
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json)
Hash identifier: Z5318dOrYPAV2ixlx+1NTwQNrhZ66PmIoRoD/+9FaZU=
Subject key identifier: 6B:13:F5:1F:E9:D8:7A:CB:03:22:5F:F0:F8:43:4D:74:6D:58:73:C0
Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94
Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594
Certificate serial: 2488DDC96F731D1B454C22E5E943DD2136F8B8B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 16:19:27 +0000
Manifest this update: Sat 24 Oct 2026 16:14:27 +0000
Manifest next update: Sun 25 Oct 2026 17:32:27 +0000
Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=)
2: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: n2SdFU0Z/OE+wmpu+XrtWfV4GuGP+yHVUOVro0M22Jc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl
rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 17:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:88:dd:c9:6f:73:1d:1b:45:4c:22:e5:e9:43:dd:21:36:f8:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594
Validity
Not Before: Oct 24 16:14:27 2026 GMT
Not After : Oct 25 17:32:27 2026 GMT
Subject: CN=6B13F51FE9D87ACB03225FF0F8434D746D5873C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:7a:5d:0c:2b:a8:c2:7e:6c:73:82:ca:c0:
82:c2:d3:bc:11:a5:95:e6:16:85:f9:4d:91:8f:60:
f9:e6:2a:80:36:f1:3b:fd:31:39:46:ef:2c:c5:f8:
f2:aa:15:44:e3:eb:4b:d3:5e:55:25:69:82:b7:70:
8f:19:da:46:ad:d8:8c:03:57:88:53:ed:cf:a1:09:
bd:ed:31:78:6e:b4:33:35:9a:9d:44:2f:38:d6:29:
03:9d:f5:23:f2:d8:11:b6:50:1b:e8:0d:53:f7:62:
5a:ce:4e:d1:2b:15:00:f2:40:7b:09:f5:ff:d2:36:
e0:06:27:2c:95:61:be:0a:a7:2d:58:da:1f:05:1a:
fb:27:17:3a:b1:bb:1d:22:55:f1:ad:80:60:d6:b9:
01:e6:7e:51:4a:07:06:79:b8:30:0e:2e:09:fe:1c:
fd:5b:42:a0:63:6b:72:31:b9:dc:ef:41:7b:cc:c5:
a5:8b:fd:ea:e6:cb:f9:0d:3a:84:86:b2:a2:b2:d9:
1c:53:2b:e7:15:af:d0:3c:0a:6b:63:58:0a:f9:8c:
44:9f:e5:5e:69:c2:e8:f6:1e:c5:24:15:9c:16:41:
2c:1d:b5:68:52:9a:7a:8c:47:d7:90:04:55:57:02:
11:05:3e:92:82:43:56:f7:73:8c:2d:3d:da:1a:d0:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:F5:1F:E9:D8:7A:CB:03:22:5F:F0:F8:43:4D:74:6D:58:73:C0
X509v3 Authority Key Identifier:
keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:69:50:08:6a:c0:8b:97:63:51:06:87:47:00:22:a3:57:
9b:54:25:a2:44:07:05:fe:b0:e9:8d:8f:15:3f:f4:e0:09:36:
8e:0a:6e:ff:1c:90:5b:d3:8a:85:7f:e1:1b:ab:7a:7b:0b:5e:
d3:04:bc:be:32:a1:0f:ab:ec:d5:9b:a8:ba:46:9d:45:33:cd:
4b:df:f5:87:d5:f1:fb:b0:84:41:a8:5d:33:76:6b:26:d4:30:
c4:51:a6:80:c0:f1:ba:3f:7a:ea:91:41:4f:c4:ea:39:0e:4b:
df:a7:d9:d3:86:9b:1a:14:8e:e9:a6:3c:e1:4b:4e:46:59:84:
38:a8:12:af:50:90:51:2a:f8:32:36:80:d3:05:fe:b0:b4:f5:
6a:59:ed:64:4c:53:7c:05:16:de:12:cf:c7:46:01:19:77:92:
8d:95:65:27:f6:64:e7:45:c7:d0:db:2b:b0:e8:d5:fb:02:fe:
df:70:ba:a8:dd:c9:a6:b4:67:b5:82:38:0c:bc:41:d8:88:0e:
6c:10:32:cc:e9:42:12:9c:93:95:f8:7e:29:13:d1:5e:b4:5c:
6f:be:de:2d:f8:9a:3c:25:e1:85:03:fe:b1:b5:c2:c5:1c:92:
df:28:1f:a4:2f:70:c0:ff:c9:c7:d3:20:c8:b6:56:bb:ce:39:
42:bf:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:50:49 2026 by rpki-client