
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft
File: D225946751D641016A8BDC8983AB89443F4481EE.mft (raw, json)
Hash identifier: KcRMJkyCAEGWJXxvi6ZiBoregzn1Mqc1WQjVgWw5epk=
Subject key identifier: 0F:01:82:9D:2D:16:57:AD:28:44:4D:49:E4:9A:58:59:AB:5A:0D:83
Authority key identifier: D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE
Certificate issuer: /CN=D225946751D641016A8BDC8983AB89443F4481EE
Certificate serial: 73C03821E8497955E34002C5F6BE80294643C465
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 09:27:53 +0000
Manifest this update: Fri 04 Sep 2026 09:22:53 +0000
Manifest next update: Sat 05 Sep 2026 12:57:53 +0000
Files and hashes: 1: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: jbs2GDDsgo2med8aBN6Q/a3OTj8U5cq+mFVfdUXlcps=)
2: D225946751D641016A8BDC8983AB89443F4481EE.crl (hash: lKkWiP7CeVc2DIK+51yE2b21f672z9T0pkpralBudhQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl
rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c0:38:21:e8:49:79:55:e3:40:02:c5:f6:be:80:29:46:43:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D225946751D641016A8BDC8983AB89443F4481EE
Validity
Not Before: Sep 4 09:22:53 2026 GMT
Not After : Sep 5 12:57:53 2026 GMT
Subject: CN=0F01829D2D1657AD28444D49E49A5859AB5A0D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:fe:f4:c2:b1:bf:0b:93:bb:f2:c6:81:25:
ec:5e:f0:c7:43:aa:22:b6:58:bc:5b:75:51:5e:35:
6a:39:06:01:1b:e7:22:08:3e:80:6c:7e:4d:25:69:
00:fb:f5:42:2e:35:e9:11:e3:01:c9:08:82:d8:66:
38:88:4e:6f:91:a3:c2:21:27:17:b8:20:64:73:5e:
7d:c9:4d:c9:81:2d:0b:b7:67:12:72:ad:f8:34:26:
0a:0f:85:a9:c6:7e:2d:c3:87:23:7b:41:f9:6e:90:
c5:7d:17:fc:b1:49:db:e3:2a:fe:03:13:66:ce:22:
ed:ae:6c:a3:ad:24:ac:be:d5:c4:d8:ec:61:3f:71:
09:5b:b5:2b:fb:83:28:3d:62:09:99:39:db:49:6b:
b5:ee:03:92:d9:ae:ee:52:88:2a:ad:ce:49:79:ad:
bf:4e:e6:fe:41:11:8f:b0:cc:af:52:f1:49:15:f1:
23:25:55:17:5a:b2:bf:a1:aa:12:d8:57:25:7d:e6:
2d:ae:a7:b2:57:d2:a6:a5:be:2d:c8:18:38:6d:9b:
2b:84:e8:71:8c:5b:ca:7a:25:20:f7:a0:46:ef:20:
5d:d6:48:a6:d0:a0:92:76:2f:87:d6:58:e3:1a:1d:
ec:71:d3:f1:a5:4f:58:d8:ca:f3:09:66:94:47:60:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:82:9D:2D:16:57:AD:28:44:4D:49:E4:9A:58:59:AB:5A:0D:83
X509v3 Authority Key Identifier:
keyid:D2:25:94:67:51:D6:41:01:6A:8B:DC:89:83:AB:89:44:3F:44:81:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D225946751D641016A8BDC8983AB89443F4481EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/D225946751D641016A8BDC8983AB89443F4481EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1f:07:38:0d:37:aa:1e:9c:b1:27:71:7c:c0:89:94:78:13:
a9:90:1c:55:fa:5a:df:f5:df:5c:3e:b5:66:00:29:9c:dd:75:
f3:02:ed:2b:8f:12:32:e9:39:3a:c9:78:d4:7c:ac:39:b3:6f:
49:63:b5:b4:a4:d8:75:61:05:6e:e8:de:0d:e5:68:a6:05:3c:
c9:40:e8:7a:2d:59:f2:5b:44:f5:e9:a7:e7:37:40:7e:d2:45:
db:6b:30:f3:4c:08:f1:01:e8:86:82:19:fb:28:da:a2:10:26:
ef:15:a1:4f:d9:8e:2c:aa:e9:e0:4b:17:d0:82:1e:fe:2f:a5:
f0:10:f4:5e:a6:aa:24:c7:47:50:cc:be:6d:ff:66:f9:10:d4:
c2:d3:ee:e5:42:2f:d7:7f:e4:8e:2c:65:90:89:c9:c8:a3:1d:
80:07:82:7b:16:16:21:fb:c5:e4:64:e2:3c:75:b3:39:ca:e2:
89:4b:a3:d9:a8:1e:96:2f:ee:59:cc:0f:11:df:81:a2:f1:08:
cc:c3:87:6b:d2:86:c5:f4:1a:43:54:3b:f1:26:b5:fe:bf:5d:
b1:3d:c7:e4:b8:b5:37:29:aa:d7:62:0e:23:cb:a4:ef:a8:3d:
e1:a0:bb:d7:99:e3:e7:37:eb:6a:7a:99:12:37:3a:92:f7:87:
55:f5:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:39:40 2026 by rpki-client