
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
File: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft (raw, json)
Hash identifier: pr1ybRRwIXdTdQ2MkpkBRt0URev21qdl9QD+1wl1dQU=
Subject key identifier: 69:4F:7D:8F:DF:DB:5C:21:C5:A6:0A:F2:75:EF:EC:B5:CF:B0:7D:43
Authority key identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17
Certificate issuer: /CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
Certificate serial: 0EA59247355739B89C3B19A598751F9351D7D84E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
Manifest number: C6
Signing time: Sun 27 Sep 2026 08:09:31 +0000
Manifest this update: Sun 27 Sep 2026 08:04:31 +0000
Manifest next update: Mon 28 Sep 2026 10:39:31 +0000
Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 6EETEPKtzbYhkS8PCH/i18xxZFkGLUgPS/GSOlw9zjQ=)
2: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl (hash: SZ9gJ0veHh3Yqp1yUPi6U1S/RuZ6rTJQfcbumQwqqD4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl
rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a5:92:47:35:57:39:b8:9c:3b:19:a5:98:75:1f:93:51:d7:d8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917
Validity
Not Before: Sep 27 08:04:31 2026 GMT
Not After : Sep 28 10:39:31 2026 GMT
Subject: CN=694F7D8FDFDB5C21C5A60AF275EFECB5CFB07D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:35:eb:95:62:53:b8:e9:14:01:4c:56:d3:
a7:20:e6:7e:69:cc:d7:14:cd:f8:83:cf:10:b7:ff:
93:25:3c:c3:9a:aa:7f:7e:e2:a0:ec:5d:89:26:cb:
63:fd:e2:79:c4:ad:13:9e:ad:bf:11:3e:56:10:52:
ed:5c:36:e7:a0:a0:7e:e2:31:45:f8:d2:fd:f0:ca:
78:15:bd:9d:4d:f1:43:46:8b:39:0f:c8:08:51:b3:
6e:1d:6b:5e:b9:23:20:f7:df:c3:cf:96:55:b8:02:
ef:1e:20:31:f6:49:1f:10:8c:89:fd:06:d3:a4:e4:
1b:fb:13:79:f5:cb:fe:1f:51:ae:d3:8d:dc:33:2c:
6d:0e:7a:41:9e:ad:3f:e3:38:6b:93:21:6d:ce:5c:
02:52:b3:97:73:2d:aa:e9:50:ea:43:7f:22:b8:63:
4e:e1:0d:57:97:8e:2c:67:0d:56:8b:14:54:30:73:
54:e4:87:2c:81:f0:1a:ca:38:70:1b:b2:e7:6e:8a:
78:0e:fa:95:e2:eb:42:9f:d5:55:4c:1d:21:b6:c7:
34:d5:1f:0f:d7:62:3d:85:d6:2f:63:42:70:5d:c9:
94:8b:2e:95:57:20:33:1d:a9:ae:7e:a2:5f:5e:f4:
cf:d7:1d:39:42:ce:8f:03:cc:fb:97:cc:48:18:3b:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:7D:8F:DF:DB:5C:21:C5:A6:0A:F2:75:EF:EC:B5:CF:B0:7D:43
X509v3 Authority Key Identifier:
keyid:83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:23:ca:87:78:ce:91:b1:71:0d:8e:66:cb:3f:35:16:d9:
cc:f5:e2:fb:b2:d9:06:a5:87:4b:43:73:f2:2e:1e:69:f7:4c:
56:a5:11:b1:8d:94:2a:1e:52:8f:e5:08:e2:9a:e9:a8:13:cf:
70:0c:22:9b:cf:80:05:22:e2:f2:bc:ab:5b:6f:59:80:dd:5b:
a9:68:02:12:dd:0d:ac:a3:bb:26:52:c4:27:d8:3b:02:43:7b:
ea:09:35:df:80:7c:3e:8d:1a:4b:96:d8:55:c9:07:f9:84:d3:
c9:10:f4:3b:02:98:0e:2d:d0:70:94:cb:1b:7c:72:1e:40:e9:
b4:d3:42:b2:35:17:cc:02:09:d1:42:ca:76:f9:27:02:05:65:
9b:5a:26:69:77:47:33:76:3f:ae:07:f1:30:bb:4d:fa:ae:f2:
d8:b0:2b:fa:42:df:7e:4c:9c:85:ac:da:14:c0:7e:9c:8e:e5:
0f:e0:39:cb:00:ba:07:29:4d:30:8c:b6:aa:4d:78:ba:e4:87:
81:da:25:89:23:fe:c8:12:60:cc:5d:93:bf:33:92:63:0e:cf:
aa:3e:83:9f:91:46:c8:9d:c4:e3:86:ac:7d:81:5d:13:dc:ba:
5f:f8:f1:da:5d:33:d3:97:3b:e5:f7:7d:44:f6:64:a0:da:cb:
78:18:0d:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDqWSRzVXObicOxmlmHUfk1HX2E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFFOUJG
RjkwMDkxNzAeFw0yNjA5MjcwODA0MzFaFw0yNjA5MjgxMDM5MzFaMDMxMTAvBgNV
BAMTKDY5NEY3RDhGREZEQjVDMjFDNUE2MEFGMjc1RUZFQ0I1Q0ZCMDdENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPazXrlWJTuOkUAUxW06cg5n5p
zNcUzfiDzxC3/5MlPMOaqn9+4qDsXYkmy2P94nnErROerb8RPlYQUu1cNuegoH7i
MUX40v3wyngVvZ1N8UNGizkPyAhRs24da165IyD338PPllW4Au8eIDH2SR8QjIn9
BtOk5Bv7E3n1y/4fUa7TjdwzLG0OekGerT/jOGuTIW3OXAJSs5dzLarpUOpDfyK4
Y07hDVeXjixnDVaLFFQwc1TkhyyB8BrKOHAbsuduingO+pXi60Kf1VVMHSG2xzTV
Hw/XYj2F1i9jQnBdyZSLLpVXIDMdqa5+ol9e9M/XHTlCzo8DzPuXzEgYO743AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaU99j9/bXCHFpgryde/stc+wfUMwHwYDVR0j
BBgwFoAUg7LbdHvtGuAd0LivCN+um/+QCRcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDI4ODc2MmMtM2ZjNS00OWNjLTk0OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3
QkVEMUFFMDFERDBCOEFGMDhERkFFOUJGRjkwMDkxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84M0IyREI3NDdCRUQxQUUwMUREMEI4QUYwOERGQUU5QkZGOTAw
OTE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0
OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFF
OUJGRjkwMDkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHm+I8qHeM6RsXENjmbLPzUW2cz14vuy2Qal
h0tDc/IuHmn3TFalEbGNlCoeUo/lCOKa6agTz3AMIpvPgAUi4vK8q1tvWYDdW6lo
AhLdDayjuyZSxCfYOwJDe+oJNd+AfD6NGkuW2FXJB/mE08kQ9DsCmA4t0HCUyxt8
ch5A6bTTQrI1F8wCCdFCynb5JwIFZZtaJml3RzN2P64H8TC7Tfqu8tiwK/pC335M
nIWs2hTAfpyO5Q/gOcsAugcpTTCMtqpNeLrkh4HaJYkj/sgSYMxdk78zkmMOz6o+
g5+RRsidxOOGrH2BXRPcul/48dpdM9OXO+X3fUT2ZKDay3gYDZg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:15:53 2026 by rpki-client