
$ rpki-client -vvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
File: 883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json)
Hash identifier: C+YezvYZKt67rCvt5lSBzDH3+4Au22pGsbKXHEfzzcY=
Subject key identifier: 05:DB:16:39:2A:05:7F:1D:6A:7D:CD:9F:3C:22:7A:C8:6B:50:7C:C9
Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Certificate serial: 2FC5B1A3842F26C4B171BD124F5988F5EA7BD3DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:45:16 +0000
Manifest this update: Fri 24 Jul 2026 04:40:16 +0000
Manifest next update: Sat 25 Jul 2026 06:23:16 +0000
Files and hashes: 1: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=)
2: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: oMB30n6qy0SzBsjiHOpRS66qfq0wAR/D+1Q+tcBQMKQ=)
3: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=)
4: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c5:b1:a3:84:2f:26:c4:b1:71:bd:12:4f:59:88:f5:ea:7b:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7
Validity
Not Before: Jul 24 04:40:16 2026 GMT
Not After : Jul 25 06:23:16 2026 GMT
Subject: CN=05DB16392A057F1D6A7DCD9F3C227AC86B507CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:98:97:61:df:c8:8c:f9:49:73:1a:1f:93:
0b:a2:1f:b3:69:dd:2d:18:55:b2:48:2f:31:11:fb:
52:a7:3b:a6:d7:b8:79:06:d1:80:2c:c5:00:f1:ae:
90:37:b8:66:f4:bb:4a:9b:8b:9c:59:c6:59:a8:45:
2f:13:e3:c8:c0:a9:24:12:a9:da:53:7b:05:7b:95:
a5:d1:0d:0f:6b:7a:c1:01:cd:ea:92:10:4d:34:7b:
a8:89:53:7a:58:bf:a6:e4:f8:b9:76:36:2e:10:ec:
06:e8:85:38:3b:9b:e8:4f:59:04:5c:ef:df:c9:71:
5e:7d:0f:2c:90:fe:f0:30:e7:77:38:55:7b:07:ca:
b6:e4:c7:ed:62:87:c0:e4:53:d2:86:66:56:21:05:
a6:03:9e:e6:bd:09:73:79:0c:7a:01:b0:95:8d:e7:
c4:4d:d7:2b:2f:b2:b1:59:33:37:34:0a:b1:30:05:
59:bc:34:ea:18:7c:8d:e1:d2:b7:20:8f:c9:ad:1d:
84:64:38:a3:89:8b:9f:d6:fb:4d:50:c8:8c:dc:49:
b1:4b:90:6f:b9:28:ef:f5:d9:06:b0:bc:20:34:02:
52:7f:16:d3:87:8f:2b:f1:dd:29:f6:fa:60:52:f3:
97:98:ce:87:b7:b7:08:93:35:ad:b1:3c:31:7f:71:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:16:39:2A:05:7F:1D:6A:7D:CD:9F:3C:22:7A:C8:6B:50:7C:C9
X509v3 Authority Key Identifier:
keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a3:93:70:dc:25:44:65:68:0b:d6:e3:4a:37:e2:53:21:cd:
ca:62:4c:a9:b5:b1:9e:6d:e9:7e:d6:5f:3c:e3:8c:e0:f9:85:
a9:50:39:d8:be:00:6f:69:fd:95:41:22:27:c1:cf:de:24:02:
f9:e0:4f:bc:b2:d6:27:b7:5b:81:1c:13:82:fd:7c:98:35:cb:
82:04:ef:30:09:fc:46:c9:5a:45:24:35:75:6b:95:6e:5b:19:
13:23:e6:af:84:f1:f9:f3:84:43:ec:36:c7:47:8b:77:3b:7c:
1a:5f:dc:22:f7:bb:e1:15:48:88:c9:fc:f6:f0:66:b4:b4:bd:
3d:8c:21:aa:46:51:86:3a:3e:cc:7c:0a:68:8f:74:29:15:98:
1e:17:85:4a:93:3b:89:e8:2f:ba:b9:bf:52:a2:c9:72:d8:ca:
36:bc:98:52:08:34:fb:e6:a7:cf:05:ef:33:07:10:b2:c9:98:
7c:1a:a2:81:aa:d2:d3:17:8d:f4:d6:17:99:e4:51:52:45:c0:
9f:c0:b1:88:82:54:cb:2a:bb:1f:2e:6b:bc:c0:13:06:ac:da:
f6:13:55:ff:b9:4b:30:cf:3c:b1:65:10:41:f6:db:e1:af:89:
44:22:20:da:d7:79:86:60:1e:65:b2:fb:64:27:fa:4e:ec:1b:
c9:a8:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:34 2026 by rpki-client