
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: YPP+6OXA9N9Iqh/W5G9v5trFs4iGzLzIpU0nzxYtMQo=
Subject key identifier: 15:4B:74:9A:EB:EF:26:9A:A8:0E:F4:6F:71:38:83:40:D3:DD:EE:25
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 4DF5717F6620D54877CFE27482C314A4263809D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 11:26:33 +0000
Manifest this update: Sun 02 Aug 2026 11:21:33 +0000
Manifest next update: Mon 03 Aug 2026 13:25:33 +0000
Files and hashes: 1: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
2: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
3: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: DHmLIdpgAE04nfXZyVpC+aWuMq91iSu01fFYOlK6Qpc=)
4: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 13:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f5:71:7f:66:20:d5:48:77:cf:e2:74:82:c3:14:a4:26:38:09:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Aug 2 11:21:33 2026 GMT
Not After : Aug 3 13:25:33 2026 GMT
Subject: CN=154B749AEBEF269AA80EF46F71388340D3DDEE25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:22:ef:02:83:20:5e:1a:85:16:4d:cb:66:
7f:51:8e:d5:84:2f:2e:f0:7b:90:af:ea:ee:ec:cb:
c5:76:de:d6:36:04:e2:a5:a9:1e:6d:9e:0e:0b:30:
9e:8f:83:5c:8d:8f:47:81:77:af:1b:39:3f:ec:a4:
45:c5:65:19:22:3b:28:45:73:1e:f0:7d:59:2c:34:
93:ea:6b:50:55:be:86:01:92:a1:e1:47:25:d9:4b:
25:15:35:a1:82:66:c6:44:6c:b5:8c:df:cf:9d:24:
bf:33:d3:e8:39:84:47:1a:ca:8e:63:46:ed:19:59:
2b:c7:5f:59:7b:70:43:a6:86:aa:17:38:36:72:e9:
04:6e:89:7d:be:bd:8b:b5:61:26:d4:a1:ee:6c:85:
46:b7:78:d2:d1:ca:6a:f6:11:7b:7a:b4:0e:50:ac:
67:23:fe:3f:ca:be:f8:3d:65:64:a2:13:fc:cc:01:
59:fc:71:c0:fc:b0:44:d7:02:68:66:9b:59:ac:83:
c7:d9:25:9b:49:d4:af:f2:59:07:3a:9c:2b:48:a9:
23:75:c5:46:84:37:c4:1f:06:2b:6f:e6:bc:12:b3:
eb:ce:cf:cf:57:01:22:09:c8:6e:30:37:51:7e:a2:
0e:de:9b:a8:01:c5:53:8c:d7:62:ef:99:d7:d8:af:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:74:9A:EB:EF:26:9A:A8:0E:F4:6F:71:38:83:40:D3:DD:EE:25
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:e3:03:f6:1b:90:32:07:3d:70:22:5c:86:62:08:f1:25:
c4:9a:58:be:d7:f0:96:d5:69:6c:d0:7c:b6:c3:4c:96:37:ff:
03:29:45:9b:5b:5b:d4:9c:df:ff:b6:e7:a6:87:15:1f:cd:38:
a2:b7:4c:50:fe:6d:a2:ba:4e:59:e3:9b:73:02:09:75:f5:b6:
76:51:cb:70:7e:28:6f:59:78:bf:35:7b:6d:57:42:1b:ec:dc:
4b:7d:56:e3:11:84:af:a7:69:13:cd:3d:15:78:08:c1:2a:77:
64:d0:2f:57:a9:14:4c:a0:86:ca:19:c9:46:bf:8a:7e:d0:7d:
68:79:fc:7b:84:39:c7:75:9a:83:0b:1e:7c:66:07:ea:ae:18:
56:28:d6:c6:3a:c1:bc:62:91:40:27:02:0b:48:66:4e:0f:ad:
0c:da:f6:7b:a7:2e:19:93:20:7b:79:13:c7:16:4c:f8:49:22:
fa:06:15:6a:77:c6:aa:fe:f6:cc:62:9f:a3:9d:18:35:a9:03:
3c:01:19:2e:f6:6a:25:0c:16:6a:39:15:95:98:3b:3d:34:8c:
7d:32:98:b8:72:a9:ef:ba:c4:4b:55:19:dd:c6:fb:79:83:fe:
e4:0a:30:41:6d:c8:db:6c:fc:53:e4:5d:1f:00:22:62:6c:45:
d6:a0:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:41 2026 by rpki-client