
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json)
Hash identifier: 4vJij5Stmv1ZUYqSO4Z1E0OD+fXtw0z6IZkHvz7A+hs=
Subject key identifier: 79:FE:5A:39:52:49:90:82:6F:B0:F1:2E:16:9E:F0:83:17:28:EF:E1
Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Certificate serial: 14E2795D5A5E1A3AB18BDB1981F61487BEF62D7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
Manifest number: D6
Signing time: Fri 09 Oct 2026 13:07:53 +0000
Manifest this update: Fri 09 Oct 2026 13:02:53 +0000
Manifest next update: Sat 10 Oct 2026 13:49:53 +0000
Files and hashes: 1: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: 3Zstxc9pJN/day8v9KYcVo66R2+YrCZUYuVKQv1XaQM=)
2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e2:79:5d:5a:5e:1a:3a:b1:8b:db:19:81:f6:14:87:be:f6:2d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Validity
Not Before: Oct 9 13:02:53 2026 GMT
Not After : Oct 10 13:49:53 2026 GMT
Subject: CN=79FE5A39524990826FB0F12E169EF0831728EFE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:60:00:07:1d:7b:c1:7c:f9:70:f2:c7:29:
36:50:50:1e:fc:38:7c:40:fc:3d:cf:f4:05:ec:80:
ae:77:2a:3a:a0:71:04:95:b9:e4:c6:70:e7:c3:e1:
1f:d1:46:e8:f8:a2:85:85:f2:db:6a:fd:2d:00:2d:
b2:5b:77:6a:bf:a1:83:4e:28:60:c1:d7:62:f4:b1:
f5:dd:c2:d8:72:57:96:6c:c6:0b:70:98:12:ea:05:
24:4d:d2:f7:0b:16:88:0c:28:e6:de:34:44:8c:41:
34:97:86:5a:59:fd:fe:55:4e:6e:cd:65:f1:ea:cb:
2e:4b:78:eb:0c:93:14:ea:13:20:ac:c1:44:df:f5:
df:33:ca:6d:48:87:90:2c:83:62:ec:c1:66:4d:51:
29:84:ad:19:bb:0d:db:aa:82:24:20:59:d3:4a:47:
ac:e2:92:68:c2:4f:a6:32:54:e7:9d:97:28:04:82:
5d:ab:b0:eb:eb:63:33:81:c6:85:fe:be:8b:ff:45:
57:05:6f:1a:1d:27:c4:80:8d:59:da:70:fa:aa:7e:
36:1a:07:59:51:2a:c9:86:f2:f7:92:64:fb:97:eb:
7b:1d:a9:8c:22:0d:5f:50:c5:e0:66:80:09:0e:7e:
5d:24:f9:3f:78:7f:d4:ff:fa:4d:10:58:b0:bb:69:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:5A:39:52:49:90:82:6F:B0:F1:2E:16:9E:F0:83:17:28:EF:E1
X509v3 Authority Key Identifier:
keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:10:57:0d:49:d9:3f:8e:bc:2e:89:f5:98:1e:a6:16:05:e7:
4d:59:85:89:1f:4e:3e:a8:c9:b5:39:c0:40:93:be:7f:13:a4:
10:c5:ea:2a:1d:cb:5f:3a:b7:dd:ee:8b:6c:49:f7:33:c7:a1:
be:fd:7b:0c:5a:9f:47:46:0b:d7:c7:d7:6a:e8:53:48:af:37:
92:f8:1e:de:cc:d1:fd:56:1b:04:2e:cd:1e:d5:9f:71:e2:85:
d3:80:5e:06:f8:f5:ac:12:7a:ff:8e:8d:e4:37:4c:34:da:b1:
ef:fa:07:79:9d:8c:49:84:e9:29:4d:5c:74:87:91:7c:a8:ff:
43:2e:82:78:29:83:40:5a:14:22:cb:bc:a3:ef:be:1f:a3:0c:
18:6d:04:ef:79:76:2a:b6:fc:b6:10:76:48:4d:88:e5:35:c3:
8e:fe:ec:cd:98:60:ce:e0:20:44:ee:9e:fa:64:cc:16:e1:35:
fd:fb:6d:ea:eb:e2:2b:96:49:5d:da:14:d1:39:5a:10:1a:79:
02:56:66:6a:3e:81:ea:d5:ce:94:1e:53:d8:e3:ea:6d:7a:d1:
c7:3e:c2:da:18:e7:d8:21:bf:93:9f:d1:d0:c2:3f:28:3e:60:
59:d4:47:2d:87:11:f5:0a:79:e7:7f:43:2b:ab:ab:3e:ff:3a:
57:eb:67:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFOJ5XVpeGjqxi9sZgfYUh772LXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy
OTkwQjRCMjAeFw0yNjEwMDkxMzAyNTNaFw0yNjEwMTAxMzQ5NTNaMDMxMTAvBgNV
BAMTKDc5RkU1QTM5NTI0OTkwODI2RkIwRjEyRTE2OUVGMDgzMTcyOEVGRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXimAABx17wXz5cPLHKTZQUB78
OHxA/D3P9AXsgK53KjqgcQSVueTGcOfD4R/RRuj4ooWF8ttq/S0ALbJbd2q/oYNO
KGDB12L0sfXdwthyV5ZsxgtwmBLqBSRN0vcLFogMKObeNESMQTSXhlpZ/f5VTm7N
ZfHqyy5LeOsMkxTqEyCswUTf9d8zym1Ih5Asg2LswWZNUSmErRm7DduqgiQgWdNK
R6zikmjCT6YyVOedlygEgl2rsOvrYzOBxoX+vov/RVcFbxodJ8SAjVnacPqqfjYa
B1lRKsmG8veSZPuX63sdqYwiDV9QxeBmgAkOfl0k+T94f9T/+k0QWLC7aWhBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUef5aOVJJkIJvsPEuFp7wgxco7+EwHwYDVR0j
BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx
RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC
NEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx
MDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4
NjgyOTkwQjRCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJsQVw1J2T+OvC6J9ZgephYF501ZhYkfTj6o
ybU5wECTvn8TpBDF6iody186t93ui2xJ9zPHob79ewxan0dGC9fH12roU0ivN5L4
Ht7M0f1WGwQuzR7Vn3HihdOAXgb49awSev+OjeQ3TDTase/6B3mdjEmE6SlNXHSH
kXyo/0Mugngpg0BaFCLLvKPvvh+jDBhtBO95diq2/LYQdkhNiOU1w47+7M2YYM7g
IETunvpkzBbhNf37berr4iuWSV3aFNE5WhAaeQJWZmo+gerVzpQeU9jj6m160cc+
wtoY59ghv5Of0dDCPyg+YFnURy2HEfUKeed/Qyurqz7/OlfrZ4M=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:46 2026 by rpki-client