
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json)
Hash identifier: 2ACnCw0efDEho+McguXluPlEFg0Cm2OeZylQLh6G3i0=
Subject key identifier: 2D:4C:05:AC:28:89:11:FF:22:D3:CA:24:6C:3D:7C:52:1A:47:A2:53
Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
Certificate issuer: /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Certificate serial: 26EF5D5BB7F4523A8166C6A585AAB66464177727
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 16:39:47 +0000
Manifest this update: Wed 16 Sep 2026 16:34:47 +0000
Manifest next update: Thu 17 Sep 2026 19:03:47 +0000
Files and hashes: 1: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: MmEJLOo37APNsNKEcpLmb4vUJiSupirtgbPYQsth0Nw=)
2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=)
3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ef:5d:5b:b7:f4:52:3a:81:66:c6:a5:85:aa:b6:64:64:17:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Validity
Not Before: Sep 16 16:34:47 2026 GMT
Not After : Sep 17 19:03:47 2026 GMT
Subject: CN=2D4C05AC288911FF22D3CA246C3D7C521A47A253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:82:cb:db:32:26:7b:81:4e:52:50:d0:57:
25:03:d1:7b:c9:0c:52:f3:07:41:ae:e6:6d:24:98:
bd:b4:4d:4e:3c:ea:ce:0e:48:58:92:b6:d6:03:0e:
b9:9a:88:01:16:48:14:22:e6:8e:65:e0:b0:cd:d2:
9a:30:fe:69:d4:3d:7f:81:13:83:b9:6d:9d:27:bf:
bb:f6:9e:96:9b:e1:7c:0e:5c:87:e4:b9:17:f1:84:
bd:7d:c6:b2:e4:ca:44:7c:39:63:5e:95:11:20:6e:
c1:57:75:85:34:ad:1d:88:ce:df:d9:49:22:bd:64:
77:b5:94:eb:2f:7a:9e:4c:96:9b:ab:a3:c3:cd:c7:
93:ce:b0:57:b3:e9:e1:d5:e3:fc:c8:ba:93:7d:05:
2d:f7:cc:e5:6d:84:1e:50:30:7e:06:68:90:23:a0:
01:48:81:d5:95:d4:cd:68:8e:d5:6b:f1:4a:f5:92:
9f:96:11:54:37:b9:5f:34:5c:c4:3b:bb:4b:ba:95:
d5:4e:fb:04:dd:75:31:99:67:4e:13:82:31:af:b5:
60:6a:13:01:68:8b:6a:d0:92:a0:ca:04:6a:35:e8:
58:eb:ea:89:f6:85:e0:72:6f:0e:44:17:36:5e:09:
0f:5d:94:e6:23:e8:7f:d6:1b:87:a0:55:28:e0:61:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:05:AC:28:89:11:FF:22:D3:CA:24:6C:3D:7C:52:1A:47:A2:53
X509v3 Authority Key Identifier:
keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:47:91:1a:24:ba:f7:86:e7:be:c0:28:63:32:69:56:f8:
c5:a1:ee:2e:56:27:71:a6:31:0a:56:6d:9a:de:5b:79:b0:d0:
6f:1f:c0:54:f7:41:27:85:3d:fd:4e:21:72:dc:94:1e:e4:93:
a3:84:af:1d:53:d8:9a:d7:3c:cc:02:3e:7b:8a:c3:eb:73:8a:
eb:bc:7c:60:6a:b7:c7:80:c6:3b:da:3d:42:f0:2c:ed:8d:4a:
f3:12:4f:f0:65:9f:4c:2f:95:b8:7e:44:44:07:5e:16:73:91:
f2:89:86:32:d6:9e:f8:b8:2b:63:0a:e4:4e:96:bd:4c:b7:1a:
f3:24:d3:31:a5:a0:d4:ff:26:8d:ba:d1:cf:cf:b3:08:f4:53:
cc:9e:51:c9:17:20:f6:95:9d:ba:f4:38:e1:1d:52:a0:52:fd:
bf:7a:8b:8d:18:b5:16:77:59:da:a5:fd:76:3c:4f:e5:f3:d7:
1d:3b:39:8e:c6:31:c7:62:21:07:d3:db:36:f5:a6:d7:f8:15:
b4:8a:bd:66:b0:0a:47:6d:bb:19:7a:c6:9d:51:8e:57:ec:60:
57:6e:ba:f5:48:56:6c:c8:e5:eb:d7:fc:e0:2a:a1:1b:ed:fa:
e8:ed:af:f9:8f:68:f9:df:5f:3b:d0:53:95:03:29:dc:91:8e:
84:66:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:50:36 2026 by rpki-client