
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
File: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft (raw, json)
Hash identifier: 82zAKHWGsxOkRUmEH1qV9MLL1JCJZsPY+vlFJpbcEiI=
Subject key identifier: 51:84:E6:D3:08:AD:E3:4B:73:70:25:CC:C8:EB:34:D2:DE:9F:6C:65
Authority key identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
Certificate issuer: /CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Certificate serial: 4CD291149B8F9F98FFE34D097C5F7F9E67BD32E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 01:26:02 +0000
Manifest this update: Fri 24 Jul 2026 01:21:02 +0000
Manifest next update: Sat 25 Jul 2026 03:18:02 +0000
Files and hashes: 1: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl (hash: ov3CAlceSrnwMwGEOPaa2Q+QsQFteHSyVvoxLuKUu9k=)
2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: FY38IH9sB6rTVzYUxtZnvzqXTN96oHyScnEbXRWQmXQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d2:91:14:9b:8f:9f:98:ff:e3:4d:09:7c:5f:7f:9e:67:bd:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Validity
Not Before: Jul 24 01:21:02 2026 GMT
Not After : Jul 25 03:18:02 2026 GMT
Subject: CN=5184E6D308ADE34B737025CCC8EB34D2DE9F6C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:a7:4d:aa:de:1c:a4:e3:9a:86:4b:98:c0:
72:2a:b7:86:1c:a2:40:f8:4f:26:82:c0:f5:a4:07:
c9:ff:2f:7c:51:bd:a8:4a:d1:e1:36:90:9b:7b:24:
cd:68:3f:7c:79:71:16:c8:ab:29:6c:41:46:7c:db:
aa:0b:1c:71:f0:e8:f0:f4:4e:62:dd:40:6d:2b:7f:
2c:62:be:bb:bd:a6:bb:1b:63:28:15:e9:29:a0:6a:
d0:64:0d:d6:da:fa:76:5f:27:40:bd:43:c5:2d:c7:
dd:14:a3:bf:b4:2c:15:26:c6:92:b9:c8:e9:a6:71:
07:ad:61:3b:21:cd:84:67:59:ff:a9:8e:25:73:2d:
66:e8:90:87:16:09:56:42:e0:ea:08:11:53:8b:54:
45:40:a5:5b:8e:13:3f:08:90:f1:01:c7:e4:67:30:
ba:1f:ad:19:dc:85:58:0b:20:65:64:d3:c9:92:37:
23:25:17:72:d7:50:6e:57:aa:b7:eb:dd:c6:0a:8a:
c8:b6:5c:4f:08:e6:b2:6c:9f:47:a3:62:75:c9:57:
c2:56:19:5d:d2:32:10:8c:45:29:5c:e7:76:43:b4:
5d:db:ef:63:47:8c:a9:e7:25:f3:73:b6:0c:5b:31:
e3:02:8d:ce:09:ae:b8:ed:66:85:62:32:81:b6:28:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:E6:D3:08:AD:E3:4B:73:70:25:CC:C8:EB:34:D2:DE:9F:6C:65
X509v3 Authority Key Identifier:
keyid:7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:d9:ad:f7:50:0f:8f:c6:93:89:3f:b4:a8:30:1f:c8:46:
2a:c7:5e:aa:bb:92:eb:4e:1d:84:75:3a:25:ca:00:44:a9:2d:
88:c3:3b:a7:de:37:3d:84:4c:e6:50:38:f4:29:8c:d3:ee:a7:
93:d7:5d:7b:ab:f7:93:0d:12:74:aa:07:84:d9:53:b4:7c:fb:
f3:11:e7:16:ef:cf:f8:1b:a8:7c:f1:8f:d7:8a:cd:45:d8:4b:
cd:bd:c4:8f:83:7f:35:bd:1b:b5:ac:48:85:1f:e7:97:dc:03:
f3:42:e2:c6:89:67:c2:cb:a0:07:9b:b3:a2:d6:a1:8e:c6:05:
0b:2e:3e:cb:e1:71:39:69:1e:e0:3d:e6:83:43:95:e3:62:60:
0e:f6:67:2c:36:d1:77:32:48:a9:87:6f:39:fb:66:40:99:2e:
e4:46:76:a3:9b:0b:2a:da:bf:80:0d:5e:11:52:b2:4a:03:5d:
63:16:0c:35:1e:8f:86:0f:1c:f9:9f:64:e0:c6:f8:38:da:28:
5c:0d:bd:26:85:da:0a:38:a8:74:42:bd:e0:05:7e:e8:74:31:
f3:bc:b9:dc:4f:93:0f:ce:16:15:0b:52:bb:56:14:09:d9:1f:
8b:96:ab:3e:a7:b7:74:6b:ad:03:a3:70:72:3c:9a:3f:ec:55:
a5:3c:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:21 2026 by rpki-client