
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
File: F82E16FA44E704F6B79945E8313425503473FFC7.mft (raw, json)
Hash identifier: ANk/Xo5WCS/0F3advcsx1r9g983/FRrnEZkYmBmMeTg=
Subject key identifier: 86:CD:30:87:29:6F:BB:56:E5:38:4A:AE:BB:76:A8:D5:4E:20:99:95
Authority key identifier: F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7
Certificate issuer: /CN=F82E16FA44E704F6B79945E8313425503473FFC7
Certificate serial: 14D0588EAB26085606CD6D0443F41A74B74FCDFE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
Manifest number: BB
Signing time: Sun 20 Sep 2026 07:31:24 +0000
Manifest this update: Sun 20 Sep 2026 07:26:24 +0000
Manifest next update: Mon 21 Sep 2026 10:12:24 +0000
Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: 2lpnidzjfeZ4F/k2aPIOLu5qIVfYgZh5PoTfkKI6g5g=)
2: F82E16FA44E704F6B79945E8313425503473FFC7.crl (hash: DGz/5ytHyVtEBXZaxYciJg7F54rAI9EwBXNpuCTkbaM=)
3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: E/btGwSpPVnr4uB6ixvWNVyUJ9J3wgIEyIH8A1Fswso=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl
rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 10:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d0:58:8e:ab:26:08:56:06:cd:6d:04:43:f4:1a:74:b7:4f:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F82E16FA44E704F6B79945E8313425503473FFC7
Validity
Not Before: Sep 20 07:26:24 2026 GMT
Not After : Sep 21 10:12:24 2026 GMT
Subject: CN=86CD3087296FBB56E5384AAEBB76A8D54E209995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:6d:f9:fc:e6:20:4e:34:76:b2:d2:3c:a9:
d4:b6:c9:17:59:09:bd:a8:a9:da:ec:2c:70:5d:6f:
92:ee:7d:e3:c3:53:aa:de:ca:15:87:8a:bd:e7:af:
9f:1c:ff:55:f5:9f:0c:2e:3f:9f:88:a4:f4:b0:73:
d8:57:9a:36:19:23:82:20:28:b5:19:83:b8:ac:1c:
14:e0:0f:96:f6:cd:bc:4a:70:3c:7a:7e:dc:8b:f5:
2f:4f:0a:0d:b8:ef:35:e1:e5:4e:b2:9a:ec:41:74:
c9:0f:5c:cf:6d:52:dc:2f:2d:25:a4:7e:8e:dd:c9:
b4:c6:2b:db:dd:d4:84:6c:24:e0:bf:e4:5d:c1:7a:
af:84:15:cf:54:0c:00:d7:59:23:cf:02:65:55:ac:
3c:5e:b0:5f:2e:63:e4:e1:63:21:9a:59:66:21:ed:
7f:f3:fe:1b:e1:4e:34:09:d4:8d:69:87:f0:44:6a:
f1:57:22:2c:46:b2:e9:a3:fd:4f:95:ac:ab:57:92:
b5:47:ff:52:cc:ac:16:34:14:e9:99:90:50:1b:6f:
e0:98:a7:a5:68:13:e0:f0:04:30:5f:35:af:ae:0e:
a9:78:c3:ed:b4:fe:8c:fb:9f:c7:92:6d:69:8b:13:
da:3a:ff:c7:c9:d8:d7:2b:82:4b:4e:f9:a2:1b:11:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:30:87:29:6F:BB:56:E5:38:4A:AE:BB:76:A8:D5:4E:20:99:95
X509v3 Authority Key Identifier:
keyid:F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:fe:b2:96:fe:f1:5e:a6:5f:51:2b:e3:d8:a9:37:af:da:
d0:d9:0e:3f:e9:2b:f8:60:69:9d:c8:ed:f7:d7:fe:29:41:1f:
fe:61:b0:a6:b6:df:fa:ba:cd:f3:5f:4c:44:8f:c5:d9:2f:f5:
1d:e5:50:46:fa:a9:66:ff:fd:61:fc:b6:df:03:1c:60:76:1d:
95:1d:6d:5b:b0:c2:0a:ad:dc:6e:a6:cd:21:80:40:c9:81:10:
1f:25:0e:d1:84:e3:35:c4:09:46:5a:17:df:70:05:1e:e7:cb:
5b:bc:d1:1d:0e:5b:b3:be:9f:4d:3b:7c:c7:a2:c7:33:9a:11:
e3:fa:90:91:43:a6:67:ef:ec:4a:da:f4:74:49:47:1f:a4:3e:
6a:5a:52:cd:8f:77:78:7b:30:07:82:37:fb:01:13:70:7b:53:
98:89:70:60:c2:93:fe:79:b2:62:d6:f8:e8:2b:6d:57:52:a1:
79:cf:e8:24:6f:f1:d8:0b:ba:bc:7c:0b:ee:35:1c:22:fb:5b:
af:b6:0e:f3:e6:61:eb:f3:34:4a:5c:58:b1:0a:95:c4:9a:d3:
d2:e9:fa:4b:72:32:00:d0:f0:59:bc:88:37:64:fe:83:59:c7:
33:3a:5f:6c:74:b6:eb:38:c8:c5:c3:d9:05:d4:4c:cf:84:fd:
8a:16:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:00 2026 by rpki-client