
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
File: 7FAE1489FF53B0236543706FB85A70734890458C.mft (raw, json)
Hash identifier: MvorZHslWIGvgAp+yA99/zarUnbVWPAOX9hDY8WZuzg=
Subject key identifier: 82:59:5F:F9:3F:1A:25:AF:88:4C:BF:76:73:08:78:2D:A7:BD:2B:76
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Certificate issuer: /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial: 6D6F0B427FDEE28820221AF961655EFECF213B9B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 12:16:41 +0000
Manifest this update: Tue 22 Sep 2026 12:11:41 +0000
Manifest next update: Wed 23 Sep 2026 15:21:41 +0000
Files and hashes: 1: 7FAE1489FF53B0236543706FB85A70734890458C.crl (hash: L3Z/dbaInsN46zAGyNjdyYrAVRMBduUY8s0IzwYf+F0=)
2: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: 67tLYB0A33fJCbu/P8oKthW+WxAqMc2wdryTZw9cK1c=)
3: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: 6M66XRhDFpnkGG9KVSAo4c89kPTU1jvZczvHe42e5Vk=)
4: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6f:0b:42:7f:de:e2:88:20:22:1a:f9:61:65:5e:fe:cf:21:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
Validity
Not Before: Sep 22 12:11:41 2026 GMT
Not After : Sep 23 15:21:41 2026 GMT
Subject: CN=82595FF93F1A25AF884CBF767308782DA7BD2B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:cf:9a:df:ff:73:c7:0d:b0:ce:7b:6d:36:
b0:6b:b5:16:5f:22:75:77:0e:11:ad:73:e4:47:5e:
60:70:95:c6:af:68:4b:89:6c:c7:bc:1b:d5:c6:a8:
03:87:9e:d0:04:8f:55:cf:01:c0:df:f3:07:c1:35:
bb:12:62:c7:12:00:17:a8:5a:c3:46:09:de:fb:06:
fb:17:4a:fd:69:f0:0b:39:6c:5c:5a:3f:fe:e8:33:
7e:3f:75:74:94:fe:d0:c1:47:f7:51:46:8b:86:ce:
6f:e2:b8:be:fb:93:6d:d9:07:08:4f:7c:9f:d3:9b:
98:19:8b:5e:61:30:36:6b:ef:dc:32:a3:03:db:0a:
00:09:94:27:0e:28:7f:f3:09:f6:17:af:2c:c5:6d:
3b:55:9d:b5:61:b7:ae:b7:bb:e9:43:a0:f3:bb:2e:
aa:69:30:e4:1a:f9:1b:37:3b:5f:92:4c:da:d4:9e:
90:cf:06:19:c2:63:0a:3f:c3:e0:d4:fb:7a:77:b6:
69:c2:ab:1f:46:e7:70:4e:d1:22:8c:36:7d:e0:2f:
20:87:5b:b8:98:c1:41:a7:de:19:4c:78:b6:e9:50:
6f:1d:8c:07:75:90:6d:33:2b:01:ab:14:a5:39:0a:
d1:82:f9:9a:98:4c:54:99:ca:18:ca:b8:fa:96:49:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:5F:F9:3F:1A:25:AF:88:4C:BF:76:73:08:78:2D:A7:BD:2B:76
X509v3 Authority Key Identifier:
keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:d0:98:05:af:61:1b:28:f2:58:77:cc:6b:e7:26:3a:cb:
ee:39:10:02:39:bb:20:13:d9:dd:4b:f5:94:d8:74:60:ad:c2:
9d:6d:dc:6a:3d:9f:1b:cf:1c:ce:c1:3d:6b:58:7d:dc:91:64:
cd:17:48:ef:77:08:c9:76:3d:6d:0c:38:dc:5a:de:8c:5e:ae:
59:1f:da:a7:7e:a6:da:2e:6d:d6:70:fb:4f:7a:ed:69:3c:51:
ed:18:5c:af:64:48:bc:42:8e:ce:a6:6f:8d:ac:cd:7a:34:ad:
f9:e4:c5:74:a4:be:c9:b5:1c:44:e3:d3:8b:a3:87:44:58:ec:
cc:59:84:2b:7f:72:f0:84:63:f4:ea:74:66:2f:5d:43:b9:77:
17:65:b6:4a:03:d0:5f:68:25:f9:3a:63:dc:79:da:9a:03:89:
75:52:da:38:8f:2a:2c:c3:4a:aa:91:3a:62:33:92:f2:bf:c7:
e6:e3:ad:50:5f:b8:e8:35:cf:fe:b8:0c:14:a2:3c:0a:3e:4b:
d3:98:08:82:5b:93:8c:61:05:11:97:f8:23:a0:3d:bd:bb:d8:
eb:8a:09:47:d7:9d:5c:91:1a:1f:6b:8a:df:77:31:73:63:a0:
58:46:56:be:cd:19:43:0b:a9:6d:0d:2a:45:72:61:7e:9e:b8:
e8:c0:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:12:11 2026 by rpki-client