
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
File: 7114DCC67CA188857960AB8205FF64878ABC3A2C.mft (raw, json)
Hash identifier: Hq8F5t0zQZqSOCF8Rr7TtCSG02MlwLH2GMy0NwQwGbY=
Subject key identifier: 10:E3:4E:52:C4:80:D1:FF:E3:65:7B:F2:A1:03:29:78:99:58:EB:3F
Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
Certificate issuer: /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Certificate serial: 3CAAA1C84ADE16CE5298A2AE0D8D53B3A0F97C6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 15:28:29 +0000
Manifest this update: Fri 24 Jul 2026 15:23:29 +0000
Manifest next update: Sat 25 Jul 2026 17:53:29 +0000
Files and hashes: 1: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: XXL+jrySck8YOfCgNHqgkAmnQwL01WtL6AIXMhWluBI=)
2: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: dM86g1KJjcw4ZcRJ1Gbl9gY8oFj7Vsah0QHgp5jAvIU=)
3: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=)
4: 7114DCC67CA188857960AB8205FF64878ABC3A2C.crl (hash: cCJpgoDqqmNMJvohwTdJEaM2g4bixXSvvS22cYycyc4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:aa:a1:c8:4a:de:16:ce:52:98:a2:ae:0d:8d:53:b3:a0:f9:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Validity
Not Before: Jul 24 15:23:29 2026 GMT
Not After : Jul 25 17:53:29 2026 GMT
Subject: CN=10E34E52C480D1FFE3657BF2A10329789958EB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:ab:67:7a:7b:fe:45:98:c4:9f:06:da:b1:
4a:a4:4f:af:b7:2c:57:c6:86:23:d2:ec:24:f3:39:
ed:f1:20:95:2b:14:83:12:64:a6:c7:d5:4f:14:d4:
98:6a:4e:39:39:4c:a2:71:61:4e:ad:4c:20:52:cd:
da:44:46:47:65:06:85:94:89:9e:ab:1e:b8:a8:26:
f1:a3:0b:80:9f:c3:9b:19:2c:43:74:cf:76:38:fe:
17:f6:f2:43:9e:f1:42:c8:6d:de:b7:1b:9d:f2:24:
ee:10:c9:f5:d8:55:ec:3a:77:1c:95:64:4a:d5:89:
c6:07:14:95:18:3d:81:a7:f4:ba:70:5b:50:6d:6d:
9e:55:31:3a:84:d6:16:fc:61:32:b0:80:47:7d:1e:
12:cb:c4:dd:0d:4a:5c:16:d5:a2:8e:66:94:e3:c5:
c4:8e:d3:9d:82:76:b4:31:d9:26:ba:de:f5:57:dd:
c5:3c:d2:d0:4b:06:65:78:06:43:d8:15:3e:89:1c:
82:0c:75:51:f1:03:6c:f6:43:b8:04:87:ee:c5:9f:
4f:e1:cf:5e:c7:f7:2a:df:80:56:ff:6a:a2:47:31:
4e:8c:50:f2:91:41:ef:83:fb:dd:41:8c:fc:a6:81:
85:f9:c8:a2:c1:2c:f5:83:5a:4f:ce:d4:5f:8a:9d:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:4E:52:C4:80:D1:FF:E3:65:7B:F2:A1:03:29:78:99:58:EB:3F
X509v3 Authority Key Identifier:
keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a5:bf:ef:86:4d:7b:7a:3e:b1:fd:b1:03:04:0b:34:12:9b:
