
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft (raw, json)
Hash identifier: pkGBExttMH/s2H//wLQM4JDNznf3XB9PP2ae/wcIkzY=
Subject key identifier: A4:C7:B4:38:10:3D:3F:35:16:FE:B4:FF:8B:4B:35:0A:4D:79:D1:F0
Authority key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96
Certificate issuer: /CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
Certificate serial: 63B3D7E4E3395B5A79A25D092B3BFC52ADF08BA5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
Manifest number: BA
Signing time: Fri 18 Sep 2026 01:45:31 +0000
Manifest this update: Fri 18 Sep 2026 01:40:31 +0000
Manifest next update: Sat 19 Sep 2026 05:12:31 +0000
Files and hashes: 1: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl (hash: mJnbhgsExqkap/HOOJTzybMyE64gdAArXDWzx0z+uXw=)
2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: OI2+L8kOyx+uXkdHVQ3bQvjHZ5kkvK0ATomJcIp9VW0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl
rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 05:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b3:d7:e4:e3:39:5b:5a:79:a2:5d:09:2b:3b:fc:52:ad:f0:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296
Validity
Not Before: Sep 18 01:40:31 2026 GMT
Not After : Sep 19 05:12:31 2026 GMT
Subject: CN=A4C7B438103D3F3516FEB4FF8B4B350A4D79D1F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:9f:e9:8f:bf:ac:ec:e1:5d:8b:4f:cb:8e:
49:fa:00:4e:00:c0:25:eb:89:cc:8b:af:49:9c:a7:
b0:f3:f6:a5:24:21:4c:b1:16:06:4f:12:60:d4:fb:
c1:4f:67:84:43:e9:38:57:f7:9a:37:a1:c1:24:e9:
a2:81:9b:0d:9d:6d:70:6d:15:c8:13:2d:62:19:9b:
fd:53:c0:55:57:39:b1:40:58:e5:d9:36:1c:30:03:
55:8f:c9:7c:c3:e3:13:14:70:cc:9b:0b:70:df:04:
3e:cb:90:dc:11:d5:37:bf:f9:1a:d7:5a:a7:51:ce:
84:55:2b:c2:9a:c0:9d:60:62:96:b5:79:cd:51:e0:
b1:19:77:26:ca:1f:d4:e3:dd:ed:9c:6c:ae:03:94:
85:cb:76:65:6f:5c:c3:68:77:ce:bf:dd:34:0e:54:
92:28:ad:d7:c8:63:c4:e3:39:13:d3:8e:e1:47:9d:
e1:d3:ad:e6:9a:6a:32:52:03:f7:fc:0e:35:5f:6a:
41:b7:57:a7:1a:02:69:fa:56:dc:d7:1c:8d:07:95:
17:a3:4c:56:03:0a:d6:c0:07:58:e6:c5:f6:db:a4:
35:5f:92:ef:03:bd:4d:bf:69:fe:1e:16:de:9d:db:
1a:24:39:1a:b7:d4:76:fc:b9:36:af:50:82:78:6f:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:B4:38:10:3D:3F:35:16:FE:B4:FF:8B:4B:35:0A:4D:79:D1:F0
X509v3 Authority Key Identifier:
keyid:7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:94:9c:2b:0a:d5:f3:39:0a:af:6e:ec:c0:7f:45:a7:6c:
2d:e4:d8:c0:ac:6b:76:e3:de:50:1e:49:95:eb:e2:42:a7:8a:
8c:d2:43:ef:a7:b1:38:71:10:6a:2a:84:a4:d2:34:48:fd:6c:
d2:07:a8:2c:0b:6f:e7:7a:f2:29:3b:ab:97:19:8f:64:5e:4e:
d0:8e:c8:2d:71:6d:61:8a:2d:27:ff:36:52:ab:6d:4d:28:b4:
94:18:40:6d:5f:6f:d8:1e:ce:59:6d:8a:9c:99:9b:51:8d:99:
a3:d4:fd:22:31:d8:ee:15:30:44:51:83:6a:47:ff:33:55:62:
dd:41:b5:50:fd:a6:84:9c:f8:29:33:bd:a7:d9:bb:5d:a6:f1:
99:19:ad:b1:14:1e:11:7b:d4:d5:e4:04:64:8d:f2:d1:7c:f7:
33:88:58:17:cf:aa:6e:84:fe:af:55:b5:4b:57:f6:4b:a9:83:
ef:7e:74:e8:28:96:1d:e7:d0:bb:48:36:33:37:52:6e:54:3f:
58:4d:af:6e:5c:cc:3b:15:33:37:1f:b1:9e:ec:d1:89:89:a9:
ad:e4:12:0b:26:30:00:bc:ac:81:0b:fd:51:50:21:c9:e8:3c:
4b:40:9b:a2:46:b9:e8:75:6a:f7:0b:cf:64:72:ba:c5:17:10:
b6:f8:6d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:04:32 2026 by rpki-client