
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft (raw, json)
Hash identifier: C9mhgWwjOOeLWoHQE2K0vIVOCqAwVle3SBqXY/hnFyM=
Subject key identifier: B3:9C:A0:F6:5D:C3:EC:1D:ED:00:FC:7F:AC:BD:B5:91:58:80:E6:08
Authority key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
Certificate issuer: /CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Certificate serial: 40AAC90793E70AFFCC5E0C5D687CF827E34BDC8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 06:16:11 +0000
Manifest this update: Thu 17 Sep 2026 06:11:11 +0000
Manifest next update: Fri 18 Sep 2026 09:48:11 +0000
Files and hashes: 1: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: 18RqwEy267Zr/RraNo+S/nzcISVxpvj1na+e3EceUks=)
2: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl (hash: lMJQyCyMEGW4/GKqi5JpcpVW2W1V2C01yTxbdOF9Vpw=)
3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 2PZRw81bQ6C6T+rhPpeS2pJwxgW1qGxBfnel2RNaMVk=)
4: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: F4tUjUdEY+l3s8NALDsIE06dbqwvjW+OT7LFyFQ/yeM=)
5: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: ZPdcFv71Hcn3YAeVTYCVX3MD4vGj6utOnAFPRD2DXHY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:aa:c9:07:93:e7:0a:ff:cc:5e:0c:5d:68:7c:f8:27:e3:4b:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1
Validity
Not Before: Sep 17 06:11:11 2026 GMT
Not After : Sep 18 09:48:11 2026 GMT
Subject: CN=B39CA0F65DC3EC1DED00FC7FACBDB5915880E608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a8:d1:3f:c7:c0:c6:c5:66:3a:af:b8:d6:a3:
3f:85:da:83:40:97:b8:45:ea:d8:f1:18:89:28:f4:
95:d8:27:8a:fd:12:35:16:0a:54:c8:21:27:49:7a:
36:20:9a:f8:c8:c5:4c:45:7c:9f:4c:09:f1:63:b4:
fb:bb:c4:ff:f6:8c:f3:7b:0e:40:5c:bf:e8:07:ad:
80:06:3c:a1:d0:e2:64:eb:ce:97:da:94:b4:0e:77:
34:02:d0:2c:fc:97:16:8a:c7:c0:de:82:ae:31:cd:
c0:0c:cc:5d:21:86:18:16:2f:5b:a2:a9:48:3e:2d:
86:8a:2f:38:46:1b:c4:28:11:0c:8c:7b:8d:23:e4:
79:ba:6d:77:30:b2:8c:d0:38:53:a8:f9:f5:d5:61:
ec:2d:ca:42:f3:4a:b7:f0:be:00:fe:1e:0e:e7:75:
fa:65:4c:ec:6a:d0:c2:cc:58:e3:bb:51:b2:fe:ef:
73:df:f5:c3:2d:3a:b7:74:b7:29:3b:7d:0d:06:ce:
1f:c7:48:7e:25:cf:2b:71:7c:75:a5:70:06:67:40:
87:97:89:9f:ae:a8:4b:a4:bb:ad:91:ce:18:7f:6d:
83:d5:01:52:05:71:18:68:94:53:00:5c:7e:8d:0e:
06:61:d1:53:62:c5:94:05:a4:81:6a:80:f7:aa:e3:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:A0:F6:5D:C3:EC:1D:ED:00:FC:7F:AC:BD:B5:91:58:80:E6:08
X509v3 Authority Key Identifier:
keyid:C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:e1:e0:76:99:d2:90:b2:aa:cb:f0:0b:9c:60:e5:f5:79:
80:51:17:93:51:ca:36:7a:28:de:8c:49:81:c9:2f:39:21:43:
33:4e:ac:e2:61:f3:35:8c:35:2b:a9:3d:9c:81:f1:18:19:d1:
a1:c8:81:25:5b:9c:99:86:a8:30:f6:4a:c5:2a:ae:16:f1:c6:
8d:3b:c8:1f:0b:15:87:f3:9f:45:d9:28:5b:59:b1:9e:11:f3:
13:69:fd:e1:14:38:3f:d0:00:78:97:cb:48:e8:3c:ce:d5:da:
d9:4b:16:34:64:9f:f2:33:8f:26:b9:2f:11:91:3d:7f:52:05:
7c:49:08:f3:a5:d1:6a:ca:2a:1a:25:f1:87:13:25:8f:67:91:
2e:69:18:18:46:6d:5f:d2:b2:99:f7:1d:03:62:11:69:08:fc:
43:9d:64:a8:dc:b6:06:51:d8:5a:6e:38:70:2e:5c:79:70:6c:
d6:cc:17:22:77:f7:4a:91:54:a4:81:ba:d5:8a:e0:d7:d3:17:
b0:54:36:ba:f7:39:a2:4e:94:e9:a3:12:0f:e1:a9:1c:2c:46:
cc:fd:ad:b8:ed:03:d3:13:25:25:b7:4c:5b:a1:4c:5f:23:64:
c6:e0:26:fd:ce:3c:29:31:a8:f1:58:50:d8:99:d7:ec:68:27:
eb:fa:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:11:45 2026 by rpki-client