1b:3e:19:3b:03:dc:fb:1b:65:25:e4:5d:ef:91:0b:9f:0b:8d:
c5:9e:0f:1c:29:0d:85:ad:b0:88:0c:2e:d5:0b:30:0e:f9:ae:
a5:2f:85:e2:82:e9:ea:dd:be:a2:74:53:89:9a:71:c0:0c:0e:
a1:31:8b:68:b8:65:36:1e:08:c7:b2:db:5a:54:2f:21:83:af:
fa:67:33:9b:7c:b8:9a:a8:64:47:44:3b:a8:b1:c1:78:22:52:
37:3d:26:eb:10:db:a0:5b:2e:bd:32:67:80:d3:47:f6:ba:2c:
ea:58:4f:a9:8f:5b:39:ea:bc:02:39:8d:93:65:b7:29:28:b5:
f7:9d:3e:11:c9:53:ef:0a:8e:bb:73:ba:bd:0d:a1:ae:a1:13:
b4:24:ab:85:3a:c7:11:92:8f:70:24:3a:69:b1:df:b4:c7:1a:
e3:53:9c:84:e2:cb:60:29:c9:81:d7:6e:88:02:81:db:75:46:
90:d0:f3:ab:bf:1b:dc:49:f1:74:e4:72:de:6d:bd:4d:2c:39:
d5:3a:56:dc:38:c7:52:e2:39:b3:05:c3:2a:b0:37:2a:80:ff:
8c:86:28:5c:33:eb:33:28:6b:15:8e:59:38:62:f6:70:68:09:
10:d9:1b:a3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPKqhyEreFs5SmKKuDY1Ts6D5fG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4
QUJDM0EyQzAeFw0yNjA3MjQxNTIzMjlaFw0yNjA3MjUxNzUzMjlaMDMxMTAvBgNV
BAMTKDEwRTM0RTUyQzQ4MEQxRkZFMzY1N0JGMkExMDMyOTc4OTk1OEVCM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn36tnenv+RZjEnwbasUqkT6+3
LFfGhiPS7CTzOe3xIJUrFIMSZKbH1U8U1JhqTjk5TKJxYU6tTCBSzdpERkdlBoWU
iZ6rHrioJvGjC4Cfw5sZLEN0z3Y4/hf28kOe8ULIbd63G53yJO4QyfXYVew6dxyV
ZErVicYHFJUYPYGn9LpwW1BtbZ5VMTqE1hb8YTKwgEd9HhLLxN0NSlwW1aKOZpTj
xcSO052CdrQx2Sa63vVX3cU80tBLBmV4BkPYFT6JHIIMdVHxA2z2Q7gEh+7Fn0/h
z17H9yrfgFb/aqJHMU6MUPKRQe+D+91BjPymgYX5yKLBLPWDWk/O1F+KncgbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEONOUsSA0f/jZXvyoQMpeJlY6z8wHwYDVR0j
BBgwFoAUcRTcxnyhiIV5YKuCBf9kh4q8OiwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDNhNzlkOTUtNjRhOS00ODA5LTk0YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3
Q0ExODg4NTc5NjBBQjgyMDVGRjY0ODc4QUJDM0EyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MTE0RENDNjdDQTE4ODg1Nzk2MEFCODIwNUZGNjQ4NzhBQkMz
QTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0
YjItNjJkZTI0MTkyMjQ1LzAvNzExNERDQzY3Q0ExODg4NTc5NjBBQjgyMDVGRjY0
ODc4QUJDM0EyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAelv++GTXt6PrH9sQMECzQSmxs+GTsD3Psb
ZSXkXe+RC58LjcWeDxwpDYWtsIgMLtULMA75rqUvheKC6erdvqJ0U4maccAMDqEx
i2i4ZTYeCMey21pULyGDr/pnM5t8uJqoZEdEO6ixwXgiUjc9JusQ26BbLr0yZ4DT
R/a6LOpYT6mPWznqvAI5jZNltykotfedPhHJU+8Kjrtzur0Noa6hE7Qkq4U6xxGS
j3AkOmmx37THGuNTnITiy2ApyYHXbogCgdt1RpDQ86u/G9xJ8XTkct5tvU0sOdU6
Vtw4x1LiObMFwyqwNyqA/4yGKFwz6zMoaxWOWThi9nBoCRDZG6M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:55 2026 by rpki-client