
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
File: 1F79347E34F3842F873687AE47DBBF7766D07A56.mft (raw, json)
Hash identifier: 4R2bDQmkmnEf1WPITBX4+TzsNntgt5izJ8HCCDD4zu8=
Subject key identifier: 48:5D:DE:52:43:50:95:58:6B:81:A6:AB:BF:95:A4:02:4F:12:35:46
Authority key identifier: 1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
Certificate issuer: /CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Certificate serial: 05EBC5A03AE4F3A89F2842223E6C7C6B14E091AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 10:19:20 +0000
Manifest this update: Tue 22 Sep 2026 10:14:20 +0000
Manifest next update: Wed 23 Sep 2026 11:24:20 +0000
Files and hashes: 1: 1F79347E34F3842F873687AE47DBBF7766D07A56.crl (hash: xfZrGTnD7bCnFQiKmz2RbE0z34TSgyLZJWqEo7IoCUY=)
2: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: IhJRuurUuWDmTvgR8yruimtO/1dpCuEM0vPXvZRgIY8=)
3: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: roZTxY6zUAfeDTuWXo3yf76eU6YZOOXLfUlqD2CCnWI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:eb:c5:a0:3a:e4:f3:a8:9f:28:42:22:3e:6c:7c:6b:14:e0:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F79347E34F3842F873687AE47DBBF7766D07A56
Validity
Not Before: Sep 22 10:14:20 2026 GMT
Not After : Sep 23 11:24:20 2026 GMT
Subject: CN=485DDE52435095586B81A6ABBF95A4024F123546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:02:64:31:e5:72:36:f4:93:19:1f:65:8c:
87:89:1d:f1:6f:2d:28:41:b7:f7:13:b4:10:a5:f7:
e6:27:cb:7d:3e:73:7a:a1:4b:7f:09:de:db:0a:b4:
2f:7f:60:51:5d:2b:77:ed:91:ac:61:12:9e:6f:e7:
7d:52:1f:39:04:48:77:f9:ec:d7:62:cb:e4:69:d7:
5a:cb:fa:cc:6f:e0:95:64:cd:47:74:b7:d0:5c:db:
55:4f:7c:68:51:6d:68:b9:74:17:89:2e:8e:b1:c5:
f5:25:b2:7e:81:e6:d2:50:e0:84:3e:cf:9b:ff:e7:
38:8f:e9:02:a4:04:29:cf:a2:a2:3e:54:57:b9:d0:
4e:52:9f:42:df:6d:97:82:db:ab:74:99:fb:e5:e2:
b5:79:8c:72:2f:ae:60:29:3d:6e:69:72:c3:1e:fe:
61:de:a6:f2:fe:cc:f5:99:7c:59:e7:0c:b6:29:38:
32:6e:05:d7:92:b1:f4:c1:ff:10:70:46:fd:fb:45:
cc:bf:00:d5:16:9f:d9:99:89:f2:ea:d3:9f:30:32:
7b:80:91:2f:62:77:01:a0:71:b6:21:df:f7:06:ac:
87:ce:2d:0a:06:60:9e:53:2c:22:dd:45:c8:24:28:
be:d3:47:59:fb:94:ff:28:b4:aa:7a:bc:69:42:2b:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:DE:52:43:50:95:58:6B:81:A6:AB:BF:95:A4:02:4F:12:35:46
X509v3 Authority Key Identifier:
keyid:1F:79:34:7E:34:F3:84:2F:87:36:87:AE:47:DB:BF:77:66:D0:7A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F79347E34F3842F873687AE47DBBF7766D07A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/1F79347E34F3842F873687AE47DBBF7766D07A56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:14:f1:00:e0:35:5a:32:22:c9:ce:e0:46:ff:3b:a6:c9:90:
73:6b:6e:9a:1f:58:43:40:c1:30:e0:c7:6f:21:e9:9b:e2:88:
99:a6:fc:01:3a:7c:30:c7:3b:f1:1e:5c:24:aa:34:74:36:f8:
ff:67:c6:00:c9:fb:28:e0:aa:94:4e:84:89:8d:64:66:44:c2:
7b:0b:b5:fb:bc:f4:ad:13:c8:45:57:86:67:2c:ec:8d:c5:af:
b7:ee:2d:e9:aa:7a:80:41:69:9c:ec:25:43:32:45:b8:53:0f:
fc:08:79:91:05:36:fb:6c:51:e1:ee:ff:4c:5f:43:a8:e8:d7:
cc:85:39:e7:bf:4d:1c:b5:ad:17:76:fd:a0:34:8c:09:0d:21:
20:04:d9:8a:6e:b4:48:c5:44:dc:21:96:44:48:d2:45:cc:e1:
98:c8:1a:d7:9b:90:05:71:4b:c3:f1:a3:59:7a:98:cd:e5:df:
eb:c2:b8:63:6e:4a:d4:09:8c:d0:56:12:52:e5:09:79:ea:9a:
3f:fe:7d:96:ed:2e:3e:db:e6:f5:60:0c:ad:cb:73:60:51:d5:
ff:59:d3:91:31:06:98:60:3a:42:c0:c2:90:dd:cd:39:35:ab:
d2:65:35:f6:11:d0:b8:9d:5d:e0:58:68:4f:2f:5a:35:9d:b3:
2e:c0:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:22 2026 by rpki-client