
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft
File: 187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft (raw, json)
Hash identifier: MbLix93HVzQXOfNxGbID6jbsxsswRK+E0aiQaln35Qs=
Subject key identifier: 73:43:30:29:E5:01:36:E4:1E:F7:C4:D3:41:4E:92:B9:91:28:17:87
Authority key identifier: 18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65
Certificate issuer: /CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65
Certificate serial: 389780AD69C5C0F7004AE52B793DC3CBA8C9E043
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 01:07:10 +0000
Manifest this update: Thu 24 Sep 2026 01:02:10 +0000
Manifest next update: Fri 25 Sep 2026 02:36:10 +0000
Files and hashes: 1: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: 8xo0Jl7LzjqAxX44IJumhtA9p3VYF5J5mSQKHYl3YIw=)
2: 187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl (hash: IzortoY2G3KwnJD3Yfbtu8Bgyeeiqm6Vv79m+VYG++Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl
rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:97:80:ad:69:c5:c0:f7:00:4a:e5:2b:79:3d:c3:cb:a8:c9:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187F162EF573D82408D04DFBF5DDAA285BE8BB65
Validity
Not Before: Sep 24 01:02:10 2026 GMT
Not After : Sep 25 02:36:10 2026 GMT
Subject: CN=73433029E50136E41EF7C4D3414E92B991281787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:94:d0:f5:f4:b3:f2:69:ac:ef:48:d4:21:
82:d9:09:60:14:c0:be:47:01:d7:eb:bb:1b:37:44:
cd:2b:2e:df:61:b1:ce:46:ea:a9:66:11:c0:a8:b3:
75:7e:00:6c:17:ab:6c:80:33:ec:b1:21:43:d2:12:
94:02:9e:bd:41:ec:9e:9a:69:04:d9:1c:72:b7:a6:
6d:96:a9:da:9c:93:39:f8:ed:e3:c5:c4:c2:2b:67:
64:14:fa:ee:da:57:a6:9c:d4:3f:84:5d:52:b9:5b:
77:f0:22:60:79:ad:9c:dd:e2:b7:82:2f:b6:0b:55:
ce:72:80:f8:72:36:8d:ac:2f:2b:5a:23:18:0f:cf:
96:b9:a6:90:7c:a0:5c:36:8a:e2:6b:25:8e:71:84:
18:eb:bb:c1:d5:aa:48:7f:cd:e9:b9:e6:bb:45:da:
3a:97:5b:0f:67:dd:40:85:f1:06:b0:e6:ac:0d:9c:
0c:41:cf:b5:22:7c:f8:40:1b:ac:03:06:3e:1f:08:
11:34:1a:b2:c4:a8:30:af:ab:4b:85:a4:81:4a:f4:
a1:d5:0c:17:c3:cf:28:01:19:99:63:5d:bb:04:9a:
5b:14:90:63:bb:ce:48:7d:69:ae:b5:a7:0f:09:9c:
d1:34:fd:58:47:e3:bc:fa:44:de:20:23:e8:e9:3c:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:43:30:29:E5:01:36:E4:1E:F7:C4:D3:41:4E:92:B9:91:28:17:87
X509v3 Authority Key Identifier:
keyid:18:7F:16:2E:F5:73:D8:24:08:D0:4D:FB:F5:DD:AA:28:5B:E8:BB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/187F162EF573D82408D04DFBF5DDAA285BE8BB65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/187F162EF573D82408D04DFBF5DDAA285BE8BB65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:cf:70:70:4d:68:3d:98:c1:21:e8:93:d9:cb:08:7d:1b:
bf:58:8c:af:d2:c6:04:60:49:b6:c3:04:e8:c4:bd:79:41:30:
7b:3d:06:e2:13:81:9d:a6:bf:d5:b7:94:24:b7:e9:26:1f:ed:
4f:4c:77:94:db:70:d0:8b:b8:4e:a0:07:bb:1d:fb:43:e8:fc:
5e:76:4d:10:70:4a:e5:4c:07:2e:4a:6f:25:82:58:17:8d:9a:
7a:37:35:cf:57:fb:56:c8:93:77:5a:23:d4:6f:2a:98:c0:06:
53:9c:7a:70:2c:a5:14:19:52:bc:54:c4:6b:73:96:ce:8f:3f:
ac:2a:b3:64:19:90:09:dc:d9:df:d7:80:ec:47:a2:5a:88:cd:
5e:85:00:3d:fe:9c:37:0c:52:86:20:eb:4b:48:3f:30:3b:72:
79:66:9b:d8:1d:fd:9d:b5:b0:56:7d:1e:2e:8a:06:68:c7:2a:
ee:9d:97:95:0a:ce:71:10:fd:c4:3f:a1:23:d9:9a:4c:35:83:
5c:eb:49:1b:a2:8a:aa:b4:f9:05:9b:b3:38:bb:8d:33:1c:63:
d8:9e:5d:ff:80:05:23:6b:0c:32:55:2f:77:7d:11:c4:77:ce:
0e:ac:c3:f1:87:72:65:9c:9b:81:90:11:d3:ee:49:9e:03:55:
07:65:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:37:12 2026 by rpki-client