
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft
File: 0852B9571B10B9E010A24AEF65D8CD2D47886515.mft (raw, json)
Hash identifier: NPLCkRu/WaqriLu9P/qe0/xbqqsNJN1GNkCcueM6yQ4=
Subject key identifier: EB:08:2F:21:55:AD:FC:E7:BA:C8:72:8C:6B:2A:79:24:E8:17:CF:57
Authority key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15
Certificate issuer: /CN=0852B9571B10B9E010A24AEF65D8CD2D47886515
Certificate serial: 1DA9859F15D81FEBA0A73E8D2A72985ADD030767
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 20:04:36 +0000
Manifest this update: Thu 23 Jul 2026 19:59:36 +0000
Manifest next update: Fri 24 Jul 2026 20:12:36 +0000
Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: PCTRx4Db0OJeT2h639ct7xi+9uM7E+6KAvrUncz4724=)
2: 0852B9571B10B9E010A24AEF65D8CD2D47886515.crl (hash: vvFDlO+7G09bJkqAAELYA5Xi+HsUbcV+CeESGn84+qA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl
rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a9:85:9f:15:d8:1f:eb:a0:a7:3e:8d:2a:72:98:5a:dd:03:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515
Validity
Not Before: Jul 23 19:59:36 2026 GMT
Not After : Jul 24 20:12:36 2026 GMT
Subject: CN=EB082F2155ADFCE7BAC8728C6B2A7924E817CF57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:09:11:d4:bc:46:3d:23:fa:3b:e2:83:79:
b0:58:a9:7c:9f:dd:3a:b5:5d:61:11:d3:1c:84:81:
f6:8b:95:b3:f6:41:e9:a3:c2:1c:75:2d:e9:06:40:
2f:b4:8c:11:ef:cc:26:21:ad:8e:2c:de:21:d6:f6:
c0:c8:61:e6:74:be:3b:70:79:94:26:01:04:9a:58:
6a:48:9d:c7:45:c8:4c:2e:29:a4:5c:8a:a9:9e:76:
72:60:d1:92:6d:85:12:c8:a6:37:be:75:0e:a4:66:
1e:8f:a3:a0:bd:0a:67:d6:97:5e:9d:4b:5a:2c:5c:
86:17:63:42:fd:b2:83:1e:1b:28:cc:2e:36:e0:80:
7d:b4:71:95:a8:a1:e2:9d:f4:97:9d:b9:ef:49:3f:
2e:c6:95:d3:d2:fa:73:03:72:1d:62:a0:5b:80:d8:
40:e3:4f:60:34:5c:ec:02:51:ab:4d:59:71:e7:1c:
1e:ee:0c:d9:fb:ad:47:5e:cb:9a:1f:85:e1:5d:42:
1e:48:6e:16:8a:d1:d9:eb:9d:d8:6d:ae:6a:e1:63:
7f:ad:47:3a:63:f0:05:ed:a7:ab:6a:9e:f0:6a:da:
ca:35:55:0e:a7:bb:ae:c7:23:3e:8b:e3:dc:c1:e7:
b8:4e:67:9d:4b:33:32:f3:3c:d2:c2:e2:cd:26:b5:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:2F:21:55:AD:FC:E7:BA:C8:72:8C:6B:2A:79:24:E8:17:CF:57
X509v3 Authority Key Identifier:
keyid:08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:07:b4:b6:bc:0f:72:a1:43:73:d4:ca:58:32:e2:49:ca:
b0:1f:b6:b0:e0:ba:dc:32:2e:41:27:44:19:7f:5a:99:cc:0c:
dd:85:d1:97:61:70:7a:94:4d:24:43:79:f9:0e:e8:31:d9:52:
1b:fa:b1:07:63:78:f5:be:15:f2:38:19:69:4b:45:cb:b6:80:
41:d0:d1:20:a2:4c:d7:1b:29:05:fe:ab:e0:12:77:8a:f2:67:
f1:ad:e0:87:ad:51:9a:1d:75:14:1f:43:eb:2d:85:d2:ec:af:
55:30:7e:af:cb:a2:dd:1f:cb:0a:a0:51:d1:aa:ab:90:a1:48:
92:60:8a:4e:66:8a:a4:e2:fd:96:8c:c4:f7:ae:94:9d:f8:33:
af:7e:3e:16:2d:11:50:f2:5f:1c:a9:42:c9:f0:09:b3:24:d1:
ab:08:b8:45:43:5e:76:bd:d0:35:27:78:fe:8d:31:b5:16:81:
79:7f:47:a4:f8:0d:56:4b:92:3c:07:cb:e5:70:72:38:5d:95:
af:ce:07:dd:ce:01:9b:10:43:db:4a:17:ed:52:b0:27:16:4a:
48:b4:3e:c9:dd:48:a2:57:dd:49:8c:16:39:28:a9:f4:a2:e8:
a1:7a:c6:62:5f:8a:ae:f0:dd:58:d2:ef:18:0c:3d:5f:22:e1:
f3:25:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:11 2026 by rpki-client