
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
File: D441988C2049D77F9D98652623A88108BD7A9AE0.mft (raw, json)
Hash identifier: NEh6lW+oNHL7M73wtM6bLGFGIVOuBSAcdB4sboPzC9I=
Subject key identifier: 6E:F0:88:BD:93:7B:E8:CA:8F:82:F4:91:84:CB:22:07:D2:12:79:8E
Authority key identifier: D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0
Certificate issuer: /CN=D441988C2049D77F9D98652623A88108BD7A9AE0
Certificate serial: 545AA8528AC6DC8304268F6687D5D5A931984057
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 16:12:03 +0000
Manifest this update: Sun 02 Aug 2026 16:07:03 +0000
Manifest next update: Mon 03 Aug 2026 16:57:03 +0000
Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: Ncv7w2hXW8e/iglgpSl3KIA/3oBjq+9ZdH/1lNnm5C8=)
2: D441988C2049D77F9D98652623A88108BD7A9AE0.crl (hash: NzpWJLX615JlDvttwhI1i60DxptQZmYUAiPuwXNuWsM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl
rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 16:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5a:a8:52:8a:c6:dc:83:04:26:8f:66:87:d5:d5:a9:31:98:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441988C2049D77F9D98652623A88108BD7A9AE0
Validity
Not Before: Aug 2 16:07:03 2026 GMT
Not After : Aug 3 16:57:03 2026 GMT
Subject: CN=6EF088BD937BE8CA8F82F49184CB2207D212798E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:ce:03:a4:f3:09:6c:5d:0a:84:0c:20:32:
a6:0f:43:ac:0f:73:ce:cf:3c:ce:0c:53:5c:46:76:
6f:10:13:62:a3:1d:e4:c9:22:5b:08:d3:1e:7f:41:
6a:d2:b1:2f:64:36:24:41:7b:77:9e:81:95:fb:31:
a8:3f:f9:a9:d3:72:d4:a8:64:79:9e:02:02:41:be:
d5:24:01:13:db:91:b0:f9:db:c6:dd:ec:d7:c8:7a:
13:f7:17:dd:02:ef:75:7c:bb:fe:94:0f:13:56:39:
78:22:58:0e:7c:36:57:57:61:41:7f:0a:f1:46:86:
95:7b:4a:50:59:83:79:0b:5b:98:c2:23:88:3a:53:
6d:4f:da:96:e6:44:df:29:e7:eb:39:d7:ea:1a:8b:
c5:83:fd:b9:22:5c:6e:e9:2f:e4:07:26:f3:a6:c3:
83:d6:ce:31:88:ec:56:e4:ba:8d:f7:42:e0:a0:a4:
1a:32:04:10:57:4b:7b:87:52:50:de:3e:12:6c:6e:
48:ea:d7:a4:9f:09:5a:e4:f5:9e:e0:b6:9e:42:dc:
bd:1f:06:a0:3b:54:2c:de:b4:b7:c7:15:1e:a2:b2:
a9:b3:f0:a1:5e:03:84:3d:40:a2:9d:ed:3f:eb:ff:
0e:a1:75:ad:03:aa:bc:f3:d2:e5:69:7f:78:44:a2:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:88:BD:93:7B:E8:CA:8F:82:F4:91:84:CB:22:07:D2:12:79:8E
X509v3 Authority Key Identifier:
keyid:D4:41:98:8C:20:49:D7:7F:9D:98:65:26:23:A8:81:08:BD:7A:9A:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D441988C2049D77F9D98652623A88108BD7A9AE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/D441988C2049D77F9D98652623A88108BD7A9AE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f9:f1:73:1b:d9:67:77:04:2f:30:e1:a6:fc:45:06:31:80:
00:a6:4c:e0:5e:e0:97:71:90:3d:2c:2b:d8:04:26:58:61:ed:
32:34:7a:32:18:d5:4d:74:66:e3:cc:b8:cc:e2:f2:78:fb:25:
53:cf:c0:71:53:a1:77:6d:8f:67:97:45:0b:b1:5c:92:96:90:
85:10:9d:29:df:a6:14:ab:a4:bd:c7:72:a8:83:fd:54:b6:5f:
1f:aa:04:fd:4a:b2:16:d9:04:6f:38:9f:09:2d:b0:8e:1c:94:
9e:81:54:59:e5:95:b5:e9:e4:a8:31:6d:74:af:59:25:0d:61:
56:7d:7c:87:0a:80:f8:a0:d0:a7:f9:28:1b:74:91:62:12:96:
4c:39:3b:ba:7f:9d:93:c2:d0:2a:16:cb:a8:ed:90:45:6a:e9:
6b:db:4c:a0:9b:23:02:bb:9f:28:d1:18:9d:70:e1:d2:1d:4d:
55:c4:97:f4:4b:47:5c:46:10:62:b1:84:72:6d:1b:de:65:dc:
05:07:4e:a1:ed:93:11:03:26:d2:84:cc:87:75:c9:86:3a:dd:
f8:36:a0:79:36:c3:df:f9:35:f8:ac:ce:64:d7:c6:bc:8b:4b:
85:ce:f9:83:e8:e9:90:71:cf:77:33:ad:b7:63:c7:a4:f2:28:
d9:20:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:50 2026 by rpki-client