
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json)
Hash identifier: tF52A2e0DTfTgQzzt50E8xxR/6t9huAU+xJ+6XbTI0A=
Subject key identifier: DE:71:98:84:EF:21:5E:C4:C8:4A:4C:5A:C9:51:13:D8:DC:DD:87:61
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial: 7C754722199A4EDC624386CDE73DB47FA7E25758
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 10:47:00 +0000
Manifest this update: Thu 17 Sep 2026 10:42:00 +0000
Manifest next update: Fri 18 Sep 2026 11:44:00 +0000
Files and hashes: 1: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=)
2: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=)
3: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=)
4: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: 2gOr5G4Ot+C4RG6oXUHpVcmBShy7F4eMJoS1BQ/xTxY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:75:47:22:19:9a:4e:dc:62:43:86:cd:e7:3d:b4:7f:a7:e2:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
Validity
Not Before: Sep 17 10:42:00 2026 GMT
Not After : Sep 18 11:44:00 2026 GMT
Subject: CN=DE719884EF215EC4C84A4C5AC95113D8DCDD8761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:c7:b5:6e:57:18:28:21:dd:37:ef:4e:a8:
1b:9d:4c:6a:b5:16:62:7c:78:08:33:c0:c8:7d:75:
c4:72:a4:70:3b:07:27:a0:f8:0b:92:c3:5e:bb:a8:
6b:f5:82:94:75:81:a7:62:89:49:98:0d:fa:10:9d:
ee:39:6c:dc:d8:e1:12:d0:bd:45:c6:08:34:21:dc:
08:03:87:5c:68:b4:ca:45:cd:2d:12:9b:e1:23:ee:
f9:6f:b1:30:e9:55:5e:6f:ff:9c:ac:ca:de:5b:74:
4e:57:40:dc:b4:eb:e8:36:55:5e:f5:a2:56:df:ee:
9c:1e:a9:8e:ca:67:ce:45:88:ad:5b:4a:19:e4:4d:
3f:fa:7b:cf:6c:ca:59:ca:a5:84:6d:8c:d8:bf:90:
ba:a7:8b:5b:51:f0:33:bd:c5:7e:5c:99:e5:2d:46:
5b:2f:5b:78:00:04:2f:0f:a0:76:af:cb:2e:53:63:
e1:07:f4:89:ef:8f:03:c1:d8:00:e9:48:59:03:60:
12:62:23:a5:98:bb:b7:92:86:77:59:b3:b4:df:73:
e0:ca:ca:dc:5e:f9:62:43:ff:63:bc:65:39:c8:74:
d4:3f:67:1a:4c:07:bb:a0:9c:28:ae:b0:78:1d:41:
0b:a9:f8:77:b3:f8:9a:5a:cd:02:53:5f:06:a6:5c:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:98:84:EF:21:5E:C4:C8:4A:4C:5A:C9:51:13:D8:DC:DD:87:61
X509v3 Authority Key Identifier:
keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4c:f5:59:c9:56:22:84:8b:d1:d4:17:41:1f:d0:3b:4a:7c:
d8:de:9c:22:7e:05:79:7c:13:8a:db:de:04:e0:f7:a7:16:06:
1d:8b:1b:11:8f:b4:f7:c0:86:cb:08:f0:d6:4a:0e:9e:56:9e:
7f:3c:8e:68:27:ca:3c:10:30:57:4d:8c:c9:36:8f:b4:8d:2f:
7b:18:7b:d5:85:05:0c:4a:66:5b:81:26:a5:91:09:ca:cd:1d:
c1:fb:cb:6a:6a:35:8c:77:07:8f:a8:ec:ed:28:71:91:62:e2:
00:17:d6:c0:ee:02:58:d0:3d:31:3d:ec:b9:d7:2c:b4:4d:30:
74:9b:75:d8:a3:ac:6a:ae:8c:06:7e:d5:79:85:10:7d:f7:99:
ab:ac:a1:fd:a1:4b:f1:14:10:7f:29:b5:aa:b5:41:29:90:7e:
6d:e4:01:fe:90:8e:8e:a9:09:fe:7a:6a:4e:67:18:6f:37:ce:
bc:b2:e7:c3:27:38:52:d4:a1:f9:3d:ad:a5:54:3d:ab:a7:a5:
7c:7e:ce:85:37:6f:e1:91:28:ae:24:f6:22:e2:1c:7f:52:05:
c4:af:6c:c6:e2:25:43:e7:e9:79:53:5c:7e:7c:82:37:ab:d2:
4f:94:dd:a6:89:9f:88:6e:3d:f3:01:cc:2e:0c:f1:b4:2a:91:
94:89:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:06:13 2026 by rpki-client