
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
File: 7114DCC67CA188857960AB8205FF64878ABC3A2C.mft (raw, json)
Hash identifier: dkYPBbe3N7FullT5nd+Pz1ybyJLK+DhOGoM5gU2fZlQ=
Subject key identifier: 1D:1A:0E:3A:F0:C6:65:78:AA:B3:87:6F:B7:5C:CE:8E:AF:BB:AA:40
Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
Certificate issuer: /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Certificate serial: 237E5C6EFC9FA8C414BFA059F1A3032025FCC5AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 06:47:18 +0000
Manifest this update: Sat 24 Oct 2026 06:42:18 +0000
Manifest next update: Sun 25 Oct 2026 08:41:18 +0000
Files and hashes: 1: 7114DCC67CA188857960AB8205FF64878ABC3A2C.crl (hash: HCitbqnxIDTNyTazU4UIDWDwn69+IoeT+Z50l1fQEEA=)
2: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: XXL+jrySck8YOfCgNHqgkAmnQwL01WtL6AIXMhWluBI=)
3: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=)
4: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: dM86g1KJjcw4ZcRJ1Gbl9gY8oFj7Vsah0QHgp5jAvIU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7e:5c:6e:fc:9f:a8:c4:14:bf:a0:59:f1:a3:03:20:25:fc:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Validity
Not Before: Oct 24 06:42:18 2026 GMT
Not After : Oct 25 08:41:18 2026 GMT
Subject: CN=1D1A0E3AF0C66578AAB3876FB75CCE8EAFBBAA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:e8:aa:7f:76:51:c6:db:6a:f1:ed:35:68:
91:c9:3f:d9:a7:3d:fa:38:59:97:19:ab:58:9a:e9:
84:ef:a7:df:c0:50:53:6f:ba:39:28:76:d6:26:7b:
86:07:13:a7:e3:23:76:f3:b9:de:27:63:2b:3a:2b:
3b:d8:bd:43:90:33:16:47:98:55:94:d3:9c:a0:ec:
c2:5a:5c:77:a1:92:5e:42:23:53:bf:ca:39:55:a8:
70:6d:b7:1e:04:7a:60:01:fa:7a:76:57:05:0e:c0:
d5:c9:38:46:fa:33:4d:53:8f:72:36:6d:78:52:5c:
bf:0c:8d:d3:92:b0:b9:44:73:a7:e8:8e:f1:88:4c:
58:ea:b2:f2:93:bf:51:d3:e0:37:0e:5a:29:95:6d:
2a:fd:b1:0b:85:a5:70:85:6d:e1:e5:e0:e8:73:53:
46:47:71:d2:e8:c7:36:c8:6e:0f:a4:0f:40:a6:10:
ba:1e:c2:42:d0:df:a0:5e:a1:62:76:cd:8b:00:bb:
d9:f7:46:0b:c6:ef:40:db:b4:e5:dd:9c:9d:7c:fe:
98:4e:6f:87:02:c8:55:a2:d6:87:1c:c5:a2:d3:da:
15:72:26:ba:e1:6b:2b:8a:dc:24:a6:7d:93:f3:90:
5a:aa:24:e6:52:a7:45:ba:d3:06:bc:9c:7c:d6:f7:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:0E:3A:F0:C6:65:78:AA:B3:87:6F:B7:5C:CE:8E:AF:BB:AA:40
X509v3 Authority Key Identifier:
keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d2:49:60:98:1e:64:5c:24:d5:8c:ca:77:89:25:73:32:22:
2b:35:ee:dc:4a:11:95:be:9d:af:d8:6d:83:26:9b:26:19:db:
cf:72:67:bd:0d:aa:82:93:31:34:39:37:66:1a:e3:2e:48:1d:
a4:ba:84:08:a4:44:21:67:02:e4:25:b5:00:52:09:bc:6c:b8:
fa:e5:32:25:3d:40:f4:59:99:c2:d1:fb:ce:7d:0d:6d:8a:f5:
4b:e8:17:b1:9c:4f:d5:85:2a:4e:17:9d:7c:56:11:b1:c4:15:
6b:3b:af:c0:93:e4:1f:e2:e9:f8:4b:ef:ec:ed:3a:f5:50:de:
55:da:8b:bb:d1:7c:4b:33:a1:3c:f6:ef:0e:ca:7f:0d:f5:26:
3a:f4:54:39:e0:d8:4a:a5:67:9d:2b:7a:70:99:87:52:86:59:
65:7e:93:f8:8d:b9:3c:d0:64:68:96:ee:55:aa:68:b3:f6:b7:
c4:63:ec:8b:77:51:1d:39:57:30:36:c9:56:41:c7:45:b6:20:
3e:1d:6a:8e:e9:35:4f:f0:cd:71:ec:58:7c:a4:1e:c0:a7:e7:
42:e5:b3:c3:90:17:b7:cc:ed:f1:fc:ce:48:a1:b8:4c:a9:97:
ed:66:0e:ab:b2:92:4b:27:80:3c:8c:9c:ef:c6:1f:2a:bb:5c:
c3:88:a5:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI35cbvyfqMQUv6BZ8aMDICX8xaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4
QUJDM0EyQzAeFw0yNjEwMjQwNjQyMThaFw0yNjEwMjUwODQxMThaMDMxMTAvBgNV
BAMTKDFEMUEwRTNBRjBDNjY1NzhBQUIzODc2RkI3NUNDRThFQUZCQkFBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9seiqf3ZRxttq8e01aJHJP9mn
Pfo4WZcZq1ia6YTvp9/AUFNvujkodtYme4YHE6fjI3bzud4nYys6KzvYvUOQMxZH
mFWU05yg7MJaXHehkl5CI1O/yjlVqHBttx4EemAB+np2VwUOwNXJOEb6M01Tj3I2
bXhSXL8MjdOSsLlEc6fojvGITFjqsvKTv1HT4DcOWimVbSr9sQuFpXCFbeHl4Ohz
U0ZHcdLoxzbIbg+kD0CmELoewkLQ36BeoWJ2zYsAu9n3RgvG70DbtOXdnJ18/phO
b4cCyFWi1occxaLT2hVyJrrhayuK3CSmfZPzkFqqJOZSp0W60wa8nHzW9wKPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHRoOOvDGZXiqs4dvt1zOjq+7qkAwHwYDVR0j
BBgwFoAUcRTcxnyhiIV5YKuCBf9kh4q8OiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDNhNzlkOTUtNjRhOS00ODA5LTk0YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3
Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4QUJDM0EyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MTE0RENDNjdDQTE4ODg1Nzk2MEFCODIwNUZGNjQ4NzhBQkMz
QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0
YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0
ODc4QUJDM0EyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACrSSWCYHmRcJNWMyneJJXMyIis17txKEZW+
na/YbYMmmyYZ289yZ70NqoKTMTQ5N2Ya4y5IHaS6hAikRCFnAuQltQBSCbxsuPrl
MiU9QPRZmcLR+859DW2K9UvoF7GcT9WFKk4XnXxWEbHEFWs7r8CT5B/i6fhL7+zt
OvVQ3lXai7vRfEszoTz27w7Kfw31Jjr0VDng2EqlZ50renCZh1KGWWV+k/iNuTzQ
ZGiW7lWqaLP2t8Rj7It3UR05VzA2yVZBx0W2ID4dao7pNU/wzXHsWHykHsCn50Ll
s8OQF7fM7fH8zkihuEypl+1mDquykksngDyMnO/GHyq7XMOIpS4=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:16 2026 by rpki-client