
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json)
Hash identifier: N13vkBp/8/Z2q8WIu6S49jb6TXqC7hGEwBFUsQ5Kfuk=
Subject key identifier: F3:DC:AF:4A:60:97:0B:BA:CD:53:6E:CD:6E:62:F0:1E:7C:62:E5:EE
Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90
Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
Certificate serial: 2DFD53C8DF7762692AC299D24DFC0D211E42C3CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 02:10:42 +0000
Manifest this update: Thu 03 Sep 2026 02:05:42 +0000
Manifest next update: Fri 04 Sep 2026 05:37:42 +0000
Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: zjypbCL5bTNDoWXS89JlGdooYIVz1BRQUx8TL9QVB4o=)
2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl
rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 05:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fd:53:c8:df:77:62:69:2a:c2:99:d2:4d:fc:0d:21:1e:42:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
Validity
Not Before: Sep 3 02:05:42 2026 GMT
Not After : Sep 4 05:37:42 2026 GMT
Subject: CN=F3DCAF4A60970BBACD536ECD6E62F01E7C62E5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:c7:c5:64:a9:96:f3:f0:83:6c:d7:4c:41:
6f:e5:c8:68:c8:1a:d0:87:5d:cd:b4:e0:f2:72:f3:
5f:88:6a:f4:ee:b7:3e:fa:26:55:1e:d1:5d:aa:8a:
2e:66:ce:42:6b:aa:8f:71:59:4b:49:0f:b6:84:f3:
50:f5:d3:27:83:f1:55:59:4c:a4:ce:1a:c6:83:80:
14:af:14:66:6a:68:25:f0:82:2e:ef:bf:41:3f:41:
aa:43:b2:1c:8f:c3:59:f5:c1:35:9a:8d:84:90:bd:
11:ca:17:6b:e0:cb:23:20:7f:90:a2:3a:2e:b3:b7:
29:02:0d:10:c7:ca:93:d1:44:20:4b:9e:6e:8f:9e:
de:e6:d6:36:fc:ce:e4:ce:8a:73:20:fc:ad:72:22:
dd:81:d7:d9:8a:4e:27:5c:8e:0f:f0:6c:3c:7f:31:
4e:ff:cc:32:ab:60:06:23:53:10:fa:da:ae:1b:32:
39:1b:05:e9:70:d1:ae:df:56:c6:21:7d:2e:93:7d:
cd:d7:3d:3c:6f:ed:21:36:bb:8b:89:97:e7:2b:33:
97:d1:20:de:27:e9:67:9d:14:c4:e9:f9:2b:59:f3:
1a:fc:ef:3a:ba:ba:df:4d:73:63:31:87:97:18:f2:
27:4d:f8:8b:e7:ad:c8:2d:a4:9f:9e:2b:1a:ae:10:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:AF:4A:60:97:0B:BA:CD:53:6E:CD:6E:62:F0:1E:7C:62:E5:EE
X509v3 Authority Key Identifier:
keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:42:a3:46:15:b4:1f:2e:25:17:b2:33:2a:13:1b:53:8e:02:
a1:6a:b4:88:f3:63:2c:cd:83:6d:e4:e7:55:8d:e5:a8:ca:74:
0e:94:57:55:2e:47:cb:93:1f:c6:bf:cf:b9:7f:7e:a5:8b:89:
ef:e2:8a:a8:dd:79:86:26:a0:ad:18:fc:5f:9a:b9:fc:ab:54:
22:56:e4:52:40:ce:26:08:9b:99:04:4d:33:41:2d:fc:3d:84:
44:d4:00:62:c8:3d:c1:4c:25:b4:f0:e2:dc:58:6a:06:a6:04:
d4:b4:5d:80:be:f2:74:e3:bf:1d:f2:71:ff:9b:7c:b3:fc:13:
05:44:9b:9a:8a:5c:09:8c:b5:00:02:0f:91:ec:d9:4d:e3:27:
07:d4:e7:ac:6a:87:18:9a:ff:50:f4:60:7d:ec:db:01:57:25:
9b:6a:b1:de:98:5a:2c:92:a2:80:ed:79:94:2a:31:e2:c0:12:
cf:2e:05:19:1b:41:ac:dc:1b:77:8b:bd:ec:84:24:92:f7:60:
e7:68:14:f7:49:9a:99:d7:de:2f:dd:3a:6e:72:af:22:76:59:
c3:20:b6:25:1b:6b:9b:0f:00:2b:b9:e3:28:5b:e8:f5:c1:5a:
05:fa:c5:82:a4:91:f9:79:ba:b6:01:64:9e:97:21:8c:17:a9:
94:84:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:02:23 2026 by rpki-client