
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft
File: 79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft (raw, json)
Hash identifier: 6Vq5hd+KDoHHwAlNl2aH1b1efXNCyAGtElxjLA6lU/Q=
Subject key identifier: 5A:D2:15:CD:32:74:3B:13:59:75:4C:67:0D:58:2A:F5:54:46:8D:6F
Authority key identifier: 79:F6:4E:F6:93:DF:28:7E:09:CF:3B:0D:0B:EB:9A:C5:56:9E:EF:6B
Certificate issuer: /CN=79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B
Certificate serial: 556AF2FF9EF5A009D5F076F1DA84C4134C24471E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 16:56:41 +0000
Manifest this update: Thu 24 Sep 2026 16:51:41 +0000
Manifest next update: Fri 25 Sep 2026 18:48:41 +0000
Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: +0WtimSXOYMypDf1NyNg6NAJXxqgYUGePcStSwikeZc=)
2: 79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.crl (hash: 8KCFdQV1G8qsqhH4mmI9BQ+dSMfhp81w9nQIagYm3vY=)
3: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: x9re9NTvxfqwmE8ATRsV5ipEhdBfpbWNByBufVDhe6c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.crl
rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6a:f2:ff:9e:f5:a0:09:d5:f0:76:f1:da:84:c4:13:4c:24:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B
Validity
Not Before: Sep 24 16:51:41 2026 GMT
Not After : Sep 25 18:48:41 2026 GMT
Subject: CN=5AD215CD32743B1359754C670D582AF554468D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:6b:61:59:23:88:e0:34:05:9e:d4:5c:3b:
1e:81:70:9e:3c:2a:d7:24:a2:d8:87:f3:f6:9e:68:
85:e7:1b:87:c9:ea:93:36:12:12:2e:7c:db:88:1b:
15:cf:41:8f:6e:bd:9f:e2:dc:f4:57:56:79:a3:b1:
23:ae:db:ae:3f:6f:01:ca:5e:ad:01:93:f2:20:af:
bf:94:15:e2:43:47:47:9a:46:aa:ca:7b:e8:6c:2d:
8b:08:fa:b7:8a:3c:0a:6b:00:84:f4:f9:ba:a9:d1:
3e:26:ca:10:74:b7:ba:2e:3b:f5:b6:06:c2:98:11:
46:75:0d:09:7f:11:30:df:0a:3d:55:68:75:28:d3:
d8:ec:3f:e7:15:1e:65:93:04:04:74:96:af:2c:dc:
1e:51:f2:13:f3:65:39:b5:65:94:57:ca:bf:6b:f5:
c4:90:65:0d:84:60:d4:1e:5b:15:ff:44:f3:e2:b2:
91:f8:5e:da:1c:32:83:0c:4c:bc:0e:ad:11:40:b6:
fb:d9:f7:eb:40:0d:20:32:7e:b3:01:59:45:86:53:
a1:87:6a:52:3f:e7:47:04:d7:67:a0:0f:db:63:b3:
8f:86:18:4e:86:66:3f:8b:7b:fd:b2:1d:1b:07:27:
81:b6:ce:27:ed:c8:51:58:8c:54:22:96:82:e0:62:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:15:CD:32:74:3B:13:59:75:4C:67:0D:58:2A:F5:54:46:8D:6F
X509v3 Authority Key Identifier:
keyid:79:F6:4E:F6:93:DF:28:7E:09:CF:3B:0D:0B:EB:9A:C5:56:9E:EF:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e3:6d:83:bf:5e:9e:b5:f9:71:49:c3:0d:52:fc:0b:bc:97:
