
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft
File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json)
Hash identifier: 0r38AAT/ldK6mlsGROSpR3q4KN20V1hQdjGwCNiF1+o=
Subject key identifier: 8A:A7:80:6E:C1:C9:21:90:1F:BB:BF:7A:76:A7:B6:0F:54:C2:6E:0C
Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B
Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B
Certificate serial: 6B1A10A93A10F504F71584C17C93ECE369397B65
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 09:46:58 +0000
Manifest this update: Thu 23 Jul 2026 09:41:58 +0000
Manifest next update: Fri 24 Jul 2026 13:13:58 +0000
Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=)
2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=)
3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=)
4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=)
5: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: zXBAC9tUlKhoThZIV0cOwk8HO5F/SK67KYqBkJDVArw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl
rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1a:10:a9:3a:10:f5:04:f7:15:84:c1:7c:93:ec:e3:69:39:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B
Validity
Not Before: Jul 23 09:41:58 2026 GMT
Not After : Jul 24 13:13:58 2026 GMT
Subject: CN=8AA7806EC1C921901FBBBF7A76A7B60F54C26E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:9a:0d:b2:a6:c7:e1:d9:69:a7:3b:39:da:
82:81:77:cf:f7:ce:dd:e9:bb:47:4c:e5:05:9c:26:
6f:1d:6c:ec:b2:5c:17:6f:4e:a1:c8:c7:4f:4a:ec:
b4:b7:5d:c7:e8:30:ea:68:60:c0:1e:03:c8:6e:fa:
f9:2a:e2:c4:50:24:e9:f2:c2:0c:f8:eb:bd:2f:21:
25:24:f9:db:52:f0:b7:b1:03:50:5c:38:c5:70:e2:
a7:ea:26:e0:57:5b:25:0e:a1:a1:7e:d6:ca:aa:0b:
a8:65:15:c1:d5:83:28:20:47:7a:ac:15:ff:25:7f:
5d:8c:39:73:4a:66:2b:ae:2b:ce:d1:dd:e3:6b:d9:
bd:c4:c0:9e:59:f3:5f:97:be:e3:1e:3f:3d:ed:b2:
a5:86:f2:b6:2d:58:20:fa:51:80:5c:a7:98:19:98:
5e:80:cc:ad:14:ae:1c:81:45:c1:29:22:d4:b1:4a:
2e:b4:5d:d7:54:f0:9f:df:8f:93:bd:c5:ba:56:2b:
03:52:5b:cd:c0:61:a5:60:53:95:06:32:c0:b8:16:
90:c9:19:b0:3d:b5:a6:a9:32:e4:3c:90:e6:92:23:
e9:23:d0:e6:58:c6:ab:45:81:79:7a:f0:d7:ef:87:
3d:a8:f8:23:63:4e:86:83:73:39:30:f2:d0:e2:1a:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:80:6E:C1:C9:21:90:1F:BB:BF:7A:76:A7:B6:0F:54:C2:6E:0C
X509v3 Authority Key Identifier:
keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:74:43:0e:eb:81:cb:52:10:cc:17:45:ee:51:2e:f6:9b:4e:
3c:e5:51:74:d9:0c:d8:b6:c6:25:77:0c:14:ac:fe:e1:d9:c1:
37:16:23:15:06:66:e7:eb:64:6d:d6:56:09:48:70:39:55:94:
c3:fb:42:2c:2c:e7:bd:d1:89:b0:3b:ad:c0:af:78:71:91:4b:
92:ae:d7:11:bf:f3:8e:ce:03:4d:6a:38:85:03:a3:93:e9:17:
e4:3a:9c:c6:37:90:8a:29:e2:21:cb:74:0d:32:2c:79:f5:eb:
07:15:2f:ab:9f:b3:51:bf:01:b9:dd:54:c2:f5:c8:cd:f9:1d:
f1:26:53:41:da:aa:52:70:d0:9b:5f:49:70:ab:63:e0:0c:fc:
6c:d3:b0:ac:78:94:05:91:cd:ce:76:02:94:d8:58:43:2d:0b:
fc:bb:48:06:c8:76:37:aa:49:24:f5:0e:a7:c8:3a:ee:6a:2c:
97:98:c4:d9:a3:2d:94:cb:fe:3d:b3:8e:67:83:3d:3c:50:e9:
a7:38:23:8d:99:54:f1:7b:08:d7:f8:4d:98:3c:6f:ea:d2:40:
87:95:84:3a:38:ed:ac:17:ff:96:d7:5d:c3:02:cf:fc:78:84:
d0:32:4d:25:31:f7:1a:45:75:ee:ee:70:20:0a:b7:f2:48:15:
7a:a6:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:57 2026 by rpki-client