
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json)
Hash identifier: NwN64xB6O/oeFfydRYGSjZam3hNXYxzYboGw2FLN6aw=
Subject key identifier: 05:A5:0E:39:F6:31:20:B0:79:F6:2B:1B:04:37:0B:CC:AB:6A:88:AC
Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Certificate serial: 71AC5198B392A6FEB0AE432E88B075F67DB500CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:21:17 +0000
Manifest this update: Thu 23 Jul 2026 17:16:17 +0000
Manifest next update: Fri 24 Jul 2026 20:44:17 +0000
Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=)
2: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: A5BnAeRuQqJUwa2U0PwXXBsn3x9+tRjzQCLHD5DjFUU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ac:51:98:b3:92:a6:fe:b0:ae:43:2e:88:b0:75:f6:7d:b5:00:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2
Validity
Not Before: Jul 23 17:16:17 2026 GMT
Not After : Jul 24 20:44:17 2026 GMT
Subject: CN=05A50E39F63120B079F62B1B04370BCCAB6A88AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:05:e3:d4:2a:e9:7f:f3:2a:75:20:99:c3:
62:52:e3:32:10:14:0e:70:7a:b3:1e:88:ad:13:fa:
f9:25:41:a1:58:61:9f:e6:84:b7:d8:bf:12:ea:5c:
6a:74:12:f7:aa:42:52:25:d8:82:6d:45:b8:57:fe:
cd:56:9b:f8:c6:ab:65:4c:33:56:d8:d8:b6:d9:3d:
cc:0c:ad:a0:ae:f4:c5:b9:91:d7:c5:0c:e2:d8:09:
01:95:8e:67:69:94:eb:36:06:52:a8:57:9a:68:97:
0e:ff:25:0e:3b:84:50:45:96:76:fd:f1:6e:17:d0:
0b:ac:09:dd:2e:39:eb:50:37:fd:b4:aa:72:a9:18:
85:bd:10:d1:61:c3:88:ec:6c:69:d4:b6:5a:a9:5b:
88:b1:cb:86:2d:17:54:f9:ae:ae:64:07:9a:6c:44:
e7:0b:f0:0b:19:0f:8a:f4:c2:0e:6f:9e:20:7a:86:
54:de:2f:1f:fc:1f:a2:a0:bd:12:ca:bd:df:46:7a:
a6:fa:e3:2a:bb:36:58:1e:ae:93:e1:0d:9d:90:70:
e4:24:ce:58:a5:59:3f:d3:4f:20:03:aa:71:9a:71:
d5:da:e9:d6:56:ae:8c:2e:52:17:0f:90:49:80:3f:
06:cf:b0:f9:bc:e4:e9:98:76:ce:90:1f:90:ac:0f:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:0E:39:F6:31:20:B0:79:F6:2B:1B:04:37:0B:CC:AB:6A:88:AC
X509v3 Authority Key Identifier:
keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3a:f9:ea:9b:4d:b1:86:6d:9a:82:5d:7c:e5:8b:72:7e:28:
ce:06:17:eb:6d:86:59:3b:66:75:65:24:db:a1:68:3d:59:13:
75:60:bf:3e:43:31:5e:3a:b3:5c:1a:ac:06:3e:4b:d4:93:41:
ea:bb:27:c8:13:59:36:d4:dc:1b:f2:6c:29:0b:5e:bb:a3:7f:
61:cd:6f:b6:64:df:ce:d1:ec:85:af:d5:5e:38:3c:f4:03:e8:
14:62:0d:76:a1:ee:2d:3b:a3:49:a5:3b:57:c1:02:bd:6f:a7:
36:d5:5b:6a:e0:67:27:42:24:7a:e3:a1:af:76:01:ba:25:89:
6a:77:60:7a:8e:00:ac:67:f2:e1:7c:19:17:1d:3e:c2:03:3f:
0e:2d:bf:ad:dd:85:42:ee:27:48:fc:ac:32:80:15:60:44:03:
f7:d4:e4:d4:e3:c7:f2:be:d0:64:4a:c7:a3:06:c2:e9:b4:b6:
ca:1b:db:3f:56:c3:37:ea:ff:2e:2e:8c:c2:4e:2e:e2:f4:eb:
dd:bd:01:7f:d8:50:b5:96:a8:44:8b:a6:73:82:c5:11:ed:b4:
0a:0f:1b:f2:24:90:8c:74:53:78:f6:3d:e7:2c:dd:7e:8f:37:
2b:29:1b:e7:87:8f:2f:c2:ae:95:95:d2:04:b7:0e:21:84:f9:
fb:40:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:40 2026 by rpki-client