
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json)
Hash identifier: E5/EJrEOVEsP6CubmNPkcUuj4EtaEX659aCwIFED9fQ=
Subject key identifier: 15:14:3A:2F:31:E0:70:EA:8B:F0:0C:95:DF:A2:E9:46:4E:49:7A:BD
Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Certificate serial: 011022E0CBD08382794A18C6729B39FD465269F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 01:55:21 +0000
Manifest this update: Thu 03 Sep 2026 01:50:21 +0000
Manifest next update: Fri 04 Sep 2026 02:40:21 +0000
Files and hashes: 1: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: aMcx4EJQnswbDqgnDCTGQXEry5YhLfQwhkMb/G/RrIc=)
2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=)
3: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=)
4: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:10:22:e0:cb:d0:83:82:79:4a:18:c6:72:9b:39:fd:46:52:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Validity
Not Before: Sep 3 01:50:21 2026 GMT
Not After : Sep 4 02:40:21 2026 GMT
Subject: CN=15143A2F31E070EA8BF00C95DFA2E9464E497ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:13:43:b1:f0:b0:27:d8:a5:14:a7:e6:f6:
b8:0a:58:bc:43:ee:a7:ac:97:7f:26:c4:2f:a8:95:
2f:d6:a8:61:84:4e:7f:da:25:56:e9:14:70:77:35:
af:c7:5e:45:a7:38:bf:5b:91:f9:8a:2d:90:04:45:
c5:23:3c:a7:2f:55:fd:b6:bc:a7:fb:66:9a:d4:06:
f1:5c:06:1a:60:72:20:ce:63:b0:5b:67:0b:c6:b2:
fe:51:04:98:ad:9f:ee:fa:6d:b4:a2:54:af:8b:8f:
97:aa:b5:21:98:c7:2d:20:8e:a8:7b:05:0e:01:e3:
0c:ca:b7:32:21:fa:95:1c:0c:5f:ef:c7:ff:eb:59:
fa:c7:a4:dc:7a:72:b2:92:e6:1d:78:29:42:9f:d0:
b7:59:89:82:86:05:56:1b:42:bd:fd:67:ab:30:36:
a7:a5:8e:a2:8d:1c:c0:95:c7:07:9a:1c:e2:68:0e:
32:1b:1d:cf:e7:10:dc:79:12:bf:8b:4a:d9:8d:3f:
61:d2:5d:bb:5c:ae:6e:23:80:c2:09:d1:f0:b5:7f:
ee:17:df:0f:89:09:7c:44:43:17:df:30:d9:ec:f2:
87:79:fe:64:04:16:97:cd:66:08:59:24:37:0c:f9:
93:db:63:62:0d:e1:5c:9c:ae:62:11:2d:8d:d0:05:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:3A:2F:31:E0:70:EA:8B:F0:0C:95:DF:A2:E9:46:4E:49:7A:BD
X509v3 Authority Key Identifier:
keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:2a:21:a6:e9:4d:22:c1:07:76:fc:f6:42:c2:c4:54:d0:
56:46:5d:e4:37:89:8f:c3:f6:c3:aa:4b:fe:d1:b9:69:9c:52:
62:f0:a5:a3:14:86:fc:d2:8c:43:a4:eb:d8:25:d9:dc:0c:40:
35:cb:e3:46:db:21:3a:b9:47:33:dd:c2:b8:18:03:81:3e:36:
bd:cd:5e:25:d0:d7:aa:dd:6b:b7:cf:78:94:32:54:fd:ca:09:
7c:d0:f5:0f:47:f2:ac:32:cb:e5:36:f7:dd:3e:b0:e9:6f:a3:
4a:da:c8:58:41:f8:56:ef:56:0b:1e:d8:f7:9e:ef:6c:76:53:
07:ef:99:56:51:73:8d:d5:bb:4a:db:3f:49:17:68:fa:04:5b:
a1:17:6b:66:d4:d1:3e:22:ee:b5:90:05:ea:b1:2b:87:fe:fa:
f6:7c:cc:7d:80:a8:b0:7b:79:51:f2:88:5c:25:77:b5:5a:78:
df:be:36:9d:49:c3:c5:05:bd:79:8a:39:40:95:9c:69:12:a8:
90:27:67:8c:81:41:8c:72:d3:13:b7:64:5f:8b:c3:34:22:43:
09:1e:99:86:80:25:2b:a1:8e:37:45:b3:ce:e8:ef:ad:a4:0d:
12:d3:3d:cb:47:69:a7:3c:12:6a:35:77:4f:07:13:6b:f5:37:
03:45:04:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUARAi4MvQg4J5ShjGcps5/UZSafMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYy
Q0U2RUZGNjAeFw0yNjA5MDMwMTUwMjFaFw0yNjA5MDQwMjQwMjFaMDMxMTAvBgNV
BAMTKDE1MTQzQTJGMzFFMDcwRUE4QkYwMEM5NURGQTJFOTQ2NEU0OTdBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovxNDsfCwJ9ilFKfm9rgKWLxD
7qesl38mxC+olS/WqGGETn/aJVbpFHB3Na/HXkWnOL9bkfmKLZAERcUjPKcvVf22
vKf7ZprUBvFcBhpgciDOY7BbZwvGsv5RBJitn+76bbSiVK+Lj5eqtSGYxy0gjqh7
BQ4B4wzKtzIh+pUcDF/vx//rWfrHpNx6crKS5h14KUKf0LdZiYKGBVYbQr39Z6sw
NqeljqKNHMCVxweaHOJoDjIbHc/nENx5Er+LStmNP2HSXbtcrm4jgMIJ0fC1f+4X
3w+JCXxEQxffMNns8od5/mQEFpfNZghZJDcM+ZPbY2IN4VycrmIRLY3QBZ+ZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFRQ6LzHgcOqL8AyV36LpRk5Jer0wHwYDVR0j
BBgwFoAUgiFZlmB1WV5PdpirBjqljyzm7/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWY2ZDE4NWUtZDRmNC00ODIwLWI0YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2
MDc1NTk1RTRGNzY5OEFCMDYzQUE1OEYyQ0U2RUZGNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZF
RkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0
YjYtNzk4YzMwN2FkN2U1LzAvODIyMTU5OTY2MDc1NTk1RTRGNzY5OEFCMDYzQUE1
OEYyQ0U2RUZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIDzKiGm6U0iwQd2/PZCwsRU0FZGXeQ3iY/D
9sOqS/7RuWmcUmLwpaMUhvzSjEOk69gl2dwMQDXL40bbITq5RzPdwrgYA4E+Nr3N
XiXQ16rda7fPeJQyVP3KCXzQ9Q9H8qwyy+U2990+sOlvo0rayFhB+FbvVgse2Pee
72x2UwfvmVZRc43Vu0rbP0kXaPoEW6EXa2bU0T4i7rWQBeqxK4f++vZ8zH2AqLB7
eVHyiFwld7VaeN++Np1Jw8UFvXmKOUCVnGkSqJAnZ4yBQYxy0xO3ZF+LwzQiQwke
mYaAJSuhjjdFs87o762kDRLTPctHaac8Emo1d08HE2v1NwNFBPM=
-----END CERTIFICATE-----
Generated at Thu Sep 3 06:00:29 2026 by rpki-client