Manifest next update: Tue 21 Jul 2026 13:28:41 +0000
Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=)
2: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: vJJf4mI4DP0mGsO7zQV4Evt0eDtOMwPr8Fq9FvUxJyE=)
3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl
rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 13:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c9:15:11:c8:1d:9c:31:56:a6:7a:94:bd:28:30:92:5e:1c:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C
Validity
Not Before: Jul 20 09:48:41 2026 GMT
Not After : Jul 21 13:28:41 2026 GMT
Subject: CN=0288FEC6A5940F9B4D527225317641C74A82BACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:9b:c5:09:6b:76:50:87:c0:a6:8d:e3:20:
d1:ce:49:d8:8a:83:c1:1a:7b:9e:e9:8c:36:ef:b3:
71:4c:d0:5e:3e:2e:16:20:35:ea:9c:77:fa:fd:d1:
33:cb:63:a8:84:d3:24:54:4f:4d:38:65:f6:ec:a9:
32:60:43:d2:f8:9f:b9:7c:6c:4a:1e:1c:a9:ea:28:
b3:26:49:5c:af:88:d2:b0:81:2a:bb:e9:29:36:17:
0f:bf:f1:8b:b6:84:18:85:7c:5a:79:f7:e9:0d:0e:
fd:d5:b1:fa:88:be:36:e5:5a:f8:28:74:86:76:08:
6a:ce:0d:97:7b:37:1a:0f:05:f3:47:c0:e8:cd:28:
bf:14:89:27:86:86:31:f3:ed:93:9f:8e:9e:9b:b5:
94:31:8b:f8:4e:78:6e:af:de:0f:98:0c:cb:5d:f5:
92:f4:b0:2f:70:6b:b2:67:50:46:4f:ac:71:f5:1c:
b2:cb:34:7c:7b:1d:16:1c:49:67:b2:52:21:4b:cf:
7d:af:2f:30:c5:50:ba:0d:83:01:d2:ef:90:bd:07:
e6:68:47:2d:b5:cb:ba:5b:9d:8f:8e:b9:a6:d3:6a:
6d:bd:3d:6d:e9:f9:4b:a7:a1:80:27:50:29:bc:d0:
b0:58:59:d3:79:12:06:c2:6a:0b:47:9d:e7:05:b0:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:FE:C6:A5:94:0F:9B:4D:52:72:25:31:76:41:C7:4A:82:BA:CB
X509v3 Authority Key Identifier:
keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:28:61:79:48:e7:c2:52:0f:5d:13:9f:64:32:f1:03:29:3f:
1d:f9:d1:3e:80:76:9b:8b:d1:d0:ac:61:81:47:0c:61:ba:fe:
d0:8f:aa:17:27:b7:f3:50:90:39:3a:19:1a:f5:5e:25:17:69:
df:cd:de:81:fd:12:59:5a:27:4b:ba:e0:59:bc:ba:0a:6f:58:
45:37:04:bc:11:08:40:32:fc:2c:7e:b5:a8:9a:0c:df:c6:95:
df:11:d4:3d:2b:6e:ec:b6:7c:3d:db:99:85:d9:b3:25:c6:55:
c6:2e:ce:04:8a:03:d5:b4:4a:f2:dd:5f:c9:a8:94:e3:e2:10:
a1:0b:a5:89:7c:f4:89:e6:32:e5:86:37:88:7a:e9:93:a4:2e:
df:6a:67:43:5d:12:be:fb:7c:dd:98:86:2b:a4:a1:90:e5:e6:
fd:43:5b:a0:3f:b4:e7:7d:12:a7:6c:aa:de:d6:e3:d7:62:e4:
ec:a1:cc:54:bf:e7:f4:b0:de:24:61:83:2e:f6:d6:54:59:52:
cf:d4:67:97:88:13:2b:8b:d7:c8:73:41:97:ae:a7:79:f1:e2:
76:4e:6f:b2:5b:99:52:73:c4:5a:0e:b3:25:59:d3:30:41:89:
d3:27:c3:7c:e9:73:ac:1b:ee:44:3d:0a:de:4d:dc:0d:ef:6c:
2f:de:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:11:18 2026 by rpki-client