
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
File: CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json)
Hash identifier: IvYKkPVaFZFQri17wWpntjgwt3I8S3qqapszzIY50rw=
Subject key identifier: B0:7A:6A:5E:52:D7:2D:4F:76:F2:4A:51:5C:21:DE:AC:06:FC:09:27
Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93
Certificate issuer: /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993
Certificate serial: 6A6DCEE23044B901AA7B41FD7E251E0137A19CBD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 17:46:07 +0000
Manifest this update: Wed 16 Sep 2026 17:41:07 +0000
Manifest next update: Thu 17 Sep 2026 21:44:07 +0000
Files and hashes: 1: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: U4xOc+rgzvQKb5fgmRkwWC1WIeaSEGT8FvQA3WMh140=)
2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl
rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6d:ce:e2:30:44:b9:01:aa:7b:41:fd:7e:25:1e:01:37:a1:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993
Validity
Not Before: Sep 16 17:41:07 2026 GMT
Not After : Sep 17 21:44:07 2026 GMT
Subject: CN=B07A6A5E52D72D4F76F24A515C21DEAC06FC0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:eb:ad:a0:20:bd:81:70:ce:cf:fc:f2:1d:
de:22:70:b6:32:34:81:7c:fd:64:f1:30:9f:97:b5:
f6:ea:69:e4:c2:9d:83:1b:f5:65:af:2d:67:52:e2:
44:28:cd:23:c3:7e:83:86:d9:fb:04:79:1e:f7:b5:
be:2f:c7:be:82:bb:d3:d1:f3:ea:65:1d:f3:c9:ed:
69:17:16:c4:74:76:b4:f6:fc:75:84:67:9b:4a:82:
b0:82:e7:06:d9:e3:62:87:34:1e:ad:da:dd:40:d3:
f4:98:e5:7e:9b:1d:11:70:3c:71:b6:03:5e:9d:b1:
c6:f9:b8:82:2e:9b:fc:63:5c:7e:0e:7a:fe:1e:6f:
15:d0:95:77:e8:46:51:36:7a:fb:b8:ea:e3:68:54:
8a:04:02:7e:d8:e8:d2:e4:6d:97:95:1f:be:64:9c:
45:6d:91:db:d5:85:d6:eb:68:4f:c7:ad:ff:e1:bd:
15:43:d9:c0:4d:10:20:37:74:54:b3:a8:08:da:b4:
5a:cd:2d:ec:c7:3f:90:70:00:65:92:37:bb:60:2f:
91:8d:e2:f0:9c:28:14:4f:91:cd:26:7a:63:7d:a2:
d0:c7:8b:c4:3e:ff:8b:1c:cc:ea:09:0e:32:64:c9:
64:bd:88:c0:8e:20:46:b7:63:9b:5f:b7:98:63:ff:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:6A:5E:52:D7:2D:4F:76:F2:4A:51:5C:21:DE:AC:06:FC:09:27
X509v3 Authority Key Identifier:
keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:01:a9:e6:71:69:ea:a7:c8:d0:6c:c7:57:6a:03:58:4a:
34:36:4a:8d:8d:0c:46:c5:ca:cd:ee:82:48:7e:9f:8f:81:47:
61:30:07:bf:c5:fa:1e:88:25:49:47:5a:0f:23:65:8b:01:48:
07:01:e0:18:97:a7:1f:06:95:b5:9e:64:4d:5a:e3:16:f3:ea:
ad:8b:77:73:0a:60:15:69:bc:ba:cc:30:93:df:3a:03:46:77:
e2:8e:90:f4:6b:64:7c:32:8d:14:8a:c5:25:33:b0:d8:5a:4b:
ec:b9:5d:ff:4a:b6:37:07:ad:44:10:45:2a:f0:44:9f:b8:c7:
ac:c9:6f:f3:01:75:87:91:f2:5d:2e:66:68:91:b7:d0:22:90:
48:02:6b:ac:f9:49:82:5e:93:7a:5a:e6:da:1d:bf:c4:40:d2:
52:24:41:f7:fc:6b:91:bc:48:12:87:c8:b6:f2:50:14:e5:33:
a8:55:9b:4f:a6:4f:ab:55:98:cb:ad:f0:e4:00:f9:2b:31:82:
90:b2:1f:70:96:59:02:91:b0:c5:16:9d:2e:1e:61:f5:57:8f:
b8:d9:8f:51:19:95:c8:8b:bc:30:3b:c9:61:dd:d4:1f:a2:f4:
62:50:f9:fb:17:e7:c8:d4:20:2f:e2:eb:64:34:ee:6b:f4:3f:
13:5a:46:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUam3O4jBEuQGqe0H9fiUeATehnL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2
NkM5OTk5MzAeFw0yNjA5MTYxNzQxMDdaFw0yNjA5MTcyMTQ0MDdaMDMxMTAvBgNV
BAMTKEIwN0E2QTVFNTJENzJENEY3NkYyNEE1MTVDMjFERUFDMDZGQzA5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaeutoCC9gXDOz/zyHd4icLYy
NIF8/WTxMJ+XtfbqaeTCnYMb9WWvLWdS4kQozSPDfoOG2fsEeR73tb4vx76Cu9PR
8+plHfPJ7WkXFsR0drT2/HWEZ5tKgrCC5wbZ42KHNB6t2t1A0/SY5X6bHRFwPHG2
A16dscb5uIIum/xjXH4Oev4ebxXQlXfoRlE2evu46uNoVIoEAn7Y6NLkbZeVH75k
nEVtkdvVhdbraE/Hrf/hvRVD2cBNECA3dFSzqAjatFrNLezHP5BwAGWSN7tgL5GN
4vCcKBRPkc0memN9otDHi8Q+/4sczOoJDjJkyWS9iMCOIEa3Y5tft5hj/0YvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsHpqXlLXLU928kpRXCHerAb8CScwHwYDVR0j
BBgwFoAUyu2nrgLc1LGC2W9DMBYUi2bJmZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGQ0NmE1NjQtNjM0Ny00MGVmLWJhZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUw
MkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2NkM5OTk5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQUVEQTdBRTAyRENENEIxODJEOTZGNDMzMDE2MTQ4QjY2Qzk5
OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh
ZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0
OEI2NkM5OTk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFqgAanmcWnqp8jQbMdXagNYSjQ2So2NDEbF
ys3ugkh+n4+BR2EwB7/F+h6IJUlHWg8jZYsBSAcB4BiXpx8GlbWeZE1a4xbz6q2L
d3MKYBVpvLrMMJPfOgNGd+KOkPRrZHwyjRSKxSUzsNhaS+y5Xf9KtjcHrUQQRSrw
RJ+4x6zJb/MBdYeR8l0uZmiRt9AikEgCa6z5SYJek3pa5todv8RA0lIkQff8a5G8
SBKHyLbyUBTlM6hVm0+mT6tVmMut8OQA+SsxgpCyH3CWWQKRsMUWnS4eYfVXj7jZ
j1EZlciLvDA7yWHd1B+i9GJQ+fsX58jUIC/i62Q07mv0PxNaRr4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 06:33:47 2026 by rpki-client