
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier: Z82v7lVSkeKtFsLvGb17dkdtj4REkX2aAF1bbMBwlHc=
Subject key identifier: 0D:24:33:4A:FB:DF:7F:63:ED:3B:EF:86:7F:E0:AE:2E:33:69:83:1D
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial: 440AD445A318F37DC44BED7E2D16840C9E7A97AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:44:14 +0000
Manifest this update: Thu 17 Sep 2026 04:39:14 +0000
Manifest next update: Fri 18 Sep 2026 08:41:14 +0000
Files and hashes: 1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
2: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
3: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: BlwKyK84Whhyk02pnykRPK8F7cIUIvPJ0Gn5EP3Zzv0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0a:d4:45:a3:18:f3:7d:c4:4b:ed:7e:2d:16:84:0c:9e:7a:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
Validity
Not Before: Sep 17 04:39:14 2026 GMT
Not After : Sep 18 08:41:14 2026 GMT
Subject: CN=0D24334AFBDF7F63ED3BEF867FE0AE2E3369831D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:57:76:db:29:25:3b:ea:90:37:fa:f4:b3:
63:70:bb:55:3e:ac:76:d8:3b:f2:a6:e6:d2:ee:dc:
f9:d0:10:9f:5f:9d:27:43:14:d2:91:80:96:2e:16:
bb:e6:01:9d:2a:00:a8:28:24:57:a4:ab:5a:f0:23:
bc:a0:8f:1d:10:bb:4e:4d:2d:28:af:cc:15:17:d4:
19:64:dd:35:ff:8c:37:e7:62:09:62:18:58:3f:6d:
26:78:fd:ce:a2:cb:2f:bf:95:41:7e:bc:f0:26:ae:
75:55:a1:8c:c3:67:b0:f1:82:81:7b:81:7c:6e:83:
b3:4e:d3:6f:f6:14:da:7a:19:81:e1:8a:da:b1:d8:
63:6f:bf:ad:6a:12:56:36:e6:f6:e5:ec:f6:34:b4:
21:50:72:05:93:f6:4f:6d:36:68:c0:1f:d3:0a:af:
47:02:0b:0b:8a:9c:48:48:9c:45:51:8d:97:28:e1:
72:47:fd:74:68:3b:13:b7:6e:a5:d9:c9:ef:0a:e8:
19:42:46:73:d3:fd:2d:b1:cc:7c:26:04:fd:27:7f:
03:92:4d:2a:df:98:6f:5a:b2:28:6c:2a:00:b3:68:
d5:f4:da:19:e3:0e:56:f0:82:9f:5b:5a:05:24:f1:
48:0d:85:c0:f7:d5:10:28:f9:12:b8:73:4a:ea:23:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:33:4A:FB:DF:7F:63:ED:3B:EF:86:7F:E0:AE:2E:33:69:83:1D
X509v3 Authority Key Identifier:
keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:79:9a:97:6a:77:73:4e:c1:1b:e0:05:31:81:34:da:49:
0b:1d:59:b5:9f:21:e7:98:cb:ac:18:03:8b:bb:c9:5c:f2:0e:
3a:cd:ce:be:fe:29:dc:e2:a9:31:61:1a:6e:99:ff:59:7f:44:
6d:cc:69:e9:ca:0b:5e:e7:df:fe:d4:52:9d:50:6f:b2:52:78:
ac:98:e1:0a:87:db:22:a5:4a:7e:6e:a3:d0:e7:b2:bb:76:b0:
ae:44:e4:42:24:b7:27:c3:47:83:79:fd:5d:93:c8:95:0e:73:
50:63:22:1a:5c:9c:69:68:f7:c9:e5:32:2b:ec:ea:6c:a7:74:
a4:c0:c0:cb:b9:03:cc:0b:86:e5:d5:6e:20:02:0c:25:4a:ca:
63:32:30:19:e3:86:f9:ca:bb:f0:33:ea:49:cf:bf:d8:a0:c9:
62:03:66:b2:e6:24:a0:5b:08:61:03:97:3c:c1:11:fe:aa:e1:
bd:b4:25:ef:db:b9:03:ae:c3:af:34:b9:fc:e1:68:2c:ad:58:
04:21:73:1b:37:db:16:f3:4c:64:81:52:81:5e:6e:fd:63:18:
29:e1:28:39:ba:02:4f:e6:02:53:39:65:5c:55:e4:b2:9e:87:
10:48:9c:fe:ae:2f:ff:83:94:bd:6b:0a:41:06:f0:e0:03:c3:
79:70:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:41:32 2026 by rpki-client