
$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json)
Hash identifier: wBO06R6+ulfT7O8VPXOtuZoN6DUz4zfbcMwuAMv+Pqs=
Subject key identifier: 67:FA:3D:5D:B4:BD:7B:CC:A5:B2:12:96:F8:65:2F:F2:D5:6F:E1:52
Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C
Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C
Certificate serial: 05559798527FEF82B25401E087FAAB43E0185424
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 12:15:07 +0000
Manifest this update: Thu 23 Jul 2026 12:10:07 +0000
Manifest next update: Fri 24 Jul 2026 14:41:07 +0000
Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=)
2: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: XxNvD8L/6eJcOfm2Yy5McM+e1MJUUwAzQLT5AsSJs7E=)
3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl
rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 14:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:55:97:98:52:7f:ef:82:b2:54:01:e0:87:fa:ab:43:e0:18:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C
Validity
Not Before: Jul 23 12:10:07 2026 GMT
Not After : Jul 24 14:41:07 2026 GMT
Subject: CN=67FA3D5DB4BD7BCCA5B21296F8652FF2D56FE152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:2f:0f:e8:16:b7:ba:26:5e:fd:bf:53:17:
aa:82:53:4c:6c:7c:0a:71:da:b3:2f:89:5d:4a:ca:
c2:a0:8e:7d:e9:1b:1e:fa:22:ef:fa:ff:1c:33:3a:
f2:d5:71:70:a4:b9:30:f8:19:08:78:4a:dc:dd:69:
2b:ac:d3:fe:fc:6f:fd:ff:f7:38:bc:25:f2:5d:7d:
c4:a9:7f:79:99:a3:9e:02:7f:9f:8b:f5:4e:c4:10:
d0:8f:ab:d5:81:1c:45:32:62:ca:be:8c:d2:15:30:
de:b1:ec:e1:6e:e0:0d:4b:9f:af:0e:a8:32:c6:cc:
28:0a:b3:cd:38:0b:8b:c4:74:93:c0:83:25:99:62:
05:a9:0a:09:cb:f5:78:57:f1:18:f5:3b:b3:9d:98:
64:81:c3:2f:bd:2c:b8:6d:d3:bf:2b:a8:b5:07:d9:
6e:60:0b:b8:db:86:78:2a:b7:bc:d2:23:29:c1:3b:
4f:23:c6:fa:4d:4f:0e:e2:22:60:ba:7b:f6:cd:fb:
62:b5:82:d2:69:00:48:2f:c6:e2:6a:2f:0e:a4:b3:
1b:cb:b1:c4:6d:85:42:95:b2:9a:32:4a:88:a0:bb:
39:44:c2:8c:88:bd:7f:40:01:8f:c1:8f:c9:a4:57:
0d:ba:23:11:fb:cc:e0:94:95:27:16:c2:50:1a:bf:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:3D:5D:B4:BD:7B:CC:A5:B2:12:96:F8:65:2F:F2:D5:6F:E1:52
X509v3 Authority Key Identifier:
keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:93:7c:99:62:8e:75:61:70:9e:00:2e:35:3c:2e:49:50:
e2:63:9d:4b:a7:d0:a2:54:58:c7:b9:d7:da:f2:68:54:d8:82:
3c:d7:30:5a:d3:40:f2:da:32:f3:6b:9f:b6:51:e1:9d:38:48:
28:e1:51:5c:d6:13:39:d7:7b:c2:fa:e0:91:ca:03:fd:8b:ea:
82:a6:2c:93:fd:3c:4d:5b:1e:51:2f:1f:ed:12:f2:ae:87:f9:
80:68:22:46:53:cb:ae:2c:83:60:4b:c2:4f:c4:b5:8b:a5:37:
06:4b:f1:3a:09:82:42:9f:82:a7:da:8f:20:8a:d0:a2:99:4d:
ab:50:d2:a1:ae:c9:1a:6a:a2:43:97:91:e7:51:1a:71:22:94:
42:a7:58:8c:74:47:b3:9a:2f:5b:e4:cf:45:f3:51:ce:19:fa:
c8:60:3c:f8:79:a0:40:4d:12:66:15:15:9e:b8:06:18:c8:8e:
54:46:2f:1a:14:8b:d1:50:d8:93:a9:24:b7:ae:37:86:bc:00:
11:fe:e9:19:8a:02:27:68:e7:16:15:6d:09:e1:4b:ea:55:94:
df:4b:35:e2:fa:b4:d3:9e:3e:18:c4:5a:de:fb:c6:a4:bc:ff:
07:8a:23:de:b4:d4:f5:02:ad:22:ec:9d:53:23:ea:58:4a:73:
ab:15:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:26 2026 by rpki-client