
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft (raw, json)
Hash identifier: VrDH1ZIgzHQn70mnPeEwtKjJsBXZwoKgw0TRJlhDLBY=
Subject key identifier: 03:DE:0D:83:EF:16:E1:C6:E7:DB:07:A0:1D:BA:8A:40:2C:35:26:15
Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
Certificate issuer: /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Certificate serial: 69D5533CF049B6B408B7DD9C47C4E36B9D4B3767
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 12:18:33 +0000
Manifest this update: Wed 02 Sep 2026 12:13:33 +0000
Manifest next update: Thu 03 Sep 2026 15:47:33 +0000
Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: KJ7p2DQB9uLZReoNNtXLeW/ntHP0ly/9EgDzYMeS9tA=)
2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=)
3: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl (hash: TtnyiWau+ZF4CFfqVuEqzDTPQavRb4ebhIhovd9DV/o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 15:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d5:53:3c:f0:49:b6:b4:08:b7:dd:9c:47:c4:e3:6b:9d:4b:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Validity
Not Before: Sep 2 12:13:33 2026 GMT
Not After : Sep 3 15:47:33 2026 GMT
Subject: CN=03DE0D83EF16E1C6E7DB07A01DBA8A402C352615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:39:6a:d2:da:a9:91:f1:90:b0:72:41:ca:
de:e8:ba:97:45:c3:3c:25:e7:50:79:7a:7b:a0:f2:
66:d2:1f:55:bc:ab:d9:41:e7:84:f4:86:63:84:30:
7b:a2:85:cb:19:8b:69:4f:6c:6b:1d:d6:0a:30:ae:
ac:04:59:20:df:5d:e1:d5:54:17:dc:60:53:89:1b:
d6:88:29:27:27:b8:7a:5f:d4:1e:d3:74:22:85:67:
9d:20:2a:b6:4a:8a:81:eb:0a:85:b9:28:18:82:e8:
6d:59:a1:d3:c1:f9:b0:57:59:f6:11:91:ac:3c:be:
37:e7:08:41:c9:87:e5:14:c6:98:62:2e:3a:84:93:
ea:86:5d:2a:13:34:d1:af:07:c6:e1:7b:31:28:2b:
8d:53:05:21:1e:1b:b9:51:cc:a3:0f:ec:c5:85:c8:
3b:b7:dc:11:6e:1b:dd:3f:a6:8b:b6:54:40:90:6f:
52:13:8f:06:44:00:86:a7:1f:1a:ff:b0:f3:03:48:
21:84:60:a2:7a:bb:34:8d:37:e5:97:2c:f0:30:48:
85:ab:18:4f:d4:9b:43:1f:68:81:3a:b8:d0:72:da:
b9:1e:4e:c2:0e:fb:b7:c4:40:22:8a:66:71:27:a9:
ba:69:22:cb:0c:18:d4:3d:f9:d8:60:a5:6c:70:d2:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:0D:83:EF:16:E1:C6:E7:DB:07:A0:1D:BA:8A:40:2C:35:26:15
X509v3 Authority Key Identifier:
keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:d8:e8:fd:ff:e3:d1:7e:05:9a:95:52:04:f6:1c:ea:33:
50:2a:2f:fa:c1:d2:e6:81:f6:02:d8:65:0e:7f:75:19:1b:dd:
cc:a2:d2:1a:c7:85:5a:c4:d9:f2:dc:4b:87:79:84:15:75:1a:
cc:88:5a:3f:e3:8e:b4:09:18:e0:0b:e2:71:19:92:a6:84:27:
74:35:48:bb:22:24:3e:20:50:67:cb:50:5d:65:e3:b2:ca:57:
c9:55:30:e9:7b:47:11:fc:63:49:14:a9:91:b7:aa:79:c6:c8:
a9:2a:54:f0:0e:8c:8a:f8:e8:93:7a:69:38:37:83:af:54:d0:
0f:f3:01:68:a7:07:02:9f:9a:6f:bd:eb:55:bd:64:a0:66:aa:
eb:51:95:be:89:c5:6b:eb:e2:6e:8f:bf:c0:13:5f:7b:a8:f6:
93:ca:e6:21:7a:20:b5:02:cb:70:4d:f8:34:fe:d5:7a:e5:19:
f4:f1:25:f4:93:bc:a2:25:f7:78:77:f6:be:ea:78:a6:06:72:
a6:b1:65:12:a9:47:3c:16:3d:b2:00:ba:05:c7:a7:1c:b8:69:
b1:93:c2:cd:bf:75:d3:7b:a8:0d:a6:fb:11:41:2d:d8:4f:8b:
2d:ba:03:af:cb:8d:92:77:64:73:24:02:de:a4:cd:b2:3a:09:
b0:5a:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:28:21 2026 by rpki-client