
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json)
Hash identifier: 7lVCa4rdm+wVpvgQLkduYQ7Z2RWykatVn6GPKWP3pXo=
Subject key identifier: 92:E2:E5:2D:40:F4:1F:DD:2B:A0:C3:2B:DB:53:D1:25:7A:77:4B:23
Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Certificate serial: 47080D33A2BA1CD2CB4B8B987FDE8C5AE0B30FC4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 13:06:02 +0000
Manifest this update: Thu 23 Jul 2026 13:01:02 +0000
Manifest next update: Fri 24 Jul 2026 13:36:02 +0000
Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=)
2: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: 7OJP2hSti+WGV9q8tO96QsOiNuuX5q4stixXXTHTLNk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:08:0d:33:a2:ba:1c:d2:cb:4b:8b:98:7f:de:8c:5a:e0:b3:0f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Validity
Not Before: Jul 23 13:01:02 2026 GMT
Not After : Jul 24 13:36:02 2026 GMT
Subject: CN=92E2E52D40F41FDD2BA0C32BDB53D1257A774B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c2:d8:d7:75:e9:f1:62:28:97:65:18:04:95:
24:80:96:2f:56:93:f2:a2:9c:3f:86:e6:d2:f8:f8:
ad:6c:91:08:ce:ec:f4:a7:88:f5:96:ca:a3:f0:79:
35:e9:9f:58:5f:c8:78:3a:15:f3:55:ec:c7:82:c5:
22:ff:33:cc:08:0e:ce:73:2d:24:f3:75:a3:a0:35:
68:0d:d8:20:1b:c2:05:76:55:e8:68:01:a8:61:42:
d1:e8:34:76:81:69:2f:07:f2:d6:ee:37:ca:e2:ae:
63:7a:fe:15:f3:fc:9d:b9:67:57:75:5a:ac:a0:47:
29:0d:c6:43:5b:38:31:6d:8e:d5:c8:c5:a1:37:64:
d9:53:d3:87:b4:c6:9e:2f:eb:15:d9:9e:9f:c9:6e:
6b:69:d2:eb:66:5e:4b:ca:f1:64:9f:fc:60:f7:ea:
83:1a:a2:12:fd:4b:ce:e2:e2:4e:27:d3:38:7b:43:
11:ef:de:0c:37:a4:98:14:fd:fc:f8:9a:d0:87:d5:
01:43:65:10:b1:6b:d6:51:ed:70:10:ca:29:2e:72:
2c:4f:c8:7b:f7:7d:f5:20:24:ff:41:c3:23:bc:16:
79:4d:95:33:3f:19:bc:40:86:48:c8:ee:45:c5:8f:
d6:40:50:c4:07:ea:3a:9c:9c:8e:4a:07:b9:c3:27:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:E5:2D:40:F4:1F:DD:2B:A0:C3:2B:DB:53:D1:25:7A:77:4B:23
X509v3 Authority Key Identifier:
keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e1:0a:70:28:f0:b3:50:88:b5:91:8f:66:9e:04:b9:3d:65:
b8:02:e0:12:79:21:8c:9c:0e:e9:82:22:b3:95:d5:27:3f:60:
cd:92:41:bd:a2:99:c4:ff:a1:d3:6c:75:5e:7d:5d:30:71:9e:
8b:dc:38:7b:a0:e8:32:1d:d8:98:5d:a4:45:e2:36:aa:c4:31:
98:e0:54:e6:96:f6:9f:e5:4e:6a:66:30:64:97:6b:04:74:83:
f8:cb:ab:4f:74:17:83:7b:3c:85:a3:5f:8d:58:d9:6f:86:b3:
ad:4c:12:68:4b:a0:12:62:1f:47:e7:5d:fd:b5:56:22:14:3c:
3c:a4:3e:af:6a:6f:be:23:29:ef:eb:ce:ca:be:bb:4b:91:bc:
63:60:a5:1f:20:04:e2:f2:7c:4d:8e:1d:46:9b:9a:3d:bd:6e:
26:cb:ec:a3:ad:96:eb:31:c4:6e:f7:c4:42:7b:da:b5:66:97:
40:0e:d4:f0:4b:dc:50:ca:55:ba:c2:6e:66:9f:fe:03:d4:73:
fa:87:da:c9:51:06:a6:e2:74:89:4d:ce:f6:57:37:f2:06:b7:
6d:c9:17:56:f5:3b:6a:1c:4b:83:94:9a:bc:ef:e5:4c:59:5c:
a3:a2:c3:20:9a:87:6a:e2:24:dc:c4:dd:2b:da:09:96:83:7b:
ea:db:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:36 2026 by rpki-client