
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft
File: F07AB473CFB05364817F5AD683736BA53243996C.mft (raw, json)
Hash identifier: Hf+Wx3nicb5iE8JlDBKugcT2z8D4da64mCj++VuSw3k=
Subject key identifier: 91:31:A2:42:8B:A2:4A:26:43:58:A9:6C:47:65:CE:F2:ED:87:AF:EE
Authority key identifier: F0:7A:B4:73:CF:B0:53:64:81:7F:5A:D6:83:73:6B:A5:32:43:99:6C
Certificate issuer: /CN=F07AB473CFB05364817F5AD683736BA53243996C
Certificate serial: 6F5458A6F1DCA5A071C2E4875077441628DEA79C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07AB473CFB05364817F5AD683736BA53243996C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 17:57:57 +0000
Manifest this update: Thu 24 Sep 2026 17:52:57 +0000
Manifest next update: Fri 25 Sep 2026 19:00:57 +0000
Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: GhkbUwasiQVsFz0nTmumyWRDqh3oGhTZVVeuRLCCHc0=)
2: F07AB473CFB05364817F5AD683736BA53243996C.crl (hash: tRhDWWBT5tD4R6lUiWSVGfRq/Qap9l/A3hDSEhhuYA4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.crl
rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07AB473CFB05364817F5AD683736BA53243996C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:54:58:a6:f1:dc:a5:a0:71:c2:e4:87:50:77:44:16:28:de:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07AB473CFB05364817F5AD683736BA53243996C
Validity
Not Before: Sep 24 17:52:57 2026 GMT
Not After : Sep 25 19:00:57 2026 GMT
Subject: CN=9131A2428BA24A264358A96C4765CEF2ED87AFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:a8:17:5b:80:b6:72:b9:69:aa:5a:41:56:
c1:06:8b:17:e9:c5:62:d2:b8:0a:44:4f:3d:9c:a8:
1b:ed:39:20:1a:85:87:4a:d0:12:1c:5c:b4:fd:c7:
e7:b6:b8:5a:85:ae:78:1a:2b:ad:d0:1a:5d:4e:2f:
0f:a1:e2:ad:a6:4e:08:04:5f:ed:5f:4b:13:e7:ff:
5f:47:c9:5a:48:45:b7:a3:d4:eb:98:20:4d:c7:40:
1e:58:ee:e6:ad:c6:e8:d7:3e:b8:3e:5a:3c:69:3d:
26:8f:fb:0f:b2:a5:c1:ce:0c:c6:94:fe:1c:a5:9c:
64:96:7f:c5:48:e2:94:1c:71:19:3c:5c:9e:e9:26:
32:91:08:0c:f1:ee:4a:63:60:67:26:03:bb:83:22:
b1:df:f6:77:d1:3e:2f:e6:70:1e:5b:44:39:dd:dc:
81:1c:c8:bb:6f:30:bf:db:73:8e:77:84:d1:8c:46:
c9:13:2b:36:c3:54:4e:64:45:40:c2:dc:a7:e8:09:
02:c6:8a:0e:f3:f5:69:c2:15:cf:0a:5d:6b:eb:9d:
4a:ce:23:1c:dc:e7:59:2b:ac:a4:d9:1b:d9:ae:ba:
c6:04:fe:8d:48:fa:c5:b1:d8:23:85:6b:31:b6:2b:
48:59:ab:5e:17:2c:3c:17:46:e8:66:9a:3c:56:5e:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:A2:42:8B:A2:4A:26:43:58:A9:6C:47:65:CE:F2:ED:87:AF:EE
X509v3 Authority Key Identifier:
keyid:F0:7A:B4:73:CF:B0:53:64:81:7F:5A:D6:83:73:6B:A5:32:43:99:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07AB473CFB05364817F5AD683736BA53243996C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:b1:93:c2:c2:c7:28:62:80:ff:e5:0b:c7:b9:46:48:77:
b9:18:9a:71:99:16:c3:9a:f0:aa:f5:c0:5c:a0:cb:3c:7a:3f:
ef:94:40:3e:a7:64:2a:01:fb:a0:4b:83:e1:ce:4a:73:37:b9:
51:a3:0a:af:69:c0:18:7b:6c:ed:3d:19:43:f6:10:d8:39:82:
38:30:7e:34:43:1a:2e:54:1e:61:63:d9:bd:dd:cc:c6:ad:83:
99:46:fb:1a:32:ea:3d:a1:5f:69:2b:74:c0:f2:9a:28:11:0a:
5b:92:5b:20:98:a3:1b:7c:ec:5b:5a:27:6e:6d:5e:25:bf:7c:
e7:13:95:b1:b8:08:b3:96:3a:d8:5a:c2:e2:4f:1c:af:86:42:
48:ad:bf:00:ee:57:77:0d:35:bb:d4:bc:be:a4:2d:88:40:b9:
e0:98:c0:55:5a:3e:af:ef:8e:aa:4f:99:2e:3b:98:57:f1:24:
ee:98:07:4e:ab:48:b8:b3:a1:e2:f0:aa:37:a4:77:22:33:6e:
5c:79:14:84:5a:f7:56:81:e9:52:d6:21:11:5f:69:13:86:48:
16:84:6f:2f:e1:ab:71:c7:a7:ee:f2:b8:56:ad:7f:7b:53:37:
77:46:4a:69:69:dd:ef:6a:be:98:df:33:20:51:ea:30:73:38:
c6:0c:b0:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUb1RYpvHcpaBxwuSHUHdEFijep5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUI0NzNDRkIwNTM2NDgxN0Y1QUQ2ODM3MzZCQTUz
MjQzOTk2QzAeFw0yNjA5MjQxNzUyNTdaFw0yNjA5MjUxOTAwNTdaMDMxMTAvBgNV
BAMTKDkxMzFBMjQyOEJBMjRBMjY0MzU4QTk2QzQ3NjVDRUYyRUQ4N0FGRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+qgXW4C2crlpqlpBVsEGixfp
xWLSuApETz2cqBvtOSAahYdK0BIcXLT9x+e2uFqFrngaK63QGl1OLw+h4q2mTggE
X+1fSxPn/19HyVpIRbej1OuYIE3HQB5Y7uatxujXPrg+WjxpPSaP+w+ypcHODMaU
/hylnGSWf8VI4pQccRk8XJ7pJjKRCAzx7kpjYGcmA7uDIrHf9nfRPi/mcB5bRDnd
3IEcyLtvML/bc453hNGMRskTKzbDVE5kRUDC3KfoCQLGig7z9WnCFc8KXWvrnUrO
Ixzc51krrKTZG9muusYE/o1I+sWx2COFazG2K0hZq14XLDwXRuhmmjxWXmXlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkTGiQouiSiZDWKlsR2XO8u2Hr+4wHwYDVR0j
BBgwFoAU8Hq0c8+wU2SBf1rWg3NrpTJDmWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzYwZTZhMmQtODRkYy00OGRmLTliNzctNzIwODUzZjQ3YzZkLzAvRjA3QUI0NzND
RkIwNTM2NDgxN0Y1QUQ2ODM3MzZCQTUzMjQzOTk2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMDdBQjQ3M0NGQjA1MzY0ODE3RjVBRDY4MzczNkJBNTMyNDM5
OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli
NzctNzIwODUzZjQ3YzZkLzAvRjA3QUI0NzNDRkIwNTM2NDgxN0Y1QUQ2ODM3MzZC
QTUzMjQzOTk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAwcsZPCwscoYoD/5QvHuUZId7kYmnGZFsOa
8Kr1wFygyzx6P++UQD6nZCoB+6BLg+HOSnM3uVGjCq9pwBh7bO09GUP2ENg5gjgw
fjRDGi5UHmFj2b3dzMatg5lG+xoy6j2hX2krdMDymigRCluSWyCYoxt87FtaJ25t
XiW/fOcTlbG4CLOWOthawuJPHK+GQkitvwDuV3cNNbvUvL6kLYhAueCYwFVaPq/v
jqpPmS47mFfxJO6YB06rSLizoeLwqjekdyIzblx5FIRa91aB6VLWIRFfaROGSBaE
by/hq3HHp+7yuFatf3tTN3dGSmlp3e9qvpjfMyBR6jBzOMYMsAA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:57:33 2026 by rpki-client