
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
File: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft (raw, json)
Hash identifier: ioIb6Tt7KuR0AC2wLHaub4a4guvY2WrwP1ucDAEatRU=
Subject key identifier: 87:06:47:E2:F3:F2:A1:EB:22:85:54:68:E2:27:1C:29:47:7D:0C:53
Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
Certificate issuer: /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Certificate serial: 153485C7F938287B1C378B19E78D3DFE83AD4069
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 22:19:33 +0000
Manifest this update: Sun 25 Oct 2026 22:14:33 +0000
Manifest next update: Tue 27 Oct 2026 00:22:33 +0000
Files and hashes: 1: 801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl (hash: GGyAMGLBMfnqY1eGHWagoIu5greWyWB6u9NUZGAy5zY=)
2: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=)
3: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=)
4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: PF2pFQ8Y4MjWEElnBJwyA+RuYK7yYkD7ChXjYqS9lpw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:34:85:c7:f9:38:28:7b:1c:37:8b:19:e7:8d:3d:fe:83:ad:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Validity
Not Before: Oct 25 22:14:33 2026 GMT
Not After : Oct 27 00:22:33 2026 GMT
Subject: CN=870647E2F3F2A1EB22855468E2271C29477D0C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:ff:c9:a1:2c:dd:ba:44:3d:e5:26:4f:32:
25:75:e0:58:a2:68:09:42:cb:f6:f6:8d:ad:44:6c:
ed:9c:72:0b:1e:a5:f8:cb:d9:ca:2e:58:6f:1d:48:
04:72:9d:1e:f9:63:ea:41:31:1f:92:e7:2d:85:96:
3a:f0:26:19:4b:07:07:56:7c:a1:c4:d7:65:44:34:
4c:d8:87:bb:de:26:0f:83:09:26:2c:67:19:4b:9b:
ab:55:b7:4c:2d:40:a2:49:de:e9:46:9d:cd:c0:13:
0a:31:16:57:c4:72:5c:a7:72:31:ae:e5:7d:cd:7e:
0e:bd:af:7c:ee:ce:83:0c:55:c3:bb:47:5f:6c:32:
28:a4:d2:7b:76:36:2e:34:9d:9c:f4:11:9f:fe:ee:
42:29:6f:ce:53:85:e7:2f:5a:c9:f1:34:a3:85:7d:
3b:d4:5c:85:87:f4:d6:c2:69:92:94:9b:48:83:f3:
9d:38:e4:86:59:ab:4b:f3:0a:a7:63:3b:80:72:ed:
a9:82:da:f2:a0:c2:68:9f:21:6a:16:38:27:5d:7a:
58:24:b0:e5:22:7a:cd:1e:af:76:19:7b:41:6d:8d:
43:21:07:40:e2:e0:49:54:f9:82:58:d0:98:5d:f8:
75:f0:73:0c:08:eb:bb:0a:50:6d:9b:0d:1d:6f:84:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:47:E2:F3:F2:A1:EB:22:85:54:68:E2:27:1C:29:47:7D:0C:53
X509v3 Authority Key Identifier:
keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:36:a9:88:0a:3c:92:ed:6e:78:be:58:dd:b1:2d:35:16:ad:
9b:b5:69:b8:a8:6d:68:04:c7:96:01:6d:0a:2f:ee:79:4e:05:
46:f6:ae:d9:6d:ac:53:78:06:44:63:77:9d:89:5c:b8:e1:b9:
1a:9e:56:e5:7b:a0:0f:fd:37:51:3f:27:27:2d:05:d9:ec:79:
dd:e5:48:f7:24:9d:a5:80:af:f3:5b:66:e7:3d:2f:32:32:c8:
3d:4b:fa:6c:79:a0:d2:9c:7a:2e:72:75:48:5c:24:66:54:0d:
10:65:32:e9:45:7e:a9:3d:fa:e2:f4:24:72:3f:b6:20:80:8f:
c9:13:b3:1c:41:63:9d:db:b6:5f:c8:f3:ab:e9:e1:1b:6a:e3:
ea:f4:62:58:4a:8a:b1:75:bf:8c:b0:63:8b:8c:56:f5:06:c9:
2d:de:d9:cd:87:6b:de:53:84:43:55:dc:35:2b:72:de:be:9c:
5a:75:a1:51:b4:61:12:15:73:8f:e7:d8:9f:88:eb:26:13:d5:
95:6b:40:76:c8:dc:14:bf:30:af:f7:cc:c1:7c:cb:9e:84:75:
d1:46:d4:14:02:ab:d5:f8:bb:d2:2b:d1:61:76:29:45:4d:e7:
de:a7:0f:4b:5e:11:9b:e1:89:bf:73:ac:70:d7:c9:ea:87:8b:
ae:21:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:47:54 2026 by rpki-client