
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft
File: ED8801C97D629F0D5149E3C88E72600C016E4712.mft (raw, json)
Hash identifier: EM+ISNzFIJ/AoGQcAqZ2UUNBw02n5Y2P6RGlvSqx89k=
Subject key identifier: 6D:C6:88:98:55:A1:90:B6:DA:BC:DF:FF:F8:32:96:7C:36:7B:FA:8C
Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12
Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712
Certificate serial: 74095DCD1EF67EB6B76F469506A70AED3A3992D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 02:03:40 +0000
Manifest this update: Wed 29 Jul 2026 01:58:40 +0000
Manifest next update: Thu 30 Jul 2026 04:09:40 +0000
Files and hashes: 1: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: I+TsRodHPZi2sFygS9uUTvIPPJWZ6Ey7cdEpwFzA144=)
2: ED8801C97D629F0D5149E3C88E72600C016E4712.crl (hash: mnSVM8u0Hejm1CnC+ufS3pZIv1VJegN8vKMxDmxwHM0=)
3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: 6b6QyTeKHzbwr02KTRyuHru/9K2YvXjeEcMAT+18bak=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl
rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:09:5d:cd:1e:f6:7e:b6:b7:6f:46:95:06:a7:0a:ed:3a:39:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712
Validity
Not Before: Jul 29 01:58:40 2026 GMT
Not After : Jul 30 04:09:40 2026 GMT
Subject: CN=6DC6889855A190B6DABCDFFFF832967C367BFA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:8b:ff:99:fb:b0:75:ae:b7:a1:e8:33:4e:
c5:0d:1b:6c:0e:fc:5b:29:c8:9a:0a:5a:d9:d9:f6:
3f:89:6c:49:75:89:ee:c3:58:c9:9b:f8:92:12:57:
bb:70:21:73:03:df:8e:7f:2a:6c:4b:0f:a0:07:41:
5c:65:95:54:87:dc:48:ec:f9:1e:f9:55:0d:67:7b:
bb:7b:86:c4:73:71:da:f0:37:71:4f:c3:58:c3:85:
14:c7:21:be:8a:52:03:13:ed:dd:ef:60:18:5e:fa:
50:be:06:ce:5e:8c:25:f6:0d:e4:af:74:2a:54:21:
d1:2e:68:d4:f2:4c:fd:03:5c:02:0c:13:ae:ab:31:
50:a0:b8:b7:1b:57:ec:08:0d:aa:9d:26:ab:99:b5:
a3:a3:67:d9:4b:4e:0a:6e:78:95:a5:11:b1:3a:28:
18:29:22:d9:66:03:ef:29:a3:ca:72:ac:18:51:46:
b8:7d:1c:96:91:7f:51:f7:bd:44:4e:fa:1c:66:70:
08:bb:f3:1d:5c:da:ff:b0:e3:28:da:d1:21:e0:2f:
f9:0a:83:87:4b:9a:1b:60:b3:fe:0d:d9:88:6d:28:
ed:7a:7d:86:f4:2d:5a:75:97:08:b3:de:de:eb:aa:
f4:c8:cb:89:12:a0:a8:47:40:18:b8:7d:70:bb:df:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:88:98:55:A1:90:B6:DA:BC:DF:FF:F8:32:96:7C:36:7B:FA:8C
X509v3 Authority Key Identifier:
keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:dc:e7:3e:61:a4:0a:b8:01:e6:37:6e:b4:73:76:2f:ac:
06:32:7e:ac:a2:ec:86:df:d5:2f:97:7f:fd:c0:4d:22:57:df:
85:6f:33:9e:4d:82:7a:05:18:96:02:86:c2:16:89:24:7c:8f:
6a:70:39:b3:64:b8:06:d7:df:fc:0c:a0:68:5a:d5:c7:f7:28:
10:0a:f6:0d:f4:21:e5:cb:44:cd:8b:a9:54:6a:e8:ff:f9:7d:
f1:58:b3:2c:42:fd:65:e4:40:32:39:8e:65:e7:b0:22:9c:28:
4f:05:53:88:d1:ba:a6:da:20:ab:c4:ef:b4:0a:bf:42:57:b1:
27:1c:e1:6a:36:57:35:5e:c2:eb:72:49:3e:ce:88:0d:12:90:
f5:65:c5:a7:01:47:41:08:0a:db:b8:3e:fe:5d:74:bb:e8:9c:
85:3f:e7:bc:ac:f5:4a:b2:06:36:2a:79:46:1b:07:ec:b6:bd:
50:d2:42:0d:1b:0b:c4:30:fc:c9:fc:58:c5:f4:e7:26:ed:37:
02:8c:54:0f:cc:ec:90:f3:b1:c6:02:ea:b2:36:da:82:6d:dd:
91:53:66:18:54:be:8c:31:51:f2:29:c6:e8:ae:cd:fb:b9:69:
b3:6d:44:a3:e8:e6:71:77:c2:97:47:76:cf:69:e9:84:80:f0:
26:b9:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:12:33 2026 by rpki-client