
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
File: 1675ADC47F4873145B24769B8134062EEB020A6A.mft (raw, json)
Hash identifier: Vpe5LiGr27CkgRb8w/q8Hbt5TFaXVQq5AWkrvMFezDs=
Subject key identifier: 36:6C:03:AF:D5:9F:67:AA:AA:F8:97:DA:E6:54:90:74:C8:FB:25:BA
Authority key identifier: 16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A
Certificate issuer: /CN=1675ADC47F4873145B24769B8134062EEB020A6A
Certificate serial: 49311CF72944693913D04C63B737F410E4CF58E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
Manifest number: F7
Signing time: Tue 03 Nov 2026 23:42:33 +0000
Manifest this update: Tue 03 Nov 2026 23:37:33 +0000
Manifest next update: Thu 05 Nov 2026 01:05:33 +0000
Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: /DV6+SaBovRK3v8Zh1bjyOMwbspI86vj5IjrMCFPeu0=)
2: 1675ADC47F4873145B24769B8134062EEB020A6A.crl (hash: XaI1IyMoMpx4Njg+mzyNaWFBab9a9CWvKSTFMrYr6QY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl
rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:31:1c:f7:29:44:69:39:13:d0:4c:63:b7:37:f4:10:e4:cf:58:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1675ADC47F4873145B24769B8134062EEB020A6A
Validity
Not Before: Nov 3 23:37:33 2026 GMT
Not After : Nov 5 01:05:33 2026 GMT
Subject: CN=366C03AFD59F67AAAAF897DAE6549074C8FB25BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fe:bc:38:e4:18:05:94:58:58:a1:71:b9:25:
81:9d:74:dd:6d:8a:8a:4a:a3:b5:13:b7:83:39:6d:
85:a3:4d:99:03:5b:20:06:8e:0d:90:cf:e8:d0:ab:
61:96:23:4c:1e:b4:90:ec:93:e3:8b:e6:e6:40:e8:
17:7f:69:83:7c:8e:9f:64:e6:b0:fe:0c:24:8f:d1:
77:5b:20:a4:3c:f6:8b:17:05:ca:d2:b0:4d:77:2a:
fb:b1:26:f3:b8:3c:bb:8a:eb:fc:41:49:be:16:08:
08:6f:cb:e9:ff:4f:39:3f:59:c1:0f:69:fe:df:4d:
bf:d6:86:44:5f:40:c8:c6:90:1a:54:b1:01:80:17:
d8:8a:50:89:64:5b:ff:f4:1a:d0:75:bb:09:92:22:
96:e9:a3:8d:a5:39:48:cf:1b:78:cb:60:7f:0b:18:
99:ef:38:ae:99:e5:35:a3:7b:5a:7b:7c:62:16:82:
c7:a1:9a:84:31:a2:43:40:4d:48:7a:79:72:36:32:
47:ba:a5:3a:11:50:e5:0c:2c:ce:77:11:a9:09:e0:
d4:e8:10:d2:95:f7:f5:57:2e:15:bd:a5:fa:c2:1e:
ee:17:f2:65:59:e7:2c:49:5f:10:6c:54:4a:a8:b0:
c4:e6:c6:fd:96:59:cf:71:1c:7d:6b:15:0d:16:39:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:03:AF:D5:9F:67:AA:AA:F8:97:DA:E6:54:90:74:C8:FB:25:BA
X509v3 Authority Key Identifier:
keyid:16:75:AD:C4:7F:48:73:14:5B:24:76:9B:81:34:06:2E:EB:02:0A:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1675ADC47F4873145B24769B8134062EEB020A6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/1675ADC47F4873145B24769B8134062EEB020A6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6d:ea:ce:ab:c3:22:50:85:c2:d6:b4:ab:31:0c:2f:62:2b:
fc:1e:33:c9:bd:ec:19:fd:44:0f:32:a6:65:1b:79:f8:4c:1a:
d2:ab:86:50:2e:8d:f1:26:aa:2d:4f:69:c1:53:6a:18:66:4f:
0e:b1:69:07:b6:21:50:d2:ef:d6:0d:36:20:9f:83:de:8d:05:
c7:3d:18:11:9b:57:f8:c6:7c:92:10:d7:bd:44:44:98:fc:8c:
92:14:26:00:b9:49:fe:02:e4:53:7a:b5:7d:8c:86:a3:2a:bf:
30:90:4c:cc:75:23:93:62:8b:9d:12:54:ef:a9:20:b2:a3:d1:
51:78:63:9b:9b:fe:f3:99:77:e2:79:b1:82:55:c5:e0:fb:d4:
e3:95:e0:f4:0c:4e:ee:24:66:7b:1d:75:ae:a5:74:4a:dc:d4:
98:a6:dc:2a:b6:b0:a3:bf:04:15:53:20:de:29:b3:cf:42:9f:
dc:9b:23:49:4b:c3:66:9c:57:05:98:04:77:ea:8d:20:d6:e9:
2d:59:54:39:7d:9d:e6:72:74:e8:22:b8:96:59:f1:d2:83:6b:
e1:42:02:93:8e:82:af:4c:9c:31:be:2f:00:77:ca:ac:8b:f3:
40:f3:6b:92:bf:a8:a8:7a:86:28:e4:db:98:70:d2:96:83:17:
54:82:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:07:57 2026 by rpki-client