
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
File: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft (raw, json)
Hash identifier: b0GU+tUC8QT85Kv9ZeG2AONLW9bzXyFg5KDfRnS69lc=
Subject key identifier: 1D:08:8F:A3:8D:89:78:8B:AC:29:A6:66:B6:DF:E0:56:70:87:84:7F
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 32BFF30FC7C53A5D0A00BC2C4C1273A2CF92F19E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 13:07:42 +0000
Manifest this update: Mon 21 Sep 2026 13:02:42 +0000
Manifest next update: Tue 22 Sep 2026 17:02:42 +0000
Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=)
2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: jUIsiSJsjPDf0Krk/AfybK3xD1mWMXMOgk6ke4wG6/A=)
3: 08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl (hash: PukTxbQR8RhPkfCzPN/4rq0QjQ8G9LfjQfG72B6aaZI=)
4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bf:f3:0f:c7:c5:3a:5d:0a:00:bc:2c:4c:12:73:a2:cf:92:f1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: Sep 21 13:02:42 2026 GMT
Not After : Sep 22 17:02:42 2026 GMT
Subject: CN=1D088FA38D89788BAC29A666B6DFE0567087847F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:54:59:43:cf:f8:50:9a:66:ed:52:da:1c:
ca:64:2f:02:63:5e:b6:b6:2d:16:a3:6c:a2:d6:03:
f1:2c:7b:38:6a:e9:0c:32:d9:40:71:61:9b:91:84:
bd:cd:a2:21:18:05:d3:e7:05:9c:5c:48:0c:e9:f6:
6a:f9:00:15:fd:f2:5c:db:ae:e9:d8:49:02:51:2b:
46:03:50:36:63:c9:a1:a4:d8:ed:46:4f:71:c1:46:
76:a3:0f:77:0c:c9:3a:f2:08:76:d1:a8:47:ab:9b:
12:59:a8:6e:6c:27:b8:17:ed:81:cc:14:10:dc:a3:
6e:92:f1:a5:8c:1a:58:1a:87:2c:b8:c5:49:b9:be:
db:7b:fb:28:13:63:8d:29:9a:3a:6a:dd:c4:95:3f:
4b:51:0f:51:47:a5:1c:e5:4d:69:b2:1c:9f:9e:10:
fb:15:0c:48:39:b5:74:65:07:ca:0b:bc:3b:90:d9:
6b:f5:9c:3b:6a:a6:28:93:c0:ad:92:05:cb:3e:6a:
fc:02:4c:9b:27:23:39:9b:27:f0:48:76:66:09:b7:
c6:b4:d2:28:14:3d:98:bf:15:2e:f8:f6:ea:13:6f:
09:b8:51:e2:e0:44:bd:86:93:d7:cc:13:e6:cf:f5:
26:5d:e0:82:91:ec:51:c1:64:c7:15:8c:0f:0a:51:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:8F:A3:8D:89:78:8B:AC:29:A6:66:B6:DF:E0:56:70:87:84:7F
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:05:df:6d:d3:75:da:e5:ed:72:37:7e:a8:03:19:b8:32:ee:
77:71:4c:34:1b:87:8a:44:1b:2f:64:b5:26:0c:ad:65:d6:07:
3f:25:11:05:0e:22:b0:d7:49:76:6d:c8:16:97:3b:6b:81:ec:
ce:67:6b:15:fe:2c:31:14:5d:ad:cd:7a:a5:11:a4:ab:7a:6b:
91:01:e9:85:02:ea:d6:41:0d:67:8b:a5:ed:03:b8:89:1e:4f:
5c:47:8e:3b:da:df:87:24:2d:d8:aa:0c:21:95:5f:7b:24:d1:
b9:e4:09:47:41:9e:07:36:6e:31:bf:d7:4e:db:b1:aa:f2:56:
c5:d6:c7:8e:59:40:bd:aa:9c:b3:b2:19:92:ad:5d:27:cf:c5:
b6:51:82:49:a6:cf:2e:91:2f:2d:e1:9e:80:45:6d:d5:e0:56:
38:ef:03:54:e5:74:c4:08:bc:64:47:ca:dc:d9:4a:f0:8a:ad:
c3:61:b8:70:ca:23:39:7f:05:3f:c4:a5:0d:19:44:d5:cb:ba:
3b:ec:b2:6d:81:f2:27:13:f1:2b:15:4f:67:1c:bc:b0:dc:ab:
1d:42:bf:07:7e:12:ef:dd:de:eb:66:c4:99:dd:3f:56:9a:e2:
5d:22:86:18:96:f0:6e:ed:0c:9a:74:44:1c:35:75:f0:5b:6c:
a1:3d:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:54 2026 by rpki-client