
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
File: 790B62849B574740604A7D3662FBB56A4DB8F510.mft (raw, json)
Hash identifier: GGPTr+FrepNyLLEU6P/EEAyLxtjqCPvOCgvgGBxSNdo=
Subject key identifier: 65:B2:CF:9D:7E:4C:7F:BE:F3:7B:50:8B:CE:DE:6F:5D:8D:53:8E:50
Authority key identifier: 79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
Certificate issuer: /CN=790B62849B574740604A7D3662FBB56A4DB8F510
Certificate serial: 0F168E05B5EF74FFB096589D5B4F95CF7F7DD482
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 00:19:33 +0000
Manifest this update: Sun 25 Oct 2026 00:14:33 +0000
Manifest next update: Mon 26 Oct 2026 02:57:33 +0000
Files and hashes: 1: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: NJvu5a2G0jjnlwhF7q1VResc9Hvm9KMupvNKyxPdQCg=)
2: 790B62849B574740604A7D3662FBB56A4DB8F510.crl (hash: kX6j7GoAZxYDEpAP6UN4vZfeDt4vPTgwvZVKrzU12og=)
3: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: pGxhgrYKixK8KuIb09I/uNnM3vdhwY5/uB5atkATCJ8=)
4: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: e02MKBQgYP+gWaNmouD7MtCYu0SRQ4Bho5dsgVkksxY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl
rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 02:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:16:8e:05:b5:ef:74:ff:b0:96:58:9d:5b:4f:95:cf:7f:7d:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790B62849B574740604A7D3662FBB56A4DB8F510
Validity
Not Before: Oct 25 00:14:33 2026 GMT
Not After : Oct 26 02:57:33 2026 GMT
Subject: CN=65B2CF9D7E4C7FBEF37B508BCEDE6F5D8D538E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:ca:7a:98:88:5e:fc:09:bd:ec:ee:8e:69:
37:37:e7:8f:5e:ae:f0:34:68:d9:6a:40:be:b4:d0:
e1:9f:2d:d2:a7:db:fa:25:7e:bb:31:0c:8b:a6:7e:
be:99:68:a3:40:0d:01:17:0f:74:fa:02:eb:e0:68:
a4:0c:cc:b9:fd:8d:14:36:b5:92:02:bc:21:51:79:
f8:f6:93:6c:5a:4e:8f:0e:9f:85:e7:84:cc:7d:fa:
42:fb:50:c3:f6:cf:6a:3a:31:71:d4:3d:7b:ac:6d:
22:4e:47:fb:b7:90:b6:93:95:6e:b1:ce:5b:f3:69:
e0:9c:8a:9d:98:e8:b6:39:90:89:8a:70:f5:ec:39:
a1:88:5d:9c:eb:55:97:44:68:3d:f8:4b:41:e4:d4:
25:d4:e2:3c:63:f2:61:e3:21:0f:37:fe:e2:c3:43:
f6:fb:57:1b:24:3a:4c:9a:b8:46:4a:bd:0a:0f:41:
76:ab:9a:a7:87:62:8a:aa:24:d1:94:4c:18:2e:32:
d1:42:c9:45:53:3f:69:da:dc:de:a4:09:aa:9a:45:
d3:27:e2:0e:5d:7e:d7:1e:b0:ba:0e:d1:75:e4:88:
3c:3c:a3:b6:06:2f:8d:3d:42:46:9f:f8:18:4d:0b:
78:69:6e:10:87:0e:b2:da:e2:5c:6b:7b:c5:dd:ea:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:CF:9D:7E:4C:7F:BE:F3:7B:50:8B:CE:DE:6F:5D:8D:53:8E:50
X509v3 Authority Key Identifier:
keyid:79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:4f:9b:b7:d5:df:a5:a1:07:dd:27:88:f3:f4:86:83:7b:
61:f9:8a:49:c6:ce:00:10:d9:b8:96:a9:d0:d0:7f:bd:a7:9d:
52:e0:ae:c8:0c:23:b9:c5:32:1b:d9:91:0d:35:8e:be:a9:f4:
d8:b0:d0:3f:37:5d:bc:06:59:4b:3f:46:07:7b:26:87:46:c2:
03:81:7d:f2:e0:11:b8:ee:42:3f:cc:1c:58:bc:5d:d8:78:31:
0d:01:0c:9a:b4:2e:82:f4:98:65:cb:25:b3:b9:56:72:9a:ee:
7d:12:54:9b:a8:ae:b0:c3:e4:5b:c7:41:a3:52:a8:56:22:e1:
42:2b:69:92:a4:8d:57:96:e4:4c:5e:ba:6a:e4:55:69:15:e7:
75:2e:3a:53:2c:8e:50:49:3d:9b:ba:b8:25:82:a8:64:4a:dd:
28:40:8c:e4:98:de:a1:0d:76:5b:c7:16:a6:cd:2d:14:c9:20:
c4:9e:78:d8:c9:6f:1c:92:a8:b9:85:8c:21:35:a4:c7:53:32:
e3:a6:18:bb:4a:27:48:c5:c9:d0:ff:8b:5c:7b:06:84:a3:1b:
09:56:f7:ef:ee:d0:1d:ef:dd:e4:ea:65:0e:7f:fb:66:c8:98:
f4:ce:9a:d1:4e:5d:f5:25:ac:dd:d6:55:8a:4f:b3:18:a6:cf:
d0:b0:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:57 2026 by rpki-client