
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json)
Hash identifier: AgFuwzdeONkCisSxoPFQ865eo4ffdNIiLyxdDTSROqM=
Subject key identifier: 7E:16:82:59:10:2E:22:D2:14:71:93:15:E6:00:55:9B:19:62:96:36
Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Certificate serial: 562699E89637E5A16BD84916425E5CCCA27898CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 06:54:57 +0000
Manifest this update: Sun 25 Oct 2026 06:49:57 +0000
Manifest next update: Mon 26 Oct 2026 09:09:57 +0000
Files and hashes: 1: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: JVE3E7yDij8SY72lj9JDtAgnoG8doaHTeuxgA+qYiyM=)
2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:26:99:e8:96:37:e5:a1:6b:d8:49:16:42:5e:5c:cc:a2:78:98:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Validity
Not Before: Oct 25 06:49:57 2026 GMT
Not After : Oct 26 09:09:57 2026 GMT
Subject: CN=7E168259102E22D214719315E600559B19629636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:40:f8:66:4e:0d:fb:82:0a:6c:43:90:94:
66:c0:88:79:dd:c9:ab:b8:8a:ec:e5:eb:cd:cb:74:
93:0c:b3:aa:d1:0a:ad:9c:b5:ec:9e:89:cc:eb:72:
4d:7a:43:4c:69:b2:c7:b2:c0:e4:a5:fb:c8:75:2d:
5f:1e:75:ef:91:08:b2:56:6d:9f:78:f6:8d:d4:a3:
d3:0d:7e:a4:63:c0:e1:c4:81:9c:d2:65:a2:c5:03:
90:3b:92:2b:df:b5:81:05:77:ae:19:4d:de:0f:72:
c8:0b:d3:86:df:22:0f:d0:c6:9a:e9:1a:96:22:d1:
87:3c:b4:38:02:3b:55:30:65:fb:1d:d3:65:09:01:
e6:d4:4c:69:c4:36:95:9e:94:47:08:e1:aa:ae:59:
f8:af:78:25:d1:7a:82:fa:80:0d:9d:2b:30:4d:6c:
64:9e:d5:b8:b4:66:94:f6:e2:c1:50:ea:a8:35:a9:
27:05:37:cb:2a:61:13:2d:07:43:ba:d7:27:20:cf:
63:a4:44:35:97:80:fa:a0:ad:70:3c:53:ce:1e:9e:
42:45:f1:43:9f:2c:92:0d:36:38:10:be:60:6b:82:
f4:3e:32:25:ad:73:aa:88:6e:4d:38:b0:45:2f:9e:
b1:ba:7c:8d:9b:7a:24:54:fe:64:51:39:e2:9e:3c:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:82:59:10:2E:22:D2:14:71:93:15:E6:00:55:9B:19:62:96:36
X509v3 Authority Key Identifier:
keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:43:59:6c:95:54:81:00:ed:1b:bd:bb:08:4e:03:a8:cd:
33:02:d7:11:34:d2:79:1b:fb:f4:8a:ba:22:6b:aa:1d:02:df:
49:94:bc:1f:d6:63:64:4f:43:74:a8:7c:f4:c3:f7:37:1e:47:
17:ed:05:60:34:eb:0a:d9:6f:a1:dc:29:10:b8:79:73:c7:c2:
9f:17:ed:c8:04:6c:2b:ea:20:ca:f4:07:f3:b0:d8:22:b2:d5:
1c:00:7c:b1:66:9a:da:42:a3:9c:e4:b5:5e:a2:fe:1e:26:e7:
4a:e4:1c:2a:3d:78:d5:68:a6:f5:44:c7:5a:56:8a:d8:aa:ff:
a9:42:d8:61:b4:1a:8c:93:04:de:d4:11:cc:12:e1:c0:30:ed:
23:bc:dc:d3:1e:e6:4a:4a:25:05:86:29:8c:af:7d:41:dd:55:
2e:c1:55:2a:d7:5a:24:79:0d:92:f7:6a:68:8e:d4:72:18:6d:
e9:8b:ba:e8:67:71:5d:d9:7e:59:f8:86:a9:b8:ec:19:a7:32:
c4:ed:62:cf:37:f6:aa:3e:73:e7:e6:11:e7:7c:27:0d:3d:8e:
17:73:55:b9:19:71:ea:c0:91:dc:21:b0:ac:f4:01:46:46:2a:
7d:3b:a8:d3:75:34:c8:ce:8c:1d:b0:25:af:7c:6e:b8:18:2d:
a6:de:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:14 2026 by rpki-client