
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft
File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft (raw, json)
Hash identifier: Bh19/K7FKxKKVxvc3M09a+O3okV08w104a04sHe7qEw=
Subject key identifier: 3E:90:75:F6:6D:22:44:5D:92:C8:3C:CF:8E:0C:6E:C6:78:5E:4E:AB
Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1
Certificate issuer: /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1
Certificate serial: 7071907A36F834C2B93B77FBE2BBA1E40E32ADF2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft
Manifest number: E9
Signing time: Sat 24 Oct 2026 04:50:11 +0000
Manifest this update: Sat 24 Oct 2026 04:45:11 +0000
Manifest next update: Sun 25 Oct 2026 08:20:11 +0000
Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=)
2: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl (hash: hF9e2JDRELuuC+QcBGifk0GduZLy9SapOF21ZMI2Nz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl
rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:71:90:7a:36:f8:34:c2:b9:3b:77:fb:e2:bb:a1:e4:0e:32:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1
Validity
Not Before: Oct 24 04:45:11 2026 GMT
Not After : Oct 25 08:20:11 2026 GMT
Subject: CN=3E9075F66D22445D92C83CCF8E0C6EC6785E4EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:81:24:97:4d:e0:3c:17:74:68:6d:19:70:
56:d7:56:1d:d9:2e:07:1f:05:e1:d7:37:f7:4a:01:
b7:b2:3f:78:56:8e:3b:e7:c1:fc:4d:26:69:25:78:
52:5a:55:0c:f2:6e:b9:89:46:bc:ce:48:59:f0:96:
61:31:64:d5:3c:0c:b2:c8:56:f8:4a:f5:1b:29:b6:
6e:1b:89:20:6a:b6:46:14:c2:a0:85:4c:04:14:0b:
4f:fd:6e:62:00:0e:15:fd:b7:bf:46:8b:49:f4:7f:
c3:12:1d:ac:8c:65:3c:03:4e:8f:36:ac:86:23:8f:
8a:f8:35:d3:75:78:d1:3e:73:59:e1:f6:fb:d0:cd:
97:c7:04:e4:bc:e0:61:6b:ae:98:88:ad:9f:03:5a:
14:9e:47:d1:59:82:a6:ee:48:1c:dc:b5:50:8e:27:
23:92:b4:79:58:f2:08:c7:f1:35:e9:f6:df:f1:e8:
52:9e:b6:a1:bb:2c:83:f7:7b:2c:8c:51:ed:5e:1e:
22:4c:88:d5:9c:cc:4c:81:45:99:05:a1:0d:1b:a0:
f8:9c:61:b1:92:63:4a:83:f7:61:b3:75:21:44:f7:
1c:a8:f7:b3:ed:ca:a8:16:24:9d:81:1e:04:f6:0b:
02:01:c9:c1:8b:dd:3a:cb:1b:95:fb:3e:4b:94:0b:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:90:75:F6:6D:22:44:5D:92:C8:3C:CF:8E:0C:6E:C6:78:5E:4E:AB
X509v3 Authority Key Identifier:
keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:78:76:6b:f5:86:9f:17:5a:93:eb:96:a2:10:5d:80:ce:
44:e4:29:13:d4:f6:76:9d:c8:bb:d7:e9:25:79:35:8a:a1:f6:
5c:7d:35:6e:7d:94:ca:e0:4a:88:fb:a8:95:d2:2f:ed:2f:cd:
7b:f3:38:1d:6c:0e:5e:83:ca:9d:44:a3:88:d5:68:be:a6:86:
d6:c4:47:04:58:7d:56:7c:1f:61:cb:22:a2:4d:c6:60:fd:40:
3e:13:22:4c:e1:47:cb:30:d7:f2:57:97:a3:90:45:69:4d:f2:
4a:5b:98:30:88:62:30:2d:f2:c4:42:ab:d1:74:d3:39:14:eb:
31:06:57:1a:bf:9f:5b:0e:05:9f:7e:2d:98:88:fc:72:01:b1:
ec:c1:27:95:88:d4:48:72:04:17:63:11:39:3e:87:c6:bf:d4:
66:14:31:73:7f:8e:5f:82:39:16:eb:28:de:b4:af:9f:56:e3:
50:47:1a:e9:07:93:3e:cd:5f:9e:8e:0a:6c:76:4e:c3:8a:5d:
31:18:82:6f:cb:5a:df:a9:b5:c3:47:92:91:84:22:de:5a:07:
07:9a:34:21:9a:01:25:28:79:ec:32:03:8f:81:fe:ca:fd:df:
fc:dd:52:37:76:61:15:96:23:f6:25:a7:bb:bb:37:d2:9f:94:
1f:2b:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:47 2026 by rpki-client