
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.mft (raw, json)
Hash identifier: n0Yvp8ahAlsNXxuaWceoos8nvvuQ4mb7V2wF3QHEztM=
Subject key identifier: 6D:F7:94:B8:7E:FD:64:4E:90:40:98:C6:D9:29:32:87:92:18:11:24
Authority key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94
Certificate issuer: /CN=84D8D73F40AAC54FA5471C49D1B0B26082108594
Certificate serial: 1DC2B68D03919682CB0DDE27F9CB9E9A0523F6D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 15:19:15 +0000
Manifest this update: Wed 29 Jul 2026 15:14:15 +0000
Manifest next update: Thu 30 Jul 2026 18:22:15 +0000
Files and hashes: 1: 84D8D73F40AAC54FA5471C49D1B0B26082108594.crl (hash: XhGWoV+19HiTVU7vRURl+925xBB5xE9JEq+S5Xb7MN0=)
2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: ZTH11IqUBjUloy94Wjo3h3nzkEwNWGDprNQQAIlXj6U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl
rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c2:b6:8d:03:91:96:82:cb:0d:de:27:f9:cb:9e:9a:05:23:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594
Validity
Not Before: Jul 29 15:14:15 2026 GMT
Not After : Jul 30 18:22:15 2026 GMT
Subject: CN=6DF794B87EFD644E904098C6D929328792181124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:83:b8:18:1a:46:91:cd:50:fc:90:5e:3e:
dc:d3:4f:ae:4f:74:dd:66:87:44:f0:91:fd:99:99:
33:e3:5e:11:ff:c0:bf:2c:bc:8f:85:35:33:32:42:
11:df:ce:67:4f:a5:9f:67:91:2a:68:cd:18:a8:7e:
80:b0:b9:19:74:b5:69:d3:5b:66:3e:87:d4:8f:dd:
4c:b8:ae:ed:01:00:c5:e6:92:0d:1b:77:7d:c9:12:
2d:9d:aa:22:64:d8:7a:21:3b:25:42:57:90:e9:f3:
11:b3:18:29:70:9b:ac:9f:e5:65:bc:8a:5a:50:2d:
a6:30:0e:b4:a3:8e:ca:a0:ff:7d:35:47:f9:1b:c3:
88:43:f7:80:05:b0:8a:24:d4:85:93:f1:4b:66:c8:
79:43:33:5a:1d:99:3f:e3:c7:69:8c:c4:ad:09:e2:
66:73:8f:a8:c5:c2:fc:15:b7:e1:8f:93:cb:20:25:
93:94:a3:20:e2:89:c5:1e:cf:d7:0e:ff:59:bc:47:
05:ec:e6:93:6c:78:f4:fa:99:e3:f8:1a:7e:42:ab:
a8:12:51:67:dc:ca:68:e7:29:71:0b:de:e0:28:2c:
d7:ef:1d:25:d9:4e:7b:5f:6b:1a:3f:6c:d4:2e:cb:
d2:18:09:5e:5a:62:6f:21:0a:53:25:e9:15:0c:61:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:94:B8:7E:FD:64:4E:90:40:98:C6:D9:29:32:87:92:18:11:24
X509v3 Authority Key Identifier:
keyid:84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:90:ea:96:c3:87:e2:db:ac:fb:b1:96:a8:0a:f1:0c:97:c8:
2d:d6:8d:b9:df:96:04:6e:6f:49:62:34:f5:0b:2b:b9:2f:56:
48:53:72:c0:55:5b:c3:9e:9d:1f:f9:08:63:10:79:33:90:3f:
72:62:e8:ad:0f:74:f9:bc:0f:ca:94:bd:e2:3b:e3:e7:bb:a0:
40:a4:33:b1:f6:12:ff:b3:23:7b:58:be:d7:60:09:75:0f:99:
92:ed:e1:de:85:9a:b6:86:ce:1c:6a:d5:c9:91:f4:cb:1a:86:
5d:c2:38:26:af:24:83:e8:7f:c5:b8:67:c1:e9:e3:71:80:fd:
71:3d:c0:fe:17:b8:ef:7b:dd:aa:c2:0e:a5:6f:a2:a6:a9:9b:
0f:18:1b:b1:53:16:75:ba:c3:2d:f1:6c:05:2b:29:b6:7b:d0:
1a:95:fa:c9:70:a4:f0:3e:8a:cb:e2:dd:be:ee:db:b1:31:4b:
04:c2:cf:e0:8c:1d:fd:48:8f:d3:df:27:28:c3:e0:4e:d5:bb:
10:70:19:a9:31:2c:ab:67:c9:cb:c5:3b:49:49:0e:6e:f3:b5:
b6:35:b3:37:24:63:dd:12:90:3f:69:77:29:2f:5f:ac:4f:aa:
ce:4a:c8:16:50:2e:d1:6d:3b:f1:48:db:29:8e:82:eb:87:eb:
19:1c:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:21:21 2026 by rpki-client