
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json)
Hash identifier: j9Nyth/xJicNy9Q8d6/73JnPIvJcbY385+co/2ynGLA=
Subject key identifier: EB:77:11:91:DC:FC:65:A6:30:60:CB:8D:28:27:C7:36:AF:54:BE:FF
Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Certificate serial: 269AAFFA80C84FDFCF12E5156142DEDF84ECFD6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 05:37:55 +0000
Manifest this update: Wed 23 Sep 2026 05:32:55 +0000
Manifest next update: Thu 24 Sep 2026 06:25:55 +0000
Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: ts9gNI8WrM66EA1+FPamAFjdHu6kH2eeRFtaT84ZPOI=)
2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:af:fa:80:c8:4f:df:cf:12:e5:15:61:42:de:df:84:ec:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53
Validity
Not Before: Sep 23 05:32:55 2026 GMT
Not After : Sep 24 06:25:55 2026 GMT
Subject: CN=EB771191DCFC65A63060CB8D2827C736AF54BEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:45:14:e2:87:0e:41:6b:f2:fa:ba:b6:6d:
10:2c:43:13:56:96:e1:1e:01:1c:17:8d:75:5f:f7:
89:0d:da:a6:55:1c:85:93:ad:72:50:6d:0e:18:5d:
a0:c2:7d:c6:2a:bf:5c:54:49:95:fc:a9:e4:99:56:
a3:f0:cb:72:62:e2:e9:7c:5d:7c:b8:fc:ad:04:5a:
90:bb:07:0c:55:2a:ed:30:ea:d5:70:22:a0:21:10:
f9:f5:ef:d7:57:98:14:94:02:81:a4:20:19:ab:e8:
44:f7:fb:93:49:d6:48:54:25:1e:b7:46:cd:cf:78:
7c:f9:04:bd:0d:7a:00:36:ee:69:27:c7:00:d3:6e:
10:a8:76:29:67:18:35:1f:9d:55:4f:84:5b:95:c9:
80:07:9e:a4:dc:cb:b2:5f:e0:14:8e:45:d4:b2:a0:
e3:de:2d:67:b6:27:d7:74:cd:ca:7f:cc:38:ca:80:
26:2f:15:51:ed:33:8a:ef:b2:5f:87:8a:c6:5a:b7:
b2:4b:0e:17:7d:f0:45:8c:9f:5e:99:a8:09:fc:d7:
f3:4e:48:b1:86:9d:2e:d5:45:ca:f2:c9:93:80:7c:
a5:1b:6f:f4:f9:59:bd:30:76:54:40:b3:18:e6:48:
96:01:1c:36:5d:ac:94:07:3f:65:b5:bc:23:2d:1b:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:11:91:DC:FC:65:A6:30:60:CB:8D:28:27:C7:36:AF:54:BE:FF
X509v3 Authority Key Identifier:
keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:5b:d3:3d:53:2c:e0:f0:61:54:37:fa:39:14:05:e8:49:
58:20:8c:57:0f:44:15:00:7f:45:25:a3:e9:57:c7:bd:c2:6d:
1c:78:00:0d:3f:e6:2a:46:e3:d8:dc:61:1e:97:c8:ce:6e:9e:
24:a3:e0:0f:87:a3:e3:53:56:e6:d7:c1:90:33:9e:86:01:dd:
f1:be:3d:e6:01:a2:0e:af:f4:3e:aa:c1:25:96:72:cc:ee:ce:
03:1a:52:a3:2d:14:f5:7a:a7:2c:fc:cc:d1:eb:13:e8:d0:99:
a1:d4:e7:e1:62:21:16:94:a7:d4:97:94:a3:71:81:51:5b:dc:
d8:10:cc:c9:ec:f5:e4:79:60:64:2a:af:2b:6d:93:9f:9c:20:
39:7e:46:6e:ca:4c:9c:3b:fe:f4:e6:3d:64:8b:23:b9:76:b7:
6c:ef:15:f4:0d:fe:fa:d6:d9:d5:cb:3b:4f:fd:81:52:4c:8d:
58:4e:84:28:5b:03:86:8c:ce:8d:43:f8:d2:a1:f2:a5:79:c1:
6b:d8:60:b3:1e:ef:1e:f0:1f:df:93:f5:6d:0b:cc:44:c9:59:
b0:95:14:d5:d5:74:52:00:39:74:52:b4:6c:9e:35:d0:a7:7f:
2b:bd:46:1c:a1:60:38:2d:6c:d3:78:b1:33:a6:4b:e4:1e:bd:
2e:cb:37:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJpqv+oDIT9/PEuUVYULe34Ts/WowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5
MEVGREY1MzAeFw0yNjA5MjMwNTMyNTVaFw0yNjA5MjQwNjI1NTVaMDMxMTAvBgNV
BAMTKEVCNzcxMTkxRENGQzY1QTYzMDYwQ0I4RDI4MjdDNzM2QUY1NEJFRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaf0UU4ocOQWvy+rq2bRAsQxNW
luEeARwXjXVf94kN2qZVHIWTrXJQbQ4YXaDCfcYqv1xUSZX8qeSZVqPwy3Ji4ul8
XXy4/K0EWpC7BwxVKu0w6tVwIqAhEPn179dXmBSUAoGkIBmr6ET3+5NJ1khUJR63
Rs3PeHz5BL0NegA27mknxwDTbhCodilnGDUfnVVPhFuVyYAHnqTcy7Jf4BSORdSy
oOPeLWe2J9d0zcp/zDjKgCYvFVHtM4rvsl+HisZat7JLDhd98EWMn16ZqAn81/NO
SLGGnS7VRcryyZOAfKUbb/T5Wb0wdlRAsxjmSJYBHDZdrJQHP2W1vCMtG0LpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU63cRkdz8ZaYwYMuNKCfHNq9Uvv8wHwYDVR0j
BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB
QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE
RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx
YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE
ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJnBW9M9Uyzg8GFUN/o5FAXoSVggjFcPRBUA
f0Ulo+lXx73CbRx4AA0/5ipG49jcYR6XyM5uniSj4A+Ho+NTVubXwZAznoYB3fG+
PeYBog6v9D6qwSWWcszuzgMaUqMtFPV6pyz8zNHrE+jQmaHU5+FiIRaUp9SXlKNx
gVFb3NgQzMns9eR5YGQqryttk5+cIDl+Rm7KTJw7/vTmPWSLI7l2t2zvFfQN/vrW
2dXLO0/9gVJMjVhOhChbA4aMzo1D+NKh8qV5wWvYYLMe7x7wH9+T9W0LzETJWbCV
FNXVdFIAOXRStGyeNdCnfyu9RhyhYDgtbNN4sTOmS+QevS7LN8I=
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:16:56 2026 by rpki-client