
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json)
Hash identifier: jFWCg2UuYUemUeDOgK/bQjXRMbALarKu82FBUZXh0Pc=
Subject key identifier: D6:C3:09:58:3A:42:78:65:48:76:CE:E6:A4:1A:31:7A:31:2A:E1:2B
Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E
Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E
Certificate serial: 183C4A5E1B20E558E9CBAF887A0F5C6A62F3017F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:51:25 +0000
Manifest this update: Tue 12 May 2026 22:46:25 +0000
Manifest next update: Wed 13 May 2026 23:47:25 +0000
Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=)
2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=)
3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: oAfuZvJxAQd9McXNHJRM/WgUqfst3zrjPkHIcA4kQQw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl
rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3c:4a:5e:1b:20:e5:58:e9:cb:af:88:7a:0f:5c:6a:62:f3:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E
Validity
Not Before: May 12 22:46:25 2026 GMT
Not After : May 13 23:47:25 2026 GMT
Subject: CN=D6C309583A4278654876CEE6A41A317A312AE12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:47:c4:a8:16:d1:88:77:f7:19:50:b1:a0:
6a:f0:71:90:06:37:a7:4a:19:f5:7d:a9:cc:2a:65:
f0:95:69:92:3a:54:65:d0:63:8b:3e:95:18:28:12:
63:0d:78:37:a4:57:fd:dc:58:6f:04:31:b3:71:fd:
ff:a0:cf:25:4a:35:3e:df:1e:bc:fa:5d:94:59:33:
6e:85:1d:a5:37:d0:78:71:fa:63:69:31:23:71:fd:
06:bd:b4:d5:a8:f2:53:4a:d6:71:14:48:10:25:01:
b3:0e:50:b3:bb:82:74:c2:a8:cc:52:68:0b:36:7f:
13:3c:96:fb:ec:2d:c0:e6:42:d0:5e:ac:11:73:1b:
47:08:15:e6:8e:9d:9c:4d:fb:b9:d8:e9:7e:48:1d:
56:e8:e8:dc:21:3d:73:8b:c7:91:17:c0:3e:94:7a:
c1:22:5f:d1:c7:95:56:3a:21:1f:bf:57:ba:02:37:
e2:8f:9f:73:11:0c:78:5c:d8:b9:62:57:9d:f1:87:
02:e9:c5:70:11:0e:4f:68:34:2f:84:21:13:65:d4:
67:92:f9:eb:1c:38:4e:51:99:19:01:6e:8c:1a:67:
85:50:3e:53:8d:a0:12:6b:8d:52:68:56:7f:7d:07:
16:a3:b2:f9:45:b2:83:6b:da:c8:52:e2:da:39:7c:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:09:58:3A:42:78:65:48:76:CE:E6:A4:1A:31:7A:31:2A:E1:2B
X509v3 Authority Key Identifier:
keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:b2:3c:77:c6:23:1c:15:a5:75:1d:de:06:18:33:c8:50:
ec:29:4e:b3:ab:d4:27:95:d0:7f:d3:fa:d3:b9:22:34:ff:6b:
a5:09:9e:ef:c4:54:71:92:53:f6:51:f2:82:27:76:42:e6:ff:
99:e5:dd:87:56:c2:e6:1e:d4:1a:5d:a8:82:03:58:82:dd:f0:
4e:d4:23:c3:8c:30:e5:a7:13:94:15:2f:df:65:1a:12:9c:03:
d3:41:41:d0:f9:2b:98:15:21:7d:8e:59:a0:30:78:07:40:93:
0a:2a:d1:b1:93:61:45:34:51:a8:80:40:10:c0:32:cc:b3:c1:
b8:91:ea:4c:90:22:47:c9:80:2f:1d:09:b5:b3:3b:c5:5b:a2:
5a:2a:4d:a9:6b:3d:2f:3a:b7:b9:0a:c8:53:51:69:81:b5:bf:
68:d5:d5:bd:e8:29:fa:34:46:23:6a:9c:ff:42:27:41:7e:e2:
f8:29:7e:dc:7f:5d:b9:80:5f:df:1d:16:73:6a:ec:05:18:14:
6c:68:9b:ba:f6:99:36:bb:6d:fd:48:4b:35:b5:cc:43:65:11:
0d:81:24:21:d8:f3:26:ee:18:69:8a:d2:ce:0d:6f:0c:45:42:
7f:ee:05:d1:6d:1b:96:3e:2e:86:25:9a:67:38:4e:92:a8:63:
ca:2e:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:24 2026 by rpki-client