
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
File: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft (raw, json)
Hash identifier: hscsqacmZLyg1mfrjSC8P49H9+TAqrt4FNzE+ATRSxM=
Subject key identifier: 80:F4:30:DA:F8:35:61:4D:9D:BB:13:5F:85:72:35:45:27:E1:80:46
Authority key identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
Certificate issuer: /CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Certificate serial: 790151EAF89A305A89FE871BFEA1F7AEFBE02028
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 19:14:48 +0000
Manifest this update: Wed 23 Sep 2026 19:09:48 +0000
Manifest next update: Thu 24 Sep 2026 19:24:48 +0000
Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: FY38IH9sB6rTVzYUxtZnvzqXTN96oHyScnEbXRWQmXQ=)
2: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl (hash: CemAnZeqGN9442BHwNWzRvM1Zl+QDbIJgsXaKJIy17c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:01:51:ea:f8:9a:30:5a:89:fe:87:1b:fe:a1:f7:ae:fb:e0:20:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Validity
Not Before: Sep 23 19:09:48 2026 GMT
Not After : Sep 24 19:24:48 2026 GMT
Subject: CN=80F430DAF835614D9DBB135F8572354527E18046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:a8:9e:b1:01:84:b8:ed:99:9a:00:bf:86:
a9:5d:99:d5:50:9d:f0:d3:e4:07:8f:ac:cd:9a:1e:
70:4f:b0:66:c2:d1:35:99:6e:05:96:3c:da:c4:77:
5c:64:ec:fa:4b:57:a0:4f:5b:42:f7:2a:25:11:55:
3e:8a:f2:1a:c1:c6:e9:1f:79:27:72:20:5a:5e:5c:
6c:ad:61:0d:75:06:7e:ed:36:72:fd:9d:0b:77:88:
73:26:c4:47:77:55:13:08:0c:1b:4a:4e:e5:30:c1:
d5:24:78:0b:27:f0:72:62:a0:75:3c:92:f1:ba:3c:
42:11:b1:66:a4:e5:bf:3b:68:d8:32:5d:24:69:f9:
a8:e7:60:45:e2:14:fd:85:f2:36:f1:53:d0:c8:cb:
58:64:ba:cc:b1:14:dc:10:48:07:eb:97:ca:2f:65:
08:a4:d9:30:54:78:0c:8d:15:a7:2a:1d:f7:04:e7:
73:df:b7:8a:b7:5d:d7:4f:a9:1b:43:b9:7b:55:12:
78:f5:e2:b8:1a:bd:71:1e:0e:00:b9:7b:60:83:43:
db:21:b1:86:fe:36:cb:15:35:51:16:63:a3:02:eb:
ab:23:c0:13:4e:ef:53:44:3f:38:a2:22:79:13:dd:
a9:40:75:14:ab:6e:73:93:47:6a:35:13:7b:74:2c:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:30:DA:F8:35:61:4D:9D:BB:13:5F:85:72:35:45:27:E1:80:46
X509v3 Authority Key Identifier:
keyid:7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:93:36:a7:40:58:e5:cd:b0:26:8c:bb:7c:c3:c4:1e:b1:
af:31:b1:68:95:2b:c4:d9:6b:92:e4:2e:a9:ad:9a:4a:fd:62:
35:56:5c:c5:10:a5:c0:e6:f2:4b:64:fd:cb:cf:3c:76:9e:28:
e2:b2:60:9c:fa:c9:d5:d2:9d:c0:5d:dd:3f:27:98:0f:ea:b7:
30:88:d1:7c:5a:20:fa:b1:69:64:80:bc:51:ca:c1:50:d0:43:
71:cb:c4:2e:4c:22:83:13:26:3d:c1:29:37:8e:7b:35:8d:60:
23:48:3f:74:df:a7:df:d9:19:0b:0e:dc:47:37:ef:4d:79:1d:
41:a3:36:af:75:77:a7:84:38:5f:dc:cf:88:9f:1e:14:5d:dc:
32:dd:58:59:c0:c1:23:d3:6d:bf:a5:19:d9:aa:24:d0:1e:b3:
6b:22:82:03:c8:62:eb:28:86:3b:ad:f6:bf:1d:fb:72:f1:c8:
08:aa:d0:53:ab:3b:69:97:c3:7c:6f:1d:c7:db:7e:91:87:c8:
be:7f:bd:d3:6b:2e:b3:23:c5:76:48:84:1c:03:67:a9:d6:00:
c7:00:fa:fb:ed:6f:31:0d:75:8b:23:0b:3b:03:60:38:90:80:
83:e8:77:c9:03:76:94:c7:18:5d:9e:e1:32:50:1e:83:05:66:
5e:90:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:01:17 2026 by rpki-client