
$ rpki-client -vvf rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
File: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft (raw, json)
Hash identifier: FaZeZ4LobwYV+SAoBoDGsnuPziojlizqg223U8TMC+U=
Subject key identifier: 54:20:53:D0:B5:08:98:36:15:D0:08:F2:4B:AC:33:14:E6:F6:E6:42
Authority key identifier: 7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9
Certificate issuer: /CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9
Certificate serial: 2B2237585C2915308AFF0240ADE4D11BF94DC122
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 13:43:44 +0000
Manifest this update: Tue 12 May 2026 13:38:44 +0000
Manifest next update: Wed 13 May 2026 16:45:44 +0000
Files and hashes: 1: 7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl (hash: vp3W6dYuz3hDzHG/tow3WfrhKTAMHjplZY+VyFFux4M=)
2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XAMucgwFmTucBgKdR7YCgdXStPYQxjx/K+G2Z2xF+TI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl
rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:22:37:58:5c:29:15:30:8a:ff:02:40:ad:e4:d1:1b:f9:4d:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9
Validity
Not Before: May 12 13:38:44 2026 GMT
Not After : May 13 16:45:44 2026 GMT
Subject: CN=542053D0B508983615D008F24BAC3314E6F6E642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:38:03:eb:60:7e:ed:b5:43:b6:c3:ec:ab:
39:74:e8:10:9f:a5:a4:08:d7:88:6f:a9:aa:88:13:
c8:c9:a6:4d:aa:3f:25:dd:fa:21:b5:ca:b0:cf:55:
ba:61:34:4f:f6:52:bf:12:4d:95:ae:37:29:25:01:
cc:bc:3c:c4:37:41:ae:f9:16:6a:96:92:7c:15:b9:
81:bc:b5:50:e5:9f:1e:ce:cc:0a:de:c9:b4:89:9a:
9a:43:bf:19:bd:db:84:b4:f7:ff:6d:fd:55:74:58:
50:c0:cc:b1:6c:2e:63:ef:41:ea:cd:a1:09:8c:88:
67:44:ad:40:5a:2a:48:a4:69:1d:7d:3e:56:23:0b:
32:d7:d8:9f:c4:13:c1:2c:83:57:f4:9c:d6:87:7f:
ae:3a:26:0d:55:69:f8:a3:30:ea:5c:dd:f5:be:dd:
29:98:10:9b:61:03:b1:dd:05:eb:58:28:2d:80:e2:
a4:c6:38:bb:63:2a:77:b2:d5:4a:2c:5a:3e:76:7d:
2c:88:02:7c:b6:4f:ff:bc:92:c5:fd:1f:65:ad:11:
37:9c:86:aa:c5:29:09:6b:9b:36:77:17:e3:2d:b4:
d3:05:78:36:d2:ae:90:f9:f7:2f:67:12:fd:36:8c:
4f:02:6d:d1:0c:f2:28:b5:5d:8c:f9:65:1d:78:04:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:53:D0:B5:08:98:36:15:D0:08:F2:4B:AC:33:14:E6:F6:E6:42
X509v3 Authority Key Identifier:
keyid:7E:F6:6B:48:8E:E4:8E:57:1B:83:7D:2B:30:F0:B5:CF:51:EC:FA:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/7EF66B488EE48E571B837D2B30F0B5CF51ECFAF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b0:41:19:21:a8:dd:c5:ed:2c:5c:7f:8e:7f:ef:02:15:f3:
f6:fd:81:bd:d6:fa:f1:b7:f8:80:42:e6:b5:8a:8d:0d:0a:65:
60:7d:75:13:85:54:3f:b9:bf:ec:c3:5d:cf:e9:59:43:5b:8e:
cf:7f:aa:0e:ac:7d:e0:0a:20:a5:44:44:f9:dc:a0:76:8d:5d:
fd:99:11:03:fe:ef:e9:8c:