
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
File: 7705E223B413A31F5B5C47149EFBCA7585682B42.mft (raw, json)
Hash identifier: vf8BPcK7Jz6YhZmRH1jjZdYQJYE1oXxcCeZBgPXDpLc=
Subject key identifier: AA:7D:C4:E3:32:75:AA:F7:26:11:09:8D:18:5B:ED:72:14:87:95:12
Authority key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
Certificate issuer: /CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Certificate serial: 27AF1EC87B1B720B34A3A5718B2ADB32AD4D3EE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
Manifest number: BA
Signing time: Wed 16 Sep 2026 21:05:06 +0000
Manifest this update: Wed 16 Sep 2026 21:00:06 +0000
Manifest next update: Fri 18 Sep 2026 00:40:06 +0000
Files and hashes: 1: 7705E223B413A31F5B5C47149EFBCA7585682B42.crl (hash: YPlN8Sis6xMnDR/Vcpd8cJAvEYHLaVkTzFyGmEm/Tdg=)
2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: s99ZTaHI8AEsUmlddmqA7MWNsPpN7nJom6XrkndDWvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:af:1e:c8:7b:1b:72:0b:34:a3:a5:71:8b:2a:db:32:ad:4d:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Validity
Not Before: Sep 16 21:00:06 2026 GMT
Not After : Sep 18 00:40:06 2026 GMT
Subject: CN=AA7DC4E33275AAF72611098D185BED7214879512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:55:67:e3:92:6f:12:63:74:66:1a:7b:5c:
87:7a:82:95:72:9f:7d:c2:f5:a2:6d:5c:51:3e:15:
4a:7b:b6:bb:23:74:f5:7b:73:05:6b:d7:98:ae:ca:
19:55:f1:72:07:0f:d4:87:3d:a9:a3:bb:9c:59:df:
05:fd:fb:b0:e0:ca:ba:2e:d7:67:c9:74:1c:2f:5a:
35:c4:bb:37:10:e5:d7:02:70:be:ce:78:ac:8a:4a:
6e:ab:77:3b:93:92:fa:bc:bc:b4:9c:c9:e5:70:d9:
79:78:04:b2:c0:89:eb:95:7f:9f:20:61:1d:c9:0b:
51:c5:91:c2:0d:76:db:ba:53:9d:ed:13:69:aa:bc:
db:8b:ae:96:82:f7:22:90:ec:86:77:4a:5c:5e:91:
8b:f5:c1:a0:93:68:bf:05:1b:fb:2b:4d:dd:c6:88:
b7:3d:a0:a2:ca:d9:a8:a7:1f:7b:7a:a9:db:32:b1:
85:9f:66:90:92:ad:dd:79:45:6d:1d:1c:37:e8:6b:
69:a9:20:32:80:8c:e0:0a:01:26:8a:b4:9f:a4:59:
b7:cb:e5:95:fe:b5:1c:f2:cd:c0:02:70:94:51:9e:
84:ff:0d:05:06:0f:05:85:3b:e1:99:00:93:e3:50:
1d:3f:5f:8b:0b:da:43:be:da:4f:ca:2b:d8:2b:4f:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7D:C4:E3:32:75:AA:F7:26:11:09:8D:18:5B:ED:72:14:87:95:12
X509v3 Authority Key Identifier:
keyid:77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:64:87:08:a9:62:46:8a:fb:a2:42:3e:41:1a:de:2a:83:
ce:10:ed:b2:b6:a3:c4:4f:e3:67:ec:e5:33:3e:e6:84:6b:47:
b5:d5:21:f5:27:62:38:d9:5f:1a:d3:89:75:37:3b:01:f8:5d:
b5:25:20:8c:9c:62:b7:84:1a:b8:31:62:07:ec:63:75:62:88:
eb:59:80:06:a0:92:72:3d:d6:8f:30:b2:e8:0f:12:f4:23:71:
90:01:33:90:ef:ad:da:02:fc:24:8b:61:64:b6:1d:1d:56:7b:
45:9a:f4:7c:51:6d:7e:60:41:2e:d3:1d:d4:d8:a3:e6:c2:fd:
b8:c1:3e:4c:40:65:ef:80:32:28:68:61:55:85:d3:34:b7:3f:
f4:45:08:b2:3c:b6:45:e0:b5:e5:f5:c6:9b:d1:08:b1:ef:ae:
80:87:69:8b:6c:a4:49:e3:e4:ec:ea:5f:b9:e4:90:a6:30:66:
1b:d5:07:7d:5a:a3:63:bf:86:df:44:9c:18:d9:83:00:10:f3:
1d:a4:91:cc:3a:cd:89:ba:63:e3:9d:b5:9b:ed:01:55:d0:56:
fb:34:6c:31:08:0f:15:3a:fb:2b:0b:16:c6:49:a3:27:3c:4c:
ab:ad:1c:cd:a6:60:4d:80:98:13:fc:b4:56:89:e3:9a:dd:14:
d5:24:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:49:57 2026 by rpki-client