
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft
File: 82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft (raw, json)
Hash identifier: rGI68cku/8Q4jq4ntzPxrJa6qAczdxGHq3w9auAQffk=
Subject key identifier: 3A:6B:CE:8B:90:1B:EF:67:DD:47:70:F8:E5:89:40:B0:3B:7B:BB:AC
Authority key identifier: 82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5
Certificate issuer: /CN=82CA7DAD0FE5B4D0AB3947320D10D955193B63D5
Certificate serial: 458B33E7844E69189BB736037765CC20BDE1CF46
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 05:48:30 +0000
Manifest this update: Sun 25 Oct 2026 05:43:30 +0000
Manifest next update: Mon 26 Oct 2026 08:38:30 +0000
Files and hashes: 1: 82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.crl (hash: e1GBKxGSZjIqgB/YP1L4LJycPAq4+iUGpqcBvcqnyOw=)
2: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: EXXpoIwXGQQW/J4KA3aLTTIvf6EK/XcMWt09grN38eQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.crl
rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8b:33:e7:84:4e:69:18:9b:b7:36:03:77:65:cc:20:bd:e1:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82CA7DAD0FE5B4D0AB3947320D10D955193B63D5
Validity
Not Before: Oct 25 05:43:30 2026 GMT
Not After : Oct 26 08:38:30 2026 GMT
Subject: CN=3A6BCE8B901BEF67DD4770F8E58940B03B7BBBAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:f7:48:65:6b:43:68:3b:04:3d:9c:74:0e:
9c:92:36:2c:78:2d:4e:88:b9:20:d4:cf:09:20:9e:
64:59:41:2c:0e:d8:57:2d:e3:1b:4e:79:56:3c:7f:
21:44:82:02:17:c2:af:90:4d:c0:ea:3d:1c:21:55:
4c:b7:1e:26:15:44:29:cb:7c:4f:42:d1:9f:d1:1b:
86:de:49:00:73:5d:b3:80:9a:e1:75:a1:fd:b3:d6:
4e:7f:fd:52:a2:45:97:3c:d9:53:e1:07:c9:45:c0:
85:95:8d:30:10:aa:b6:ba:75:1c:c0:61:b5:3b:88:
f7:49:a6:c2:d9:9c:28:1d:4c:6a:69:8e:f7:0c:71:
9c:a4:26:b0:5a:42:02:fb:64:4d:e7:b9:7a:ca:41:
86:59:20:e6:5e:4c:22:a3:2d:47:11:74:a0:63:60:
8e:66:51:ee:90:f7:76:5b:2e:7d:96:c8:93:00:fc:
28:0e:37:06:c3:87:f4:e6:7d:30:a7:4e:59:aa:53:
19:70:20:55:f1:df:e9:22:85:7b:15:d8:ca:ce:e0:
fe:40:f9:6f:37:0b:37:99:c3:e6:8f:cd:34:8d:ad:
b1:a2:1f:98:75:ea:3d:09:f4:dc:a4:9a:03:39:f8:
ec:55:41:59:71:c2:19:f2:45:20:29:5c:2c:6b:d9:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:CE:8B:90:1B:EF:67:DD:47:70:F8:E5:89:40:B0:3B:7B:BB:AC
X509v3 Authority Key Identifier:
keyid:82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:30:27:fb:c9:32:92:40:7a:f2:c2:06:d1:1a:a0:5c:e7:4c:
37:0c:63:7a:a0:f4:31:be:9a:cc:f3:cd:8d:b3:8a:3d:5a:a0:
16:d5:b0:ed:84:f3:dc:d0:03:4c:10:a8:de:37:c2:42:4f:fc:
a1:a4:ce:eb:d8:2e:88:95:ed:a0:c1:b1:ee:96:bd:be:25:a7:
6f:af:a2:d5:3c:44:65:87:6b:66:56:03:59:20:24:66:92:e2:
01:ac:76:55:c1:8d:83:e7:e1:d9:39:7d:23:fb:6d:a9:61:45:
15:87:b4:22:78:8f:d7:96:dc:4a:f0:b3:17:38:25:05:aa:98:
ac:ef:f7:88:59:fe:52:8d:09:74:e7:a1:dc:c2:85:58:3d:49:
3f:60:a6:e5:96:69:70:25:19:5c:55:ca:5d:c2:58:2a:ac:61:
2c:6d:bd:88:1a:e9:3d:31:a7:6f:db:32:29:4d:65:f0:aa:a6:
76:79:9f:4f:9b:fd:ab:0a:57:14:f3:49:51:90:37:98:af:31:
78:58:32:ad:c5:f7:e3:49:ae:37:cf:4d:50:c5:e8:26:dc:05:
a3:77:5e:ca:59:d1:b1:83:35:60:a2:c7:31:8f:31:c0:d6:bb:
0f:9c:8e:2c:2a:87:14:ea:19:62:15:d7:50:99:99:84:b5:47:
02:eb:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:58:39 2026 by rpki-client