
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
File: 994E7625F275D75C44DFB4A7ADF4842506F11789.mft (raw, json)
Hash identifier: +eY5tQdMgfbW9AqY8solOvH4PRjO4yW1YxMktIqicjo=
Subject key identifier: 7C:82:F1:D6:99:BD:09:12:75:3B:E8:2D:0C:A1:AF:76:BB:B7:20:13
Authority key identifier: 99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89
Certificate issuer: /CN=994E7625F275D75C44DFB4A7ADF4842506F11789
Certificate serial: 26321C5768EBFA8B0D401FAA76DE162615D82D9D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
Manifest number: B7
Signing time: Wed 16 Sep 2026 21:40:46 +0000
Manifest this update: Wed 16 Sep 2026 21:35:46 +0000
Manifest next update: Thu 17 Sep 2026 22:13:46 +0000
Files and hashes: 1: 994E7625F275D75C44DFB4A7ADF4842506F11789.crl (hash: Konv8sJXLaTuNC2K8Vg5HgrsDBOAHmmz5/l+P4NMcog=)
2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: r8HkCpINzf8MUL+ZwgRHMLjx/E/uKIxBx07xyWJ8oXY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl
rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:1c:57:68:eb:fa:8b:0d:40:1f:aa:76:de:16:26:15:d8:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994E7625F275D75C44DFB4A7ADF4842506F11789
Validity
Not Before: Sep 16 21:35:46 2026 GMT
Not After : Sep 17 22:13:46 2026 GMT
Subject: CN=7C82F1D699BD0912753BE82D0CA1AF76BBB72013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:d2:d3:a7:97:14:3c:1b:bd:df:71:ee:d4:
b0:c9:99:e4:8c:7f:08:ee:9f:b1:82:bd:b3:71:e3:
e6:21:5d:94:51:56:bb:a8:08:de:59:e5:a9:51:c5:
d4:59:00:5c:11:f7:8c:92:3c:10:ff:8c:2c:30:86:
71:b5:6d:b7:29:6d:5f:f0:cc:3c:fe:16:08:1e:29:
46:ee:d7:07:28:08:a1:2b:7d:dd:b9:e9:d5:6c:a6:
74:a5:93:3a:a3:e0:24:23:c2:f6:24:4d:a7:21:fc:
d7:23:52:b3:63:02:5f:f7:2b:21:56:5a:2b:71:bb:
2a:f0:06:9a:c4:f8:e7:ea:30:7e:3b:7a:3d:a6:23:
82:d1:c8:ff:60:dd:77:ef:43:6d:b5:6b:a9:c2:b0:
c2:25:c1:20:4d:a7:4c:6f:73:61:2c:91:c6:0b:c8:
23:03:81:d2:00:2a:70:fa:f2:81:ab:cf:9c:ef:39:
26:8e:cb:e0:63:62:27:b6:64:8b:d0:57:fe:af:55:
cd:f6:ed:3d:e3:14:04:d7:28:eb:c0:82:20:1a:ca:
ff:b7:3f:23:4c:87:cc:17:1a:59:45:e0:0b:c5:ff:
d6:6b:57:e0:06:22:38:a1:b9:86:4b:ad:a2:1a:a4:
b5:2d:31:e1:d4:15:7a:6b:19:44:17:3d:be:38:f5:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:F1:D6:99:BD:09:12:75:3B:E8:2D:0C:A1:AF:76:BB:B7:20:13
X509v3 Authority Key Identifier:
keyid:99:4E:76:25:F2:75:D7:5C:44:DF:B4:A7:AD:F4:84:25:06:F1:17:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/994E7625F275D75C44DFB4A7ADF4842506F11789.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/994E7625F275D75C44DFB4A7ADF4842506F11789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fc:28:6d:91:e2:de:39:2e:e6:48:e0:c4:ca:01:62:4e:09:
65:37:cc:eb:d1:fa:61:bc:37:df:8a:f2:b0:60:b0:19:d1:ce:
ee:fd:27:3a:7d:49:10:36:de:c9:5b:33:79:80:bc:0f:c4:28:
3d:52:23:18:91:7d:30:8e:88:6f:e8:0a:aa:01:04:82:5d:4f:
ea:e2:c7:87:e4:77:99:17:0b:a0:dd:9e:9e:5a:d4:72:ed:26:
23:f5:4d:6b:a9:75:34:45:be:23:ac:48:b5:b8:1d:ef:e3:0e:
8b:df:fb:22:55:b8:08:11:92:0d:88:ff:e2:40:5b:e3:23:5f:
e1:00:ba:29:fc:d5:89:4b:4f:e3:bb:df:84:81:8b:65:a2:5d:
46:e6:60:c5:11:53:47:11:1f:06:2e:46:2e:94:48:d1:d6:e5:
33:f1:ce:bf:8a:be:33:3f:c5:fe:31:76:32:7b:2a:e8:99:af:
fb:8c:fc:78:ee:81:db:5f:15:f3:40:89:b0:1a:ef:36:11:74:
fa:51:df:ac:03:47:75:de:d1:9c:69:c0:cf:7f:62:64:81:9d:
d6:07:3d:56:f9:8f:f6:8c:73:2c:66:4a:d0:11:58:6a:5c:95:
a0:5a:ff:25:12:1f:9d:45:18:ac:a7:d6:5c:86:34:1b:64:68:
5c:49:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:54:42 2026 by rpki-client