
$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json)
Hash identifier: vZ6INvIt8hk8gn+vP6DfPOwlX1PdhyZ+Xv9vSNIw8MM=
Subject key identifier: 4F:F7:D2:D3:A7:8A:01:DB:9E:D4:F3:B0:CC:F8:A7:D3:B7:06:87:AF
Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73
Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
Certificate serial: 42FE61EBD000BECF92F545103B4C699F94DDC8B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
Manifest number: 0135
Signing time: Thu 26 Mar 2026 10:21:33 +0000
Manifest this update: Thu 26 Mar 2026 10:16:33 +0000
Manifest next update: Sun 29 Mar 2026 20:29:33 +0000
Files and hashes: 1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: mnSqyR3RvUZeDzULj46na5TXrgVuidk3q0TEVrMrbCk=)
2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: Ra05wkGB2Xe7FfSwCrcRzvRi0nxXzZPjhLkj6+5LETI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl
rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 20:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fe:61:eb:d0:00:be:cf:92:f5:45:10:3b:4c:69:9f:94:dd:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
Validity
Not Before: Mar 26 10:16:33 2026 GMT
Not After : Mar 29 20:29:33 2026 GMT
Subject: CN=4FF7D2D3A78A01DB9ED4F3B0CCF8A7D3B70687AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:6c:2d:b9:2a:71:3d:65:d3:30:67:4c:e9:
e3:4b:d5:ca:28:8c:d4:1d:e3:21:83:4d:d8:28:8f:
04:d1:06:f0:53:0e:2f:c1:b5:28:82:3c:37:28:d8:
aa:94:97:d9:48:36:10:c5:64:57:b6:2d:5f:06:a7:
73:f8:23:8e:e9:07:ee:82:4a:6a:b0:ec:08:00:2d:
aa:f1:50:a0:ad:47:32:a3:af:fc:c3:cd:33:37:11:
21:90:6c:7e:ca:d8:73:b2:0a:ce:30:16:3a:8a:49:
60:ef:c8:bf:4a:4f:57:d7:f1:13:67:03:bf:cc:81:
03:30:b3:89:26:7f:a9:a0:24:47:c8:43:61:59:39:
f8:ed:63:98:e5:9b:02:8e:07:b3:56:22:93:4d:ab:
41:93:e5:57:ff:63:e1:82:0b:ec:62:fb:90:97:2b:
47:ba:87:1b:ef:ea:ad:80:1b:bd:b8:21:c1:d1:ee:
32:d4:10:cf:a2:19:43:b9:fc:5d:ec:25:66:58:eb:
ef:df:de:83:e8:d8:36:13:b4:80:bc:d2:2f:34:19:
86:80:42:07:94:00:13:b6:22:e0:99:98:b2:e5:3c:
fa:95:da:41:cd:6f:05:59:d3:f9:79:35:27:73:ca:
1a:3b:17:be:1b:db:de:c2:36:e5:ab:86:9a:36:cf:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:D2:D3:A7:8A:01:DB:9E:D4:F3:B0:CC:F8:A7:D3:B7:06:87:AF
X509v3 Authority Key Identifier:
keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:a4:aa:74:32:82:1a:56:a8:21:fd:52:c9:93:b5:21:ca:
b2:93:1b:82:42:af:e9:35:f8:45:42:4b:f3:41:1d:15:55:b8:
ce:fb:5d:8f:b7:ef:0e:1e:40:72:03:58:f3:1d:88:3d:7e:54:
00:73:1f:f8:51:26:a8:d2:89:79:75:ab:59:26:b6:07:01:6e:
27:69:dd:15:83:9c:db:be:d3:49:4b:af:b0:38:8a:38:4d:42:
39:9e:fe:33:ba:5f:c7:6b:94:14:cb:7a:63:0e:cb:c8:f3:76:
61:56:68:5e:28:b3:2f:e1:ae:88:a5:c2:49:7c:b8:d8:6f:47:
28:3c:34:e4:62:a1:5c:45:73:34:88:1d:44:60:15:4e:e9:66:
de:d6:c8:e1:5a:1c:60:36:bd:01:f8:ed:76:4b:78:91:90:bb:
fc:4c:bf:bb:42:65:54:a1:d8:0a:b7:2b:e7:6e:05:de:e8:6d:
c2:53:29:e3:04:cd:21:c3:d2:3f:1a:20:fc:73:08:21:2b:31:
a9:ef:3a:d0:28:2f:23:f1:13:b9:00:1a:61:78:8b:9f:60:8f:
36:1b:d4:2b:63:b6:f9:4d:be:38:7e:01:2d:b1:11:2f:c6:7d:
3b:d0:00:99:7e:ab:72:dd:cc:24:ec:5a:bd:fa:69:c8:bc:5b:
25:2d:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:46 2026 by rpki-client