
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
File: F4B592783A4D1278733E583FF474D505E715EAEC.mft (raw, json)
Hash identifier: SkunVNgjh1mydfgsT13hgwTJX2V7tYfjA+iP5QJOAT8=
Subject key identifier: 52:66:F4:70:39:D9:82:B5:37:70:93:D3:5A:01:62:AF:1D:C8:DA:67
Authority key identifier: F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
Certificate issuer: /CN=F4B592783A4D1278733E583FF474D505E715EAEC
Certificate serial: 5F120204CB66898512CB867B66FEDAD0C7492B95
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
Manifest number: A8
Signing time: Fri 04 Sep 2026 13:08:00 +0000
Manifest this update: Fri 04 Sep 2026 13:03:00 +0000
Manifest next update: Sat 05 Sep 2026 16:06:00 +0000
Files and hashes: 1: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: RTESWs20NpXZjZyB8EzKQY+C0yZE4/dxGzmQFAgjBdw=)
2: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: xKZvI7DoYttGR54Om2vm9eFapdM+/V55V6OhpEXUV68=)
3: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: SvetT4fkB5VuEIEYdhmb+OWzFFcY03lt8k6wWYfq9nA=)
4: F4B592783A4D1278733E583FF474D505E715EAEC.crl (hash: +9M/ZifmkTp717Gh7RSTZ078rAU7nSto1g0XQ7BihwQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:12:02:04:cb:66:89:85:12:cb:86:7b:66:fe:da:d0:c7:49:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4B592783A4D1278733E583FF474D505E715EAEC
Validity
Not Before: Sep 4 13:03:00 2026 GMT
Not After : Sep 5 16:06:00 2026 GMT
Subject: CN=5266F47039D982B5377093D35A0162AF1DC8DA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:00:6d:e8:27:06:66:63:05:7f:f9:cf:f8:
aa:9a:a1:f2:8c:69:c6:fa:fa:18:17:8b:1d:42:5c:
76:ed:55:ba:8d:47:37:98:83:0d:ce:b5:21:91:98:
4e:c0:c1:0a:ea:e4:bd:15:ad:51:56:88:16:ab:18:
d4:79:49:3d:6e:a2:f3:fa:08:11:62:34:42:73:80:
c2:23:3e:bc:a6:6b:5c:11:bc:30:57:8c:6b:96:dc:
14:e9:a2:7c:6a:08:41:81:9f:56:f3:ae:21:9b:fb:
a1:e1:ec:86:8a:37:2c:ee:32:ed:96:b7:15:fd:7d:
44:79:01:4f:6b:c7:33:05:46:de:63:61:c9:e7:01:
d3:99:77:bb:2d:41:16:3c:89:6c:8d:79:24:ec:5a:
65:3b:72:f8:c7:89:17:96:b4:f5:fa:91:aa:a0:27:
60:dd:17:80:3a:4c:d7:ef:52:6a:29:74:a7:dc:50:
0b:2a:ac:8f:d6:cb:4b:8e:00:41:b4:ab:55:2a:26:
f3:3b:b6:48:2e:c9:9e:8c:40:15:3e:01:02:a6:28:
3b:19:a6:35:2a:15:b7:ea:f9:8b:20:45:30:32:54:
f0:f5:2a:9c:36:b1:4e:39:f3:e2:5c:a7:f3:51:8a:
fe:f7:90:9f:c6:42:20:34:e4:5f:f4:5a:c4:b8:73:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:F4:70:39:D9:82:B5:37:70:93:D3:5A:01:62:AF:1D:C8:DA:67
X509v3 Authority Key Identifier:
keyid:F4:B5:92:78:3A:4D:12:78:73:3E:58:3F:F4:74:D5:05:E7:15:EA:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4B592783A4D1278733E583FF474D505E715EAEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/F4B592783A4D1278733E583FF474D505E715EAEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:f9:9c:c4:c9:46:70:1f:b7:26:36:6c:2a:f1:9c:2e:e3:
ec:c9:40:bb:3f:f1:00:bb:55:f3:64:e4:c4:21:f9:6f:e8:69:
93:79:79:d5:ee:07:6c:f0:78:b3:44:38:d3:ca:ed:52:fe:5a:
50:7d:14:d6:b6:67:4e:00:43:ef:91:f6:67:f9:1c:38:15:f8:
b6:a1:57:e2:5d:2e:4f:bf:8f:d3:5b:96:d8:b8:23:0b:ef:f6:
a4:09:91:a1:1d:58:f6:d0:70:72:5e:8d:31:c2:9c:30:5b:56:
e5:4b:da:5a:ca:2f:06:b0:b2:39:6e:6a:84:ac:18:a5:bf:5e:
46:0f:23:88:df:02:1b:c4:88:f4:4d:8b:62:e8:47:ee:86:ef:
97:87:34:07:18:ad:9d:6c:71:ea:f3:9a:61:71:81:69:cb:a3:
04:ca:2a:9a:d6:c5:2d:88:de:5e:f2:72:76:ef:23:e8:1c:de:
3d:ca:f9:3c:69:ab:60:f9:a8:0d:11:c0:a1:2e:81:6c:67:5a:
34:30:e7:d1:b0:7c:6f:30:1f:44:c1:25:a6:01:0f:e9:ed:72:
78:7f:a4:be:68:c9:7e:59:f8:d4:07:89:3c:81:5f:b5:d7:78:
8c:70:19:94:a7:4c:0b:4c:5e:3b:89:d6:50:60:ab:17:8f:e2:
3f:39:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:17:38 2026 by rpki-client