
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft
File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json)
Hash identifier: V25X5yR33mP0qxJTO7WmQr1H5O4SU+lglvC7U5HIf7s=
Subject key identifier: 03:A5:B6:9E:E4:6B:BB:9C:2B:41:98:93:61:8D:BC:A0:54:A7:31:BC
Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC
Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC
Certificate serial: 697C9E0B7C90F7D3F0610CB3F439F4C05C6EE23E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:24:59 +0000
Manifest this update: Mon 20 Jul 2026 23:19:59 +0000
Manifest next update: Wed 22 Jul 2026 01:24:59 +0000
Files and hashes: 1: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: GOhYQiES5qLfAxlsFgU0/mBVbuEbSUbXcsug7W3B3SA=)
2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl
rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7c:9e:0b:7c:90:f7:d3:f0:61:0c:b3:f4:39:f4:c0:5c:6e:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC
Validity
Not Before: Jul 20 23:19:59 2026 GMT
Not After : Jul 22 01:24:59 2026 GMT
Subject: CN=03A5B69EE46BBB9C2B419893618DBCA054A731BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:dc:c9:b5:68:a1:4f:78:46:e7:50:1c:01:
46:14:e5:52:9d:20:17:a0:5a:b6:19:ed:65:28:f4:
19:31:56:32:34:22:98:c6:1b:99:3b:e0:32:f4:dd:
44:59:6b:bd:95:48:f8:eb:c5:a3:0a:c4:a6:a7:4e:
e1:ef:cf:c3:ba:af:ba:60:57:58:10:17:79:cb:8d:
b1:16:1c:69:35:5c:70:bb:be:09:73:f0:3c:5e:01:
cd:cb:7b:4d:e7:86:65:2c:48:f8:dd:db:20:bd:ca:
59:4e:4b:21:69:45:04:b2:53:84:e6:cd:06:89:2a:
f7:d4:b8:f2:4a:7f:71:26:e7:33:7b:6f:cb:96:32:
5d:58:86:3f:39:d4:33:62:58:68:45:c4:57:aa:03:
2b:30:c5:d2:c4:f8:ad:29:ad:4b:8e:29:ae:6d:d4:
c8:1a:27:06:4c:bd:ca:f4:0d:07:7e:a8:f8:4b:55:
fd:94:d3:97:f3:30:09:80:1f:c5:cb:bd:f2:e7:51:
54:45:50:9e:c5:4c:25:41:ee:8d:2a:9b:16:37:7d:
13:42:55:25:89:07:34:ac:dc:59:85:88:c8:f5:0c:
56:49:17:d9:9d:61:fe:0a:66:a0:19:e3:54:f8:72:
93:4a:d3:b7:e4:6b:2e:cf:85:c4:bc:d2:3d:9c:49:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:B6:9E:E4:6B:BB:9C:2B:41:98:93:61:8D:BC:A0:54:A7:31:BC
X509v3 Authority Key Identifier:
keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:77:4d:d4:c8:fc:45:56:65:9c:45:1c:c0:3a:49:6b:c5:c3:
1e:af:e8:37:da:07:a1:46:6c:cb:d3:da:64:7c:0b:31:91:9f:
1d:b3:3a:f8:97:49:11:e5:12:9e:fb:60:47:44:35:b3:54:1e:
c2:fa:9f:16:04:54:96:14:6a:48:d6:68:66:8d:41:36:52:95:
d5:59:bc:9e:50:f5:e2:b5:df:aa:df:d7:dc:be:f3:3f:b2:bd:
1f:76:c9:0f:90:c8:92:9c:9c:b0:f7:83:85:33:57:2b:7e:47:
87:07:0f:bf:83:f2:54:bd:c2:16:cd:23:e1:3e:4e:75:56:92:
46:2d:59:b0:f8:d1:79:64:f4:b6:3e:ff:66:2c:fa:b7:e2:54:
76:87:e3:93:5e:30:3a:a4:b7:fe:11:18:9a:ad:31:a3:43:ce:
da:b1:fb:d4:37:4f:78:b0:9a:7c:e4:47:bd:c9:41:3f:e9:f0:
0b:08:39:0a:14:68:10:31:a9:a8:8e:dd:a0:15:3d:95:d9:97:
21:82:8c:56:f5:a9:a2:46:a6:bc:66:1c:75:22:6e:e4:7b:25:
a7:5a:33:a0:f3:f9:06:a9:33:be:91:9a:7f:e0:35:c9:9a:5e:
6b:38:4b:04:30:7d:62:93:ab:30:41:c1:20:65:ac:1e:bf:4d:
6c:16:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:45:52 2026 by rpki-client