
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft
File: F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft (raw, json)
Hash identifier: ZSG9oSIQ7TeHRuH3E9eSXuDEXsFuEHRR7O8p+gCvKK4=
Subject key identifier: 7D:22:EC:A2:C1:F9:09:0B:57:CC:B7:68:BD:FB:AB:13:EB:16:D6:CC
Authority key identifier: F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7
Certificate issuer: /CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7
Certificate serial: 70C0FF9870D435F9CFC6EAFBE39D5E35EE65F6F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 10:41:48 +0000
Manifest this update: Thu 17 Sep 2026 10:36:48 +0000
Manifest next update: Fri 18 Sep 2026 12:16:48 +0000
Files and hashes: 1: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: NkdNebrDVkfVl0amhScWQLHtn/tGL3kLLLGLmXHeXKk=)
2: F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl (hash: L1/cbR5arfz5DVR6JahjqT3r8zVgYXr4fXzqkloHpII=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl
rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c0:ff:98:70:d4:35:f9:cf:c6:ea:fb:e3:9d:5e:35:ee:65:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D5E6A4B072AACE672180804E096D6B00CB17E7
Validity
Not Before: Sep 17 10:36:48 2026 GMT
Not After : Sep 18 12:16:48 2026 GMT
Subject: CN=7D22ECA2C1F9090B57CCB768BDFBAB13EB16D6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:04:e6:f7:93:8b:b6:4e:fb:83:f8:79:59:
2b:da:6f:72:99:26:87:24:01:ea:c6:40:f1:b9:7d:
f5:ba:63:23:eb:e2:77:13:b6:ca:e3:17:4d:61:e5:
34:63:98:e9:65:83:44:b7:b8:f8:62:64:b7:9a:41:
44:69:cb:db:8e:bc:23:06:3d:33:6a:ec:35:c5:97:
af:02:c5:5a:36:d1:f4:97:6f:f6:82:17:9c:b7:2d:
81:af:a8:bd:2e:be:01:13:d6:69:0e:87:5c:ec:9e:
28:e1:33:3f:59:ac:76:85:3c:ef:0c:86:a8:30:34:
7f:8e:c9:69:20:08:15:30:ab:71:26:89:6e:61:7d:
24:58:c8:aa:0a:e2:98:6b:be:77:96:ec:79:15:4c:
22:0c:82:d6:18:55:66:9f:16:8f:11:47:e6:8e:0f:
7a:89:dc:2f:41:a2:bb:8b:bb:2a:da:ee:56:d8:52:
ef:ed:d1:68:65:e2:96:dd:7c:0d:62:6a:a5:c0:a7:
7c:6b:e1:5e:e9:63:21:e1:02:3f:6d:22:e3:12:7c:
bf:ee:a5:b8:c0:97:9c:fd:10:6a:2d:29:6e:65:33:
f2:8e:33:b6:00:97:9b:0e:29:87:d1:9c:5c:bf:9c:
de:9a:34:3c:d9:64:89:c1:06:21:98:4c:62:5f:64:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:EC:A2:C1:F9:09:0B:57:CC:B7:68:BD:FB:AB:13:EB:16:D6:CC
X509v3 Authority Key Identifier:
keyid:F1:D5:E6:A4:B0:72:AA:CE:67:21:80:80:4E:09:6D:6B:00:CB:17:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1D5E6A4B072AACE672180804E096D6B00CB17E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/F1D5E6A4B072AACE672180804E096D6B00CB17E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:49:73:44:c2:e8:3f:0e:86:a1:ac:98:a8:c5:47:6e:fa:3b:
29:3f:f3:35:68:1e:37:c7:84:5a:3e:24:4a:6a:b3:4b:4c:d5:
3a:58:02:a4:02:95:71:b9:36:85:ee:69:a8:28:ea:c7:5d:0a:
f9:c6:74:45:99:18:71:8e:78:74:e1:7c:02:13:42:63:53:5f:
85:12:6e:5f:2d:e3:47:a1:fd:93:32:3f:76:e7:c8:b8:c0:1f:
0a:93:a2:42:c3:e3:d2:89:3a:f2:9c:f9:eb:58:75:b8:ea:52:
3d:9f:96:f1:3f:4d:44:ca:5a:f4:ca:0b:7c:65:1c:c2:a9:be:
a9:d9:05:34:7f:24:2e:1d:00:1f:f2:50:1b:98:e3:13:30:ec:
3c:95:b7:ab:78:c6:ba:54:d9:c2:fe:4b:14:66:a9:9a:30:a3:
9b:c2:5f:5c:17:17:de:ae:91:d1:47:86:76:e2:ba:8a:6b:ec:
ab:04:df:f3:81:de:c8:5e:ae:38:26:9b:eb:c4:25:d6:90:95:
0c:7d:41:37:83:82:2c:f3:54:fb:78:ff:27:cf:ff:02:c2:16:
a2:04:a7:ca:5a:b1:a4:7d:76:c8:35:0a:52:0f:ea:e2:dc:cd:
a8:0e:5d:f6:02:83:91:a4:e2:5d:6f:38:4a:84:d2:55:44:c0:
c1:d0:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:30:18 2026 by rpki-client