
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
File: 7705E223B413A31F5B5C47149EFBCA7585682B42.mft (raw, json)
Hash identifier: gAXb0NJvofT3kjCY92uNIwbxxi39fxKr+eS1Je+FL3s=
Subject key identifier: 2D:FB:E9:99:FC:76:FE:44:08:78:57:AC:DD:E4:79:AE:29:BC:86:15
Authority key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
Certificate issuer: /CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Certificate serial: 666AAA68D0A7A043B38F2E6FD1AB447DD07EEC02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
Manifest number: C5
Signing time: Fri 25 Sep 2026 08:41:27 +0000
Manifest this update: Fri 25 Sep 2026 08:36:27 +0000
Manifest next update: Sat 26 Sep 2026 08:49:27 +0000
Files and hashes: 1: 7705E223B413A31F5B5C47149EFBCA7585682B42.crl (hash: xFGGrIzqPgi3qy0zV7FvmDQXUSrHpuzaKyQN0ypfW9g=)
2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: s99ZTaHI8AEsUmlddmqA7MWNsPpN7nJom6XrkndDWvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 08:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6a:aa:68:d0:a7:a0:43:b3:8f:2e:6f:d1:ab:44:7d:d0:7e:ec:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Validity
Not Before: Sep 25 08:36:27 2026 GMT
Not After : Sep 26 08:49:27 2026 GMT
Subject: CN=2DFBE999FC76FE44087857ACDDE479AE29BC8615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:77:4c:5a:d3:20:26:66:e4:d0:05:a7:17:
a2:b8:1f:11:3d:21:05:14:b1:6e:ba:00:23:3f:e6:
84:40:32:ad:40:6c:d5:ef:b1:0f:8c:58:d8:a3:da:
91:4e:cb:ce:8a:f8:40:ee:bc:d6:2d:d5:ce:c0:3c:
8e:27:d9:7e:41:5d:af:87:1e:2d:e7:7d:d2:6c:63:
e0:e3:e1:de:5a:22:b8:92:d0:da:ea:68:5f:98:f4:
67:3a:ac:37:05:83:69:61:28:81:23:2e:8c:2e:a5:
2d:0f:96:c1:2b:9d:fb:c6:89:bc:36:67:68:18:ea:
d3:e4:93:08:87:61:cd:f9:a1:53:b6:e5:48:fa:b1:
50:a2:5c:9f:ac:07:9c:03:f3:a9:a0:7e:91:01:77:
8e:4a:f2:b8:db:cc:f5:ac:27:1a:a3:b5:a0:6f:e4:
4f:1d:6e:94:90:b5:87:e8:7d:8c:c0:fc:97:77:bf:
ee:3b:9c:af:3d:10:b9:34:23:96:dd:2b:9e:98:5a:
c2:e1:e3:9f:29:a7:fc:7e:83:54:1f:65:86:ef:6b:
14:a8:15:c1:ab:ee:b1:d4:b8:f8:b2:c3:a3:c4:75:
af:1d:2c:bf:1c:71:6f:a2:2d:5f:32:49:92:da:f9:
0e:70:65:32:2b:fd:8b:8d:54:7d:ec:0f:23:a0:36:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:E9:99:FC:76:FE:44:08:78:57:AC:DD:E4:79:AE:29:BC:86:15
X509v3 Authority Key Identifier:
keyid:77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f3:e4:74:38:53:18:67:8a:34:72:ca:6c:be:fa:2a:5e:44:
86:e1:cd:15:35:cf:67:c4:84:dd:2e:b3:a0:4e:41:62:1d:ed:
f0:64:34:38:8c:57:87:82:d3:bf:ad:a9:73:49:a5:d9:56:6b:
7b:94:81:bf:e4:b3:dc:0e:00:a2:7d:ec:78:3a:2b:10:f1:10:
a5:6c:91:b9:5b:64:39:23:af:3b:61:5c:6e:94:19:7d:09:7a:
eb:dc:e4:37:4d:91:1e:40:13:e3:fb:ef:8e:0a:ad:76:51:80:
d3:5e:ad:90:bb:07:8a:fd:67:61:3e:35:9b:23:84:b0:75:bc:
a8:8c:16:ea:d5:aa:1c:66:dd:13:9d:79:3f:d3:39:8c:5f:a9:
28:fe:00:5f:05:f4:85:76:00:15:a6:8f:a9:7c:2d:b8:f7:a4:
47:27:b8:fa:ed:b7:f1:67:2c:a9:97:8a:69:be:a8:b1:d6:66:
2e:85:0c:e9:36:8a:b0:2c:23:dc:da:bb:f4:a1:02:f5:a1:7b:
a2:d4:46:c8:c9:1f:97:7d:0b:b0:68:f7:a4:b0:28:a2:11:8e:
56:fc:31:ee:7d:c4:24:1e:a2:c7:91:4f:35:ad:5e:c9:79:c0:
48:5d:bf:97:42:13:f3:db:02:54:1b:32:da:4d:ef:2b:e8:4b:
11:ce:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:49:25 2026 by rpki-client