
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
File: 79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft (raw, json)
Hash identifier: Kx+CyJq/9PEYvpk54TDAA8B1DkSP4BUv+SNd0IB7aCM=
Subject key identifier: 73:92:57:7C:9A:AC:6F:16:94:61:84:AF:5D:9F:DF:C2:60:FC:78:6F
Authority key identifier: 79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72
Certificate issuer: /CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
Certificate serial: 686C54D7F14B0809792DEFD133A2A3A4F121B768
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 09:28:58 +0000
Manifest this update: Sun 20 Sep 2026 09:23:58 +0000
Manifest next update: Mon 21 Sep 2026 12:37:58 +0000
Files and hashes: 1: 79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl (hash: S/7zDMNumolJi7J7UfgHk5f140oeixgozTppNhPt6ys=)
2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: I2RP+h+ruVedIe2ZDABEWOHH2T2e3+KmQHhUPUy4u6I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl
rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 12:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6c:54:d7:f1:4b:08:09:79:2d:ef:d1:33:a2:a3:a4:f1:21:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
Validity
Not Before: Sep 20 09:23:58 2026 GMT
Not After : Sep 21 12:37:58 2026 GMT
Subject: CN=7392577C9AAC6F16946184AF5D9FDFC260FC786F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:27:e9:eb:d6:f9:ed:8b:0a:3a:96:ec:9f:
af:ce:16:9d:52:e1:1f:c6:b5:4f:3f:11:5c:06:64:
e1:bb:2a:86:37:85:3a:56:b1:2e:fd:4c:e6:75:ac:
d7:d6:87:b2:6a:93:cd:c7:e5:ea:9c:d8:ae:8b:c4:
70:37:65:ca:55:76:1c:2a:49:10:82:65:90:e4:f1:
e8:c0:fa:b3:9f:57:10:46:36:6b:e3:80:d8:bd:53:
66:61:95:c4:f4:18:22:68:b8:83:84:c7:44:b3:f7:
a0:fc:87:c0:4d:32:7a:0d:a3:5d:32:4f:04:03:51:
77:54:d7:4f:af:b8:d4:0d:48:2b:e2:a0:45:a4:14:
4c:f1:d5:48:9e:bd:84:6a:c3:b2:d1:a6:8f:08:29:
c5:c6:56:e6:26:c2:8b:0c:7f:26:65:51:59:1e:b3:
32:14:72:07:68:24:12:22:df:08:43:af:b4:23:9c:
54:db:26:3f:0b:4e:ee:48:69:9f:75:33:e5:92:3c:
e8:ae:c2:24:c6:85:d8:73:20:a4:06:8a:89:d1:b6:
21:00:70:f2:00:96:c7:bb:d6:da:6f:7f:2d:40:66:
4d:0f:c6:ae:b6:75:9a:f1:3d:0d:40:d6:38:3b:87:
3b:3b:9d:90:30:bb:d3:c0:cd:18:a6:de:27:a6:1f:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:57:7C:9A:AC:6F:16:94:61:84:AF:5D:9F:DF:C2:60:FC:78:6F
X509v3 Authority Key Identifier:
keyid:79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:50:45:70:6c:a8:81:88:86:96:5c:9b:b2:da:b9:da:a6:
73:9a:1a:df:e2:7a:72:a7:54:98:c2:da:f1:41:a3:f2:1e:84:
6e:36:22:5f:d2:a5:a0:fb:28:68:77:98:46:45:f7:00:a6:1e:
78:dd:ee:19:f3:e9:2f:a1:4e:a8:6d:8b:fc:fd:9c:e8:d4:c9:
e6:de:00:31:34:87:cd:02:e3:ba:8e:28:cb:61:d0:d2:46:aa:
08:12:0d:81:de:75:b2:5b:5e:bc:70:39:79:86:ec:82:03:d8:
9d:91:bf:d0:51:c4:c0:63:62:d5:9e:42:85:11:a9:95:3d:d0:
9a:6a:00:ee:10:a4:a2:3e:eb:85:1e:94:98:e3:3c:0b:63:0e:
28:52:dc:e4:92:00:57:f6:1b:82:28:c7:fd:d1:de:cf:63:8e:
de:e5:59:7d:51:4e:34:5c:cd:84:08:91:dd:b8:34:e5:41:73:
82:b6:5c:80:86:59:93:5c:5c:20:5c:c7:e5:5f:9f:b6:09:b4:
13:ea:b8:ba:f4:b9:ac:bb:5e:0a:da:7a:9e:18:d5:5b:b3:1d:
c5:12:52:cf:b9:a5:c0:8a:7e:ac:9c:d2:fc:b2:e7:30:0d:bf:
3c:4a:4c:dc:7e:e7:00:f6:b6:c3:28:46:6f:fd:14:be:9d:2b:
45:73:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:15:58 2026 by rpki-client