8a:65:2e:65:1b:b5:0b:e2:09:bd:a0:8a:ff:ba:af:b4:d9:d0:
94:71:f5:20:d2:74:30:9c:b8:1e:eb:11:13:d7:14:40:1d:4a:
8a:63:d8:71:3d:b9:c0:a2:e5:be:66:62:9c:aa:e7:64:ad:45:
a7:39:cf:2a:2f:5c:66:c0:93:fa:9a:1c:b2:22:fb:e3:c8:f1:
99:ee:24:0f:dc:dd:23:d3:b1:93:fb:f3:66:95:fa:63:00:21:
9c:2a:ef:a7:2b:95:47:4e:f2:62:7f:47:9b:d8:99:21:8f:42:
65:54:7f:5e:5c:96:81:03:8d:2d:35:5d:9f:ad:e1:16:9e:f4:
d6:89:98:61:de:ef:33:91:1a:54:03:78:a2:29:55:8a:b3:34:
fa:cb:de:17:ea:4d:8c:9a:c0:ce:8e:12:fc:ac:5c:72:d9:0b:
6f:c0:14:0d:d9:b6:86:64:6c:99:c2:c6:86:a1:92:eb:89:7a:
26:f8:2c:51:c1:f8:5b:c3:b0:e1:0b:d0:f3:f0:c6:18:51:90:
a1:bd:0d:dc:dd:2f:81:81:a1:89:0f:18:2f:fa:09:17:40:91:
f8:a5:cb:59:07:d5:ad:33:91:16:3e:c7:ba:44:a8:fb:59:c7:
23:6a:06:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVWry/571oAnV8Hbx2oTEE0wkRx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGNjRFRjY5M0RGMjg3RTA5Q0YzQjBEMEJFQjlBQzU1
NjlFRUY2QjAeFw0yNjA5MjQxNjUxNDFaFw0yNjA5MjUxODQ4NDFaMDMxMTAvBgNV
BAMTKDVBRDIxNUNEMzI3NDNCMTM1OTc1NEM2NzBENTgyQUY1NTQ0NjhENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1c2thWSOI4DQFntRcOx6BcJ48
KtckotiH8/aeaIXnG4fJ6pM2EhIufNuIGxXPQY9uvZ/i3PRXVnmjsSOu264/bwHK
Xq0Bk/Igr7+UFeJDR0eaRqrKe+hsLYsI+reKPAprAIT0+bqp0T4myhB0t7ouO/W2
BsKYEUZ1DQl/ETDfCj1VaHUo09jsP+cVHmWTBAR0lq8s3B5R8hPzZTm1ZZRXyr9r
9cSQZQ2EYNQeWxX/RPPispH4XtocMoMMTLwOrRFAtvvZ9+tADSAyfrMBWUWGU6GH
alI/50cE12egD9tjs4+GGE6GZj+Le/2yHRsHJ4G2ziftyFFYjFQiloLgYunhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWtIVzTJ0OxNZdUxnDVgq9VRGjW8wHwYDVR0j
BBgwFoAUefZO9pPfKH4JzzsNC+uaxVae72swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzQ4NmIwZGItMzA1MC00NzUwLThmNjYtNTcyNmE3OTJhZGFiLzAvNzlGNjRFRjY5
M0RGMjg3RTA5Q0YzQjBEMEJFQjlBQzU1NjlFRUY2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OUY2NEVGNjkzREYyODdFMDlDRjNCMEQwQkVCOUFDNTU2OUVF
RjZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm
NjYtNTcyNmE3OTJhZGFiLzAvNzlGNjRFRjY5M0RGMjg3RTA5Q0YzQjBEMEJFQjlB
QzU1NjlFRUY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE3jbYO/Xp61+XFJww1S/Au8l4plLmUbtQvi
Cb2giv+6r7TZ0JRx9SDSdDCcuB7rERPXFEAdSopj2HE9ucCi5b5mYpyq52StRac5
zyovXGbAk/qaHLIi++PI8ZnuJA/c3SPTsZP782aV+mMAIZwq76crlUdO8mJ/R5vY
mSGPQmVUf15cloEDjS01XZ+t4Rae9NaJmGHe7zORGlQDeKIpVYqzNPrL3hfqTYya
wM6OEvysXHLZC2/AFA3ZtoZkbJnCxoahkuuJeib4LFHB+FvDsOEL0PPwxhhRkKG9
DdzdL4GBoYkPGC/6CRdAkfily1kH1a0zkRY+x7pEqPtZxyNqBh0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:38:25 2026 by rpki-client