
$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
File: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft (raw, json)
Hash identifier: xroFTtXGhUiDgmqN+7eyf8U+wUgpASvwF0KU7v2wnXM=
Subject key identifier: 1D:95:20:0E:68:13:2F:A7:70:99:9F:15:79:82:74:42:3A:72:98:96
Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
Certificate issuer: /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Certificate serial: 41947742ACD3DBD655ECDE951C266D0B09BBAE8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
Manifest number: 0201
Signing time: Tue 24 Mar 2026 17:41:42 +0000
Manifest this update: Tue 24 Mar 2026 17:36:42 +0000
Manifest next update: Sat 28 Mar 2026 00:47:42 +0000
Files and hashes: 1: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl (hash: ucIjiKeTztIBZhPdWXP2MV5DmL/TTO6rsTX0TVMTx08=)
2: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: 2/Qb3c0bt3pvu3MOhYdRbpd22v0hv9oGMy4MRimk3NI=)
3: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: TpxCUfp4Af1tupXiHm2v8CcxDZArBtsyxFgzO8Ydoi8=)
4: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: Nk9phGucQoo8PmtyMYR++nZZTYHkNvUwA44i3ekXmE8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl
rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:94:77:42:ac:d3:db:d6:55:ec:de:95:1c:26:6d:0b:09:bb:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Validity
Not Before: Mar 24 17:36:42 2026 GMT
Not After : Mar 28 00:47:42 2026 GMT
Subject: CN=1D95200E68132FA770999F15798274423A729896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:69:12:a9:bc:1a:cb:60:66:da:73:2b:9a:
5a:e8:5e:13:8c:1f:0d:19:5c:af:00:3e:5f:6c:c4:
db:f6:a4:31:e0:f0:c0:87:75:fa:07:63:12:3b:35:
60:32:bc:0b:79:ba:43:c0:68:ca:b1:0b:d2:ee:0c:
03:53:94:07:e4:3f:7d:a0:07:92:ac:f5:73:c2:f2:
ee:e2:80:35:af:2e:65:b5:59:65:70:eb:1a:a1:9e:
de:96:7b:ff:1e:76:23:33:76:c4:1d:59:7f:7c:91:
e1:f3:0e:f7:2e:bc:33:fc:de:7e:d9:61:b7:4b:de:
67:f1:f6:04:e1:bc:97:54:73:c4:35:ce:97:f7:c7:
7b:67:7d:4d:16:63:72:ff:bb:8b:d4:78:af:81:1e:
17:72:5d:0c:7b:3a:a4:bf:3a:9d:43:ce:59:b3:85:
5c:8f:d8:dd:53:14:e8:ea:b5:04:31:58:e9:80:49:
02:5b:32:15:9d:78:e2:c0:4d:95:fd:25:d3:a2:fe:
e3:d4:d2:52:e3:88:a2:78:9b:c1:51:ef:bd:06:c0:
71:4e:48:21:61:77:4f:e5:50:10:1f:c0:7c:e7:78:
9c:1d:62:d6:c8:1d:b6:90:46:ff:66:6d:25:12:17:
5d:07:15:87:07:bb:d4:73:e4:a6:83:2f:fe:2c:9f:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:20:0E:68:13:2F:A7:70:99:9F:15:79:82:74:42:3A:72:98:96
X509v3 Authority Key Identifier:
keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5f:6c:99:e9:a7:0f:a6:61:33:c2:1e:ce:76:43:62:11:e6:
70:2e:53:0e:9a:62:4a:85:f9:5d:37:cc:e9:be:81:5c:98:62:
1e:b5:69:e4:aa:d4:0c:a7:2f:b8:e2:39:86:9e:c3:2e:95:d7:
ca:f0:a4:22:9a:86:b5:3b:30:88:19:a0:b1:6e:20:0d:04:b5:
8c:ad:c3:0c:30:47:80:a7:ab:cf:0f:14:ec:c1:05:4a:d5:50:
79:1f:8f:05:9f:27:8a:ef:b3:e4:66:90:b4:c4:d0:77:5f:e5:
3c:3a:59:e9:d7:52:48:a3:e7:95:da:19:bc:85:03:3a:93:ba:
45:73:c9:36:ff:f6:d7:61:71:9d:d0:d6:72:4b:52:49:22:8a:
f8:d5:31:46:ad:17:e9:01:be:e6:23:69:9c:3d:27:74:3d:92:
11:9c:e6:09:28:c4:79:4b:a7:ca:96:6b:95:40:05:31:0c:a6:
00:b4:26:fc:0b:f5:1c:6b:a9:d6:d5:d8:38:fd:d6:ac:83:4e:
c8:25:ea:35:e6:37:da:97:45:20:b5:fa:0e:18:c9:d9:f9:73:
44:c6:3c:be:75:98:ff:49:27:3e:2d:75:fe:b0:46:57:2c:e3:
0a:11:6d:f5:40:e0:0d:c5:50:de:82:44:e6:04:d8:00:de:c5:
ad:62:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:37 2026 by rpki-client