
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json)
Hash identifier: UErO8Gm9q95JXXBsuuLzIWZMwRzhk3ZLhy0wpE/Svdg=
Subject key identifier: 04:02:60:DD:01:1E:56:A9:1C:C8:83:DD:45:3A:89:2C:DA:57:55:DB
Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8
Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8
Certificate serial: 3470DF7CBE4C012154E08405051B541127766FCF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 23:11:43 +0000
Manifest this update: Wed 02 Sep 2026 23:06:43 +0000
Manifest next update: Fri 04 Sep 2026 00:28:43 +0000
Files and hashes: 1: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: xw1ddsEBYDKT4nlAmbn/9nQsjN3h2mBLKohi51B7WCI=)
2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl
rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 00:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:70:df:7c:be:4c:01:21:54:e0:84:05:05:1b:54:11:27:76:6f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8
Validity
Not Before: Sep 2 23:06:43 2026 GMT
Not After : Sep 4 00:28:43 2026 GMT
Subject: CN=040260DD011E56A91CC883DD453A892CDA5755DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:27:bb:a5:9c:f1:4e:84:ea:cc:88:a9:1c:
8f:bd:61:a6:1f:3a:18:8b:0b:1d:48:22:65:bd:6f:
d9:fc:a3:09:9f:f6:3b:15:52:3b:13:96:6c:74:59:
ee:b5:32:41:a6:87:57:6b:03:46:1b:f6:b5:2c:45:
a7:2a:77:4b:9b:2b:c1:56:e6:8d:8c:51:d1:4f:f6:
ff:97:6d:16:5f:5e:c2:53:e4:aa:09:69:ca:ad:0a:
82:ab:93:15:bb:f5:59:cd:c6:50:6a:ff:1d:c7:58:
38:28:1a:9d:51:58:fa:9a:45:e0:24:b9:a2:c4:fe:
ae:06:c1:5f:c8:0c:f7:c7:7b:88:8d:b3:98:5f:62:
50:1f:7f:21:26:ab:cf:b9:04:28:d6:60:bb:7b:58:
6d:ac:16:31:5d:f5:16:91:83:5a:e0:20:b8:4b:e1:
cc:37:e8:7d:02:eb:8a:9f:14:c6:ee:89:05:49:c0:
cc:ab:c0:0a:1c:13:9d:ca:98:85:52:19:81:53:c4:
86:7d:5c:b4:a9:78:65:73:27:5c:05:21:d8:d4:ec:
ab:62:53:70:6a:28:bb:98:c5:fd:7f:97:08:95:c2:
92:d7:30:a9:b3:4f:ee:31:df:31:71:4b:d2:cd:08:
57:97:ed:db:8c:4b:59:cc:ad:1c:8a:ed:c8:c5:16:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:60:DD:01:1E:56:A9:1C:C8:83:DD:45:3A:89:2C:DA:57:55:DB
X509v3 Authority Key Identifier:
keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:ad:16:26:28:57:a5:07:22:6c:74:60:0b:d7:2f:28:10:
04:dd:e1:03:43:87:14:b5:15:49:e8:75:ae:c6:fb:37:9e:ba:
75:c1:1b:43:96:9c:88:8f:f6:fc:fd:92:f4:77:76:10:24:f1:
af:a1:6f:08:97:28:5d:3a:3a:4d:6b:a8:57:17:55:25:9c:1a:
ef:3a:7e:6c:ef:ee:3c:5c:5d:8f:82:ac:f1:78:ec:a5:dc:eb:
6d:18:c6:5c:ef:bf:50:74:e6:92:e5:14:3b:4d:f6:47:0a:1f:
3c:fa:99:62:9b:ae:d4:e4:38:8f:16:a0:cd:df:07:5b:28:61:
5e:c8:44:f0:87:63:f1:76:05:18:da:82:ce:0c:cb:16:64:bb:
83:8f:18:2c:77:7e:24:dd:ac:7b:21:9c:6c:85:e2:86:7a:95:
0f:04:62:43:ed:69:b2:24:33:74:00:e4:70:c6:80:0d:1a:a0:
89:bc:63:4b:c6:58:8f:e7:8d:da:88:43:b0:e3:bb:e9:a5:94:
62:93:15:86:57:24:94:98:9b:bb:3f:d7:0c:47:d4:37:1f:29:
d0:57:08:11:c2:16:d8:48:63:97:9d:13:6b:9a:0a:a7:49:31:
a6:ce:3f:32:b2:eb:21:d6:df:e5:85:46:05:43:40:5b:43:21:
7f:dd:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:48:40 2026 by rpki-client