
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
File: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft (raw, json)
Hash identifier: 20sw9mHy8FTW01jhXjrhJJA+K+TLKQGg5F3nLdJR6L0=
Subject key identifier: CF:FE:53:A7:6C:22:13:3D:F2:44:F4:54:DB:89:D5:E1:8B:EA:8C:0C
Authority key identifier: F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D
Certificate issuer: /CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D
Certificate serial: 793887EA456737211046F574F2F4B8F5744308B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 14:45:17 +0000
Manifest this update: Sun 20 Sep 2026 14:40:17 +0000
Manifest next update: Mon 21 Sep 2026 15:14:17 +0000
Files and hashes: 1: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl (hash: zKqFIlhQ9PmUlPBBse5znsUZHhFYHRMLBcd9TrxXO04=)
2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: k/K1jFj/VvSwfTvq1VNLpQ0GgYuMHptjXlWEbYgtnfA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl
rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 15:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:38:87:ea:45:67:37:21:10:46:f5:74:f2:f4:b8:f5:74:43:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D
Validity
Not Before: Sep 20 14:40:17 2026 GMT
Not After : Sep 21 15:14:17 2026 GMT
Subject: CN=CFFE53A76C22133DF244F454DB89D5E18BEA8C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:21:29:e2:22:08:7e:f1:8a:3c:ac:63:c1:
c0:ab:68:96:be:76:58:f8:06:e2:65:e7:15:4c:97:
ed:93:a1:8c:82:64:d6:db:e5:f7:1d:95:8d:90:3b:
27:16:32:b0:85:ea:3c:e4:d6:cb:b9:9c:65:da:9c:
03:8d:1a:49:6f:82:c4:00:11:e5:50:3d:b5:49:07:
f5:73:4b:ce:9c:a7:a5:e0:00:c3:af:43:9b:d5:53:
0b:15:1a:93:30:d1:9c:11:69:65:d1:0e:ef:5d:a6:
ff:96:88:5d:b4:7e:d0:5d:bd:35:4c:8b:e8:c0:c6:
f5:7d:78:af:d4:28:6d:98:f0:3c:30:af:a1:1f:9d:
71:05:24:89:d2:ae:f4:d6:51:07:5a:24:08:a9:18:
e8:f0:0e:f1:ac:25:94:d5:60:6d:9f:27:1c:2f:bf:
58:d1:08:89:9f:65:0b:fc:d2:1e:0e:8d:e6:25:ed:
b9:0d:1f:19:ff:91:a1:15:d9:a4:36:44:70:b8:8e:
7a:dd:79:fb:97:7a:20:ec:5b:96:49:99:c3:7c:c5:
a3:ae:c5:58:c4:2a:28:ee:ee:cf:70:d6:a1:7f:07:
6e:f9:88:24:2e:46:59:1f:84:69:46:c1:15:41:ef:
c9:51:ef:3d:8f:41:8b:5e:14:64:95:88:2f:0f:8d:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:53:A7:6C:22:13:3D:F2:44:F4:54:DB:89:D5:E1:8B:EA:8C:0C
X509v3 Authority Key Identifier:
keyid:F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e2:e5:e3:d4:7e:70:44:b4:96:76:82:eb:61:ff:43:86:9d:
09:c7:d9:6a:dd:29:7c:10:d3:a1:98:79:16:3d:00:10:b9:2e:
6a:ef:44:7e:36:a3:2c:99:31:6d:42:f5:bb:75:83:d1:32:dd:
2f:20:d0:3a:d4:2c:fc:00:b9:73:dd:c7:5d:47:46:1c:6c:89:
76:40:fe:e7:b8:3a:66:cf:c1:19:ee:0c:8f:5d:91:6e:9b:54:
f2:9c:cf:33:db:18:0e:97:aa:7a:fd:4a:63:fd:64:9e:b2:67:
cf:31:f8:bd:8d:d8:9a:3e:4d:bf:a9:c1:1d:77:17:d2:06:81:
ba:be:21:af:83:f8:5f:4f:ce:d6:db:2b:4e:a0:87:30:f5:8c:
57:79:f0:26:63:4d:b8:85:96:40:a1:13:1d:31:a1:aa:fd:3f:
8f:4f:cc:73:fc:ec:d1:bf:21:5a:32:78:c6:ba:31:15:0d:e3:
82:38:1f:f1:11:44:00:e4:59:18:a5:e1:30:ee:db:0e:97:24:
35:0b:53:70:ef:fe:dd:6a:a4:dc:7d:58:03:41:82:7a:87:6c:
8c:59:f1:f0:8b:9c:89:64:f4:57:9c:45:43:5e:a6:ea:6e:a4:
ef:92:c9:67:f8:a2:a3:cc:ed:98:a7:e1:bf:1e:1c:59:5c:1f:
2a:c3:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:09 2026 by rpki-client