
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json)
Hash identifier: h7mMZBt9mxYMZjfMtytCNnExCTHUQ6IWiJqmONieUT8=
Subject key identifier: 7F:F2:F9:BF:A4:2E:8C:7A:A4:F4:D7:77:8C:8F:2D:93:EA:B9:22:EE
Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Certificate serial: 135758DDDEC3944DA136E37EC949781E76FA56FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
Manifest number: EB
Signing time: Mon 26 Oct 2026 00:06:55 +0000
Manifest this update: Mon 26 Oct 2026 00:01:55 +0000
Manifest next update: Tue 27 Oct 2026 00:48:55 +0000
Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: ra9RwSi1WWYISH83enfSBmYDM1KdSjG1Ltsy6YDl0ZU=)
2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:57:58:dd:de:c3:94:4d:a1:36:e3:7e:c9:49:78:1e:76:fa:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Validity
Not Before: Oct 26 00:01:55 2026 GMT
Not After : Oct 27 00:48:55 2026 GMT
Subject: CN=7FF2F9BFA42E8C7AA4F4D7778C8F2D93EAB922EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:2c:05:ca:22:d0:6f:50:a4:c5:f9:b2:f7:
a1:24:ca:41:c9:71:aa:4a:fa:80:65:c4:2f:7e:e5:
ec:5a:8f:55:39:97:08:b5:12:53:0c:d1:bd:3b:9e:
f3:a3:e7:80:37:6d:84:b1:d8:d8:5c:27:e0:47:ef:
7a:c5:39:42:b1:1f:4f:08:e3:6f:95:46:0d:c4:61:
1b:41:4a:19:b0:ee:83:85:45:2f:35:8f:48:e7:47:
8b:8c:33:89:f0:ea:d2:a5:22:6c:f6:60:b6:ce:2c:
b0:01:db:65:50:ee:a6:0e:e1:d7:47:56:64:99:14:
93:6b:38:b2:d9:f9:4e:bc:d3:94:f5:ff:32:9d:7c:
d7:78:bc:a8:c1:e4:92:5e:7f:31:69:bf:68:a7:fe:
90:69:46:d8:7d:55:f4:c0:e0:1a:b7:a3:37:49:14:
ec:64:da:bd:05:60:c3:d6:aa:e7:78:23:ca:48:02:
8e:a8:b8:3b:09:77:65:3e:85:38:68:c4:3e:8a:7d:
07:db:78:7a:64:06:3c:00:bb:26:0e:6d:02:2f:e8:
c0:89:80:5d:87:35:a0:20:4c:4b:8e:4d:7e:95:5b:
d0:c3:cb:31:3c:4b:37:8e:c6:73:f7:f4:1a:66:35:
b1:aa:be:33:f4:4f:f5:d5:e4:61:3d:e2:32:1a:99:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:F9:BF:A4:2E:8C:7A:A4:F4:D7:77:8C:8F:2D:93:EA:B9:22:EE
X509v3 Authority Key Identifier:
keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:87:ba:e2:e7:17:64:42:c6:94:7d:55:7f:fb:1c:fd:32:e8:
1c:7a:8a:47:98:42:2f:f3:a7:54:01:0c:a4:05:8c:be:1e:7e:
79:7c:a0:28:f3:10:33:55:55:33:7e:06:33:60:2c:fe:f5:d7:
89:2d:06:30:5a:7f:93:c7:00:c6:08:b8:c0:cc:58:98:e3:ee:
ba:bd:cb:19:a1:b0:ef:f6:ef:b4:e3:3b:c1:8a:2d:5c:41:36:
c9:0b:b5:e9:34:23:f2:6f:5c:37:d6:69:bf:ed:62:4a:58:f3:
6d:c2:18:84:ab:87:85:40:33:f7:04:22:4a:2d:b4:41:6d:c0:
42:54:80:0a:28:e7:bc:0f:e4:19:bd:be:4b:cb:58:1d:78:c3:
0e:6c:99:3f:f6:de:d4:a1:94:7d:f8:04:b8:4d:7e:0e:44:59:
3c:f6:4a:62:e8:9e:1a:a7:60:f8:63:0d:19:6f:a2:34:cc:f7:
08:b8:47:43:16:82:93:41:90:fd:eb:59:d4:2b:5d:b2:03:0e:
45:26:df:74:f6:ff:f2:06:8e:a6:92:f7:8b:17:d1:56:d8:5e:
07:2b:a8:24:3d:ec:1e:69:3d:f5:c0:06:20:d0:43:25:61:60:
de:e7:47:4c:3d:33:8d:18:03:58:9c:85:38:15:13:d5:2e:3e:
89:87:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:46:28 2026 by rpki-client