
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft
File: F7CE9829E83FEDABD39870499926D9D41609EAEE.mft (raw, json)
Hash identifier: 2rcKpIaHSzJZx+zrT5afrXcsgu9X6x4X7dNBhg75etg=
Subject key identifier: D5:08:21:5C:30:23:0E:C6:A1:23:C1:47:F9:CA:E0:6F:38:79:1D:38
Authority key identifier: F7:CE:98:29:E8:3F:ED:AB:D3:98:70:49:99:26:D9:D4:16:09:EA:EE
Certificate issuer: /CN=F7CE9829E83FEDABD39870499926D9D41609EAEE
Certificate serial: 5859C87369CA5BF64E0EC54D4C5E814649F7342A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7CE9829E83FEDABD39870499926D9D41609EAEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:33:47 +0000
Manifest this update: Thu 24 Sep 2026 02:28:47 +0000
Manifest next update: Fri 25 Sep 2026 04:07:47 +0000
Files and hashes: 1: F7CE9829E83FEDABD39870499926D9D41609EAEE.crl (hash: 2lVgPl1QVBtWkfQdUuzMGxjQcT8KzdXHyKu+ZAJbR/0=)
2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: kNzxCHv9xGWnqwfjx1q4b7wQEJ8uQikTyyaDc2f1iiM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.crl
rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7CE9829E83FEDABD39870499926D9D41609EAEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 04:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:59:c8:73:69:ca:5b:f6:4e:0e:c5:4d:4c:5e:81:46:49:f7:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7CE9829E83FEDABD39870499926D9D41609EAEE
Validity
Not Before: Sep 24 02:28:47 2026 GMT
Not After : Sep 25 04:07:47 2026 GMT
Subject: CN=D508215C30230EC6A123C147F9CAE06F38791D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:a2:4a:5a:43:5e:31:ed:3b:97:68:4a:5a:
39:b2:f7:dd:71:ed:13:c5:df:c3:1e:1d:7f:b5:82:
88:d3:3c:25:38:3d:f1:be:9a:55:19:25:55:18:a6:
e9:f5:5e:97:15:a6:48:10:4b:7b:3d:32:ee:d6:41:
e7:2c:38:a7:3e:59:27:a9:bc:92:99:2d:58:07:7c:
2b:81:4c:42:05:4f:85:8c:0b:82:83:ad:64:71:4d:
24:a9:59:bc:1a:be:82:73:1b:ee:7d:b2:13:93:a1:
29:30:32:e8:c6:9a:66:3f:00:c7:c1:c5:98:67:ba:
f0:8d:a2:7a:80:97:b3:2e:03:b3:ca:fd:a1:cc:59:
f7:c5:34:f1:6e:27:48:15:01:05:81:1a:4a:d0:18:
28:9f:04:cd:b8:54:05:06:6b:97:ec:e3:ad:3d:1d:
d6:8c:4d:46:c9:d1:83:7c:b4:27:50:a6:86:d3:ae:
9c:84:ce:5f:bf:eb:ec:5a:f7:a8:62:5e:de:d4:b5:
6a:79:e5:bf:36:34:68:fc:49:2d:21:2d:eb:e9:40:
dc:d9:eb:9f:06:40:87:c0:e2:40:63:d4:81:1a:5b:
eb:13:df:c1:be:cf:21:1c:d0:a6:47:b0:7e:01:b5:
d6:19:e7:1e:71:6b:3f:a6:df:14:9e:5d:22:4a:c0:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:21:5C:30:23:0E:C6:A1:23:C1:47:F9:CA:E0:6F:38:79:1D:38
X509v3 Authority Key Identifier:
keyid:F7:CE:98:29:E8:3F:ED:AB:D3:98:70:49:99:26:D9:D4:16:09:EA:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7CE9829E83FEDABD39870499926D9D41609EAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:92:4f:0a:3d:ad:56:41:35:10:50:6e:d0:1a:f3:50:30:
3a:fd:1d:d4:c7:03:28:f1:4c:db:ed:07:27:91:3a:05:18:2c:
a0:16:00:4a:29:eb:c8:1f:fa:5c:2f:cf:b8:e5:aa:12:44:13:
02:73:4b:d8:6b:a1:b8:61:3a:b0:00:61:c0:9f:d7:45:22:df:
2d:04:f4:20:d2:67:ba:42:e9:14:94:7a:d6:c2:f5:e5:7d:7a:
fb:30:c2:c8:6c:84:46:2f:c2:2a:22:ec:6a:01:da:c9:46:5b:
c0:97:02:87:79:55:b1:0f:42:71:47:be:cc:67:ee:61:75:9b:
45:a5:e0:17:bf:65:5f:24:42:91:88:4d:a2:36:4f:84:90:92:
c7:d1:ff:c1:e0:f0:68:36:33:0c:b4:1a:3b:9d:f8:de:7a:ea:
92:b0:93:18:a0:1c:0b:1f:7f:2f:e0:b6:dd:df:22:b5:95:a7:
6c:47:02:f8:f2:60:80:2c:34:98:53:3d:f3:7b:61:30:24:34:
6c:a6:25:67:d9:6f:3e:5e:4b:26:f7:f1:b4:e2:17:35:03:5c:
28:50:29:10:b3:70:9b:0f:d6:5c:fb:9a:61:ac:2a:78:04:c6:
48:d5:05:fa:2b:2d:73:1f:25:31:61:b5:c4:3e:ac:88:72:26:
c9:39:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:58:27 2026 by rpki-client