
$ rpki-client -vvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
File: 8100B25D994714EDA24AA78389FB6369505FB6A1.mft (raw, json)
Hash identifier: R7TxUpl8g+JNyo3XS8IPbU2wFCvFSL3RROvDeL8IInE=
Subject key identifier: C4:35:F0:0B:DC:CC:71:EA:24:DB:58:FE:2C:F1:D6:26:CA:6E:44:1D
Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Certificate serial: 4500D9578080421E9A49B78FA11C56B128D8043B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 16:14:41 +0000
Manifest this update: Thu 23 Jul 2026 16:09:41 +0000
Manifest next update: Fri 24 Jul 2026 20:04:41 +0000
Files and hashes: 1: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=)
2: 8100B25D994714EDA24AA78389FB6369505FB6A1.crl (hash: 4yZ9FzjlSlrmtUGNBQzfAh6ZgcfmruoczHLK6/AF848=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:00:d9:57:80:80:42:1e:9a:49:b7:8f:a1:1c:56:b1:28:d8:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Validity
Not Before: Jul 23 16:09:41 2026 GMT
Not After : Jul 24 20:04:41 2026 GMT
Subject: CN=C435F00BDCCC71EA24DB58FE2CF1D626CA6E441D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:1f:22:50:80:9d:b7:46:a2:92:30:5c:d5:
5d:09:12:31:9e:f9:82:38:1b:1e:1e:b0:25:43:43:
98:61:44:00:13:84:58:7c:7d:5c:c6:0c:8c:54:0c:
95:ae:31:88:49:7b:39:eb:bc:4e:12:d5:c9:8c:6d:
ca:64:0b:f6:c7:51:2d:9f:18:88:c8:2b:16:c9:78:
89:95:4e:3b:4a:5f:97:83:6c:3d:e7:90:35:96:1b:
6f:ab:fe:19:7d:f5:fb:68:e5:cf:96:8a:3c:1e:40:
16:a8:96:0d:7d:88:be:ca:3a:aa:d0:98:96:51:2a:
11:d9:35:1d:a3:f4:68:46:78:76:e2:fa:9d:02:48:
59:af:9c:9a:12:df:54:33:ca:0f:f1:d5:90:03:12:
d6:fe:63:09:cb:d6:de:ad:f0:3a:05:24:5a:f1:69:
17:98:9d:01:9f:1a:12:6c:57:e6:1c:4c:69:17:2b:
7a:5b:89:aa:f3:59:ed:d0:ab:23:13:66:af:00:1c:
02:c1:31:27:e6:42:47:73:ec:79:28:5d:be:5b:d7:
80:12:af:58:7a:1f:35:4b:ce:f7:d7:e0:b7:78:35:
3a:95:19:2e:f5:bd:a9:b4:87:9a:5d:61:3e:b8:ec:
f5:92:bb:17:3e:7e:19:f8:71:7d:6a:18:e9:87:b0:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:F0:0B:DC:CC:71:EA:24:DB:58:FE:2C:F1:D6:26:CA:6E:44:1D
X509v3 Authority Key Identifier:
keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:07:4d:da:83:f9:ae:cf:54:9b:af:00:ff:a3:67:90:de:
7a:a2:70:45:84:fd:08:54:6b:57:dc:3f:92:0f:8b:57:e8:04:
a3:fe:c6:42:0c:b6:0b:86:58:c4:0f:55:c8:9f:7e:23:d4:e8:
94:ec:e3:12:ed:4f:f8:3c:97:13:38:5b:28:38:2c:41:df:63:
81:55:42:b8:61:7b:3c:81:a6:7d:ae:6a:64:7d:e0:76:5e:4f:
ff:a5:f8:d0:61:fa:59:b7:ae:4a:49:4a:c3:c8:53:af:9b:e3:
63:58:0e:a2:ce:3d:ef:a5:82:fa:a6:d5:46:41:78:f8:5a:5e:
b6:76:e4:25:2f:b6:1f:03:86:86:a9:48:e2:37:ee:49:80:55:
49:d5:b2:65:fe:fe:7a:72:d4:b6:4e:b2:ce:8d:01:51:3e:d5:
94:00:0a:ef:ab:2f:d5:0e:6f:29:1d:be:8b:85:83:de:95:9b:
f5:f7:3a:9b:61:89:e1:87:2f:ad:57:16:30:9f:cb:37:ca:b5:
81:aa:1c:6a:66:fa:23:c8:10:18:36:df:33:88:08:e0:24:b3:
77:95:e4:ab:c9:0d:98:fc:32:cb:dc:00:c5:68:ba:bb:72:9a:
c8:70:b6:8f:e6:41:e0:7d:b7:dd:d1:e6:4e:df:f9:61:72:a2:
2b:f1:44:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURQDZV4CAQh6aSbePoRxWsSjYBDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1
MDVGQjZBMTAeFw0yNjA3MjMxNjA5NDFaFw0yNjA3MjQyMDA0NDFaMDMxMTAvBgNV
BAMTKEM0MzVGMDBCRENDQzcxRUEyNERCNThGRTJDRjFENjI2Q0E2RTQ0MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtx8iUICdt0aikjBc1V0JEjGe
+YI4Gx4esCVDQ5hhRAAThFh8fVzGDIxUDJWuMYhJeznrvE4S1cmMbcpkC/bHUS2f
GIjIKxbJeImVTjtKX5eDbD3nkDWWG2+r/hl99fto5c+WijweQBaolg19iL7KOqrQ
mJZRKhHZNR2j9GhGeHbi+p0CSFmvnJoS31Qzyg/x1ZADEtb+YwnL1t6t8DoFJFrx
aReYnQGfGhJsV+YcTGkXK3pbiarzWe3QqyMTZq8AHALBMSfmQkdz7HkoXb5b14AS
r1h6HzVLzvfX4Ld4NTqVGS71vam0h5pdYT647PWSuxc+fhn4cX1qGOmHsFOLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxDXwC9zMceok21j+LPHWJspuRB0wHwYDVR0j
BBgwFoAUgQCyXZlHFO2iSqeDiftjaVBftqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzFiNDMzYTUtNzJiMS00NjUzLTk5ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5
OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1MDVGQjZBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84MTAwQjI1RDk5NDcxNEVEQTI0QUE3ODM4OUZCNjM2OTUwNUZC
NkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5
ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYz
Njk1MDVGQjZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+FB03ag/muz1SbrwD/o2eQ3nqicEWE/QhU
a1fcP5IPi1foBKP+xkIMtguGWMQPVciffiPU6JTs4xLtT/g8lxM4Wyg4LEHfY4FV
QrhhezyBpn2uamR94HZeT/+l+NBh+lm3rkpJSsPIU6+b42NYDqLOPe+lgvqm1UZB
ePhaXrZ25CUvth8DhoapSOI37kmAVUnVsmX+/npy1LZOss6NAVE+1ZQACu+rL9UO
bykdvouFg96Vm/X3OpthieGHL61XFjCfyzfKtYGqHGpm+iPIEBg23zOICOAks3eV
5KvJDZj8MsvcAMVourtymshwto/mQeB9t93R5k7f+WFyoivxRMo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:09 2026 by rpki-client