
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
File: 7445E0A188A89312C5454C032583053AC7510B2E.mft (raw, json)
Hash identifier: UAgwe0/qIhaso6GF2BfnjUpI6fdBCTxLgS6lgISmVOo=
Subject key identifier: B2:98:EA:8A:00:58:ED:7E:0D:1E:92:8E:AD:88:22:10:91:3F:EC:09
Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
Certificate issuer: /CN=7445E0A188A89312C5454C032583053AC7510B2E
Certificate serial: 6995258012AFDF2C67D7BDABB38EA7B32ADDB822
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 09:12:07 +0000
Manifest this update: Thu 24 Sep 2026 09:07:07 +0000
Manifest next update: Fri 25 Sep 2026 13:05:07 +0000
Files and hashes: 1: 7445E0A188A89312C5454C032583053AC7510B2E.crl (hash: xUNvxp+eFF+Yttz0IhAMEWNeGJbPs1BC8wgj4lgTEo8=)
2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:95:25:80:12:af:df:2c:67:d7:bd:ab:b3:8e:a7:b3:2a:dd:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E
Validity
Not Before: Sep 24 09:07:07 2026 GMT
Not After : Sep 25 13:05:07 2026 GMT
Subject: CN=B298EA8A0058ED7E0D1E928EAD882210913FEC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:34:94:bc:14:e6:d8:12:6a:cc:14:f6:68:
8e:a5:cd:ca:04:1c:54:7f:58:e7:14:86:eb:78:d1:
d7:e1:6d:8e:3a:48:86:17:e3:8e:88:27:38:cb:0b:
67:25:93:81:0f:d9:6f:a5:0c:2a:8b:5a:8a:dd:c5:
04:c8:7f:f8:a2:40:3c:d5:36:36:3c:31:a9:03:03:
ae:d4:53:6e:19:38:e0:4f:39:d5:0c:8c:99:38:04:
d1:26:c7:52:a6:75:12:70:77:0c:63:40:61:23:ec:
96:9b:0e:2c:08:5a:4a:16:ad:90:77:f4:03:37:16:
b2:c5:49:e0:b8:72:74:bc:d9:82:1d:69:b1:83:23:
b7:1d:50:aa:88:d2:47:6e:81:fa:3c:df:b2:d3:03:
d7:71:37:42:7f:33:3c:d7:31:ee:96:c3:ca:c1:e6:
7d:75:ab:5c:30:41:37:4f:6a:d1:7a:c9:7a:af:91:
5e:2e:47:0c:b9:de:77:69:59:ba:47:c4:54:8b:40:
fb:e4:b6:c0:f9:f0:6c:0b:01:a9:15:34:ba:f5:c9:
2d:41:ce:e1:0c:a1:51:49:bb:a5:11:63:20:f5:eb:
4c:0c:70:3d:4a:6e:1d:d8:96:2f:a5:a5:1f:fe:08:
03:1a:e9:86:b3:7e:92:1c:19:c6:df:26:51:79:0f:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:EA:8A:00:58:ED:7E:0D:1E:92:8E:AD:88:22:10:91:3F:EC:09
X509v3 Authority Key Identifier:
keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:24:25:30:25:09:54:bb:38:c4:18:06:5b:eb:6a:a6:78:
97:91:12:ad:f9:ec:5e:c7:ac:04:b5:a5:ce:ec:aa:a8:b3:13:
d1:e9:fe:cb:04:4e:ca:c6:d6:b5:0b:81:42:4a:d8:e7:61:a6:
4b:61:87:42:6b:cc:cd:12:75:eb:3f:5f:f6:c6:23:e4:59:1f:
20:f7:46:29:c5:e2:91:56:b0:0d:5a:d1:56:f1:e8:69:ce:9a:
02:6c:78:0e:80:d2:fb:99:ac:d4:cb:31:dd:81:c9:3f:0a:a9:
6c:ea:aa:50:c1:d9:66:25:88:10:8a:8f:02:e1:8b:f6:23:5a:
e0:8e:4a:d0:76:f7:d8:b6:fe:b7:34:19:20:4c:c0:b1:47:25:
66:f2:35:df:5a:b4:06:c0:c1:fc:87:f2:95:a1:bc:16:03:b0:
38:82:ee:2b:a8:6f:7b:70:11:da:dd:1c:45:c3:ff:be:7a:e6:
80:bc:46:18:31:a6:8f:67:f1:87:8d:bc:32:96:a0:c0:f8:a9:
5e:15:52:e1:01:ab:dd:fd:65:0c:8f:47:05:1a:d6:b6:1b:48:
37:13:02:16:88:24:30:de:e4:66:0a:b5:73:8a:65:97:22:9f:
51:f2:75:1b:33:47:68:e2:58:26:18:a1:06:e3:7e:85:c7:9c:
53:00:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:23:43 2026 by rpki-client