
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft
File: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft (raw, json)
Hash identifier: HTI0XOoLsa8JXqrGqzpebsBjBWsAK+1KI8M/K9mBvsQ=
Subject key identifier: E7:8B:44:EF:6F:8A:6F:19:E5:EC:1B:31:D3:FA:E8:38:9D:BE:A1:B0
Authority key identifier: 64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46
Certificate issuer: /CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46
Certificate serial: 5F0E21A15FFEA1E4FFF522082D32031BEDD725
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 10:11:14 +0000
Manifest this update: Wed 19 Aug 2026 10:06:14 +0000
Manifest next update: Thu 20 Aug 2026 14:01:14 +0000
Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: lTZ01/fJUOFqaJRWKnNIALG7LB1k+HJpJA/DEXbiNSg=)
2: 644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl (hash: s/w72Zk8orQeJlR/0qrRl1LVTsDOd4RFd1Att0+VC0U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl
rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 11:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0e:21:a1:5f:fe:a1:e4:ff:f5:22:08:2d:32:03:1b:ed:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46
Validity
Not Before: Aug 19 10:06:14 2026 GMT
Not After : Aug 20 14:01:14 2026 GMT
Subject: CN=E78B44EF6F8A6F19E5EC1B31D3FAE8389DBEA1B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:ee:04:fd:3b:bf:08:f8:28:b8:80:b4:d2:
64:db:3f:a9:50:cd:d3:d8:64:4f:e4:ae:3f:93:e9:
c0:4f:52:01:1c:9d:a2:8a:31:62:89:b6:1e:24:9c:
ca:8d:f0:88:23:cc:6d:db:63:2d:d9:07:f4:0f:32:
7c:9b:1d:93:ad:fd:d8:2e:b9:dc:0b:f1:58:6b:1d:
22:23:49:ca:f8:7f:3e:87:88:6b:51:45:9f:b6:18:
4f:7d:af:10:cc:a1:0c:a0:08:ed:a0:96:ac:98:73:
1e:f4:cf:93:1e:c3:ac:e1:3b:31:85:6e:a8:b1:6b:
35:d6:87:ba:f8:cc:01:0b:a5:ad:00:09:2a:e8:e3:
60:aa:5b:1d:27:6c:4b:35:64:b5:4c:86:2c:ee:ae:
e8:39:dc:37:6c:42:d1:8b:cb:f7:1f:a5:ac:99:c1:
8c:42:f0:10:c7:c0:45:95:70:97:d0:92:d3:e8:df:
d4:63:70:31:be:07:0c:17:5e:0d:27:ea:1f:4b:d6:
aa:e0:64:10:c6:1b:15:99:49:6d:78:3a:07:de:dc:
7c:0c:e1:21:f7:fb:71:04:3c:4d:8f:37:96:6e:89:
7b:ee:17:99:73:79:d6:84:91:71:2c:0c:3e:3e:37:
49:4e:fe:94:9e:a0:4c:85:a9:0f:7d:a3:4a:9e:d2:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:44:EF:6F:8A:6F:19:E5:EC:1B:31:D3:FA:E8:38:9D:BE:A1:B0
X509v3 Authority Key Identifier:
keyid:64:4E:AB:DD:F7:7A:AB:A7:E9:F8:B2:FA:38:2A:C5:5E:5E:E7:5F:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/644EABDDF77AABA7E9F8B2FA382AC55E5EE75F46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:16:6c:df:fa:9d:67:b5:36:9e:85:cb:3b:ef:97:61:dd:35:
22:86:57:02:9d:b2:29:df:70:95:2f:e6:a4:90:da:50:45:6c:
4b:5b:78:38:3e:93:5c:35:25:28:7c:bb:39:ab:85:6a:28:b2:
4f:9f:91:34:1e:70:86:29:d0:84:24:3a:71:24:3b:d5:77:cf:
55:bc:ce:69:be:4a:d6:1b:1c:91:ce:d1:14:23:f2:37:74:57:
d3:59:df:82:49:75:f8:66:7a:44:2f:b3:26:75:84:96:86:57:
56:b4:de:4e:13:d9:b9:d9:46:a4:d7:ba:b3:98:6a:f5:ab:19:
46:26:4b:bb:2a:91:75:d8:e6:83:af:c4:f9:c2:7b:ae:0e:7b:
5d:96:b9:15:73:d8:ad:18:ce:ec:99:f0:d6:5e:2b:85:d4:51:
b5:7a:5b:e3:77:80:1a:ac:25:aa:27:8c:7b:08:97:fe:00:4d:
fe:3b:4b:ae:77:af:8f:d1:a0:9d:48:ac:ad:ff:a5:8c:89:c8:
0f:d1:4a:72:c5:96:ff:76:6e:1c:be:b6:88:75:bc:ac:6d:f1:
ed:07:a3:21:d3:68:b2:79:56:64:81:6b:7f:dd:34:ec:04:33:
22:5b:2f:52:ca:5b:04:8f:cf:44:09:74:d7:f0:24:e5:ad:0a:
a9:8e:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:14:09 2026 by rpki-client