
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
File: 7705E223B413A31F5B5C47149EFBCA7585682B42.mft (raw, json)
Hash identifier: QMlz2wl0QhxnmLalrGuoTLaxvvNOQcSDYNnBpQIj8XQ=
Subject key identifier: AF:49:13:0C:21:62:BB:74:E8:C6:CF:F5:EF:11:77:75:5F:50:30:06
Authority key identifier: 77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
Certificate issuer: /CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Certificate serial: 0B710A24A86E79DE2B5FD0658674ED619CB7DD41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
Manifest number: C1
Signing time: Tue 22 Sep 2026 10:04:02 +0000
Manifest this update: Tue 22 Sep 2026 09:59:02 +0000
Manifest next update: Wed 23 Sep 2026 11:51:02 +0000
Files and hashes: 1: 7705E223B413A31F5B5C47149EFBCA7585682B42.crl (hash: ktNsKTcohJSQyiEVE0oFexwOf7yUZm4ZmKz40NAreVU=)
2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: s99ZTaHI8AEsUmlddmqA7MWNsPpN7nJom6XrkndDWvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:71:0a:24:a8:6e:79:de:2b:5f:d0:65:86:74:ed:61:9c:b7:dd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7705E223B413A31F5B5C47149EFBCA7585682B42
Validity
Not Before: Sep 22 09:59:02 2026 GMT
Not After : Sep 23 11:51:02 2026 GMT
Subject: CN=AF49130C2162BB74E8C6CFF5EF1177755F503006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:79:52:a1:73:9a:8a:fc:50:ca:b6:4c:cf:
50:85:c9:a8:20:7e:f6:16:f7:35:6d:1f:ac:bb:72:
66:76:b2:17:59:54:77:b6:71:23:cb:2b:11:b9:38:
9e:cc:9c:b8:9c:bd:ad:d9:89:75:b0:32:29:8f:c8:
a3:c9:0d:12:29:39:52:f9:a6:aa:6d:47:4b:a7:b3:
32:a1:f9:38:b9:c6:25:a9:0a:4c:9d:77:50:17:52:
af:06:cf:c3:d7:70:64:a4:38:3d:40:03:cf:66:da:
43:fb:65:ea:44:26:9e:f3:3b:ad:0a:50:9b:ef:d3:
3e:da:0a:af:07:95:fe:52:02:4f:3c:79:16:a8:d5:
a8:2b:ba:a0:a2:f2:f4:c4:d8:ae:79:b2:c4:94:57:
93:97:c9:a8:2d:4c:8e:47:a2:61:d0:64:4e:56:a6:
53:09:ea:ac:71:6c:e0:32:a8:66:a7:c4:f1:64:bf:
5c:b1:c2:64:38:e1:26:ec:46:96:88:75:9e:1d:8c:
a3:05:40:bd:71:45:52:1a:0a:98:af:f3:04:8c:b4:
33:84:83:0d:25:fc:6d:21:4b:03:0f:8d:d0:ac:af:
5e:43:2f:92:ab:71:e3:6d:00:e6:ff:83:57:32:7e:
c5:7a:1e:53:f3:46:92:63:c1:9d:bf:9f:0e:16:48:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:13:0C:21:62:BB:74:E8:C6:CF:F5:EF:11:77:75:5F:50:30:06
X509v3 Authority Key Identifier:
keyid:77:05:E2:23:B4:13:A3:1F:5B:5C:47:14:9E:FB:CA:75:85:68:2B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7705E223B413A31F5B5C47149EFBCA7585682B42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/7705E223B413A31F5B5C47149EFBCA7585682B42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bc:a4:0f:db:6e:ef:e7:61:e6:9b:5b:f4:c4:0c:f3:72:cd:
5a:00:bc:0d:7f:83:89:32:91:9d:99:4e:b3:e2:91:15:07:a0:
82:66:56:a6:36:e6:a2:f3:7b:ef:f7:e7:d3:0d:3e:de:68:5c:
1a:ca:f5:f0:0b:ba:cc:f5:02:bd:8b:bf:14:b6:c7:01:b4:a5:
91:fb:b0:0e:f7:e1:55:86:29:07:22:17:7d:33:7f:65:5a:e8:
52:62:9b:42:41:20:67:b8:52:6d:ed:3a:44:d9:ba:b1:58:71:
65:f9:18:61:fe:ef:18:2c:42:0a:10:0f:89:56:f6:46:73:00:
26:8f:52:31:96:2f:f5:59:fb:59:a4:1d:b8:0e:e7:a2:e1:a2:
ec:2b:d9:0d:8f:23:2e:00:4d:e2:b2:92:75:91:f7:67:f5:04:
35:2a:a1:e6:d6:1f:7e:98:9f:8e:9e:f5:b7:59:f7:c6:ac:3f:
6d:b7:30:96:da:08:dc:a0:e7:06:dc:a8:d1:68:0d:6b:42:0b:
a1:fa:fb:6f:f7:b1:97:73:4d:bd:ec:43:64:cc:58:9a:f9:80:
b1:3e:3a:c0:87:9d:8a:08:e4:d5:79:29:14:43:f2:86:7b:c0:
cd:94:12:c5:ea:a3:8c:e5:ed:dc:78:66:db:28:b3:d8:26:cb:
79:78:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:56:38 2026 by rpki-client