
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
File: 822159966075595E4F7698AB063AA58F2CE6EFF6.mft (raw, json)
Hash identifier: ri20pkhJVhwNZip6EX3yPcwfnuG5NzUBitiL+k8Qm60=
Subject key identifier: 19:19:27:99:57:EC:AF:92:C1:5F:F2:97:8B:0F:2D:A7:42:B3:5F:91
Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Certificate serial: 122AA1E8146D4BB6E4DAB8065A590FA7265ECC48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 10:49:32 +0000
Manifest this update: Wed 23 Sep 2026 10:44:32 +0000
Manifest next update: Thu 24 Sep 2026 13:08:32 +0000
Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M=)
2: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: g2Try/rsWXQysWh1yUTGg946lXBgye9fJxj3oMw4maU=)
3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: SnoqKOK1pYK0zjgd+NMH20h/jENOjT9uDC1vLmu5Vt0=)
4: 822159966075595E4F7698AB063AA58F2CE6EFF6.crl (hash: fnl8NQjrbj9Hr06z2w9gfFHs+1o0+5PyfDRyMiouH7o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 13:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2a:a1:e8:14:6d:4b:b6:e4:da:b8:06:5a:59:0f:a7:26:5e:cc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6
Validity
Not Before: Sep 23 10:44:32 2026 GMT
Not After : Sep 24 13:08:32 2026 GMT
Subject: CN=1919279957ECAF92C15FF2978B0F2DA742B35F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:4a:1a:b1:e3:7c:4f:70:27:23:2c:da:cc:
74:c4:c7:cb:80:23:36:6b:6c:e5:df:9a:83:85:98:
2c:a6:14:51:be:75:31:3e:65:d9:40:e9:d7:2a:28:
f4:2e:7a:83:ae:09:82:df:ff:e3:08:08:a2:85:ab:
4f:e1:f3:a4:5b:8f:f8:03:c7:39:e5:c7:88:71:e9:
39:28:7f:fa:00:ca:d6:95:05:bc:5a:63:d0:b0:2d:
63:fc:eb:37:6f:fd:ca:53:b7:22:86:23:5e:24:9b:
1f:46:cf:b0:f2:b9:8f:15:93:ad:68:bb:bd:7b:4e:
27:60:18:ae:f4:73:76:58:e5:85:5a:ec:5c:fe:cb:
56:b2:85:ed:98:73:86:88:dd:ea:62:fd:bd:53:b7:
79:d9:0e:7d:5c:f1:94:03:ce:12:74:6b:9f:1a:b6:
79:09:44:07:dc:16:db:1a:5f:d3:c5:4a:df:b5:cf:
fa:70:87:fc:8d:e6:03:09:c1:2a:0f:d4:25:39:1e:
5e:e9:68:11:bb:7d:09:69:d3:4e:52:46:04:73:d1:
c5:c8:b6:aa:a3:98:68:24:93:eb:42:8c:ef:4e:b7:
a1:0c:78:56:6a:33:7c:2c:b8:44:ba:41:a1:cc:13:
18:e1:eb:c5:34:41:b4:36:12:8b:ea:42:5a:1c:53:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:27:99:57:EC:AF:92:C1:5F:F2:97:8B:0F:2D:A7:42:B3:5F:91
X509v3 Authority Key Identifier:
keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:70:db:26:b7:f8:b6:ff:35:a2:86:3f:3e:a4:11:e0:59:
60:b3:88:d0:b1:05:d0:4e:3c:df:6d:71:36:61:63:ce:99:b3:
8b:b3:5f:f8:1d:fe:50:a1:19:83:31:75:d8:10:00:4f:04:7c:
79:43:d6:ab:09:bd:72:f5:2c:be:71:77:a1:8f:2e:23:cc:02:
52:22:5a:a0:05:76:d7:69:8a:f4:8a:6e:0e:70:44:74:3b:2c:
f0:96:de:dc:21:b1:95:e8:ca:78:50:29:d8:e6:48:6a:0d:76:
0e:53:e2:90:0f:74:24:88:3c:83:34:aa:d7:af:a2:d5:7e:3f:
7e:67:d1:8f:55:a4:1b:c8:f8:bc:08:9d:d5:47:f4:13:29:df:
0a:51:b0:5b:b5:1a:f8:b4:15:66:0d:84:31:ad:29:f2:51:61:
50:4b:84:47:d1:98:f6:32:2f:12:0d:a5:c1:ee:c4:41:09:71:
71:d7:c8:37:45:7d:86:c4:cf:a8:13:ba:fc:4f:dc:2f:29:df:
95:49:9f:0d:f8:31:79:dc:71:c5:4d:2b:20:2c:f5:2d:0e:7e:
aa:39:9c:b7:10:fa:fb:db:b9:82:42:59:ca:07:b5:1a:8f:81:
d1:37:bc:9b:68:ec:bd:04:95:cd:b5:58:78:cb:70:c1:81:02:
90:21:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:22:40 2026 by rpki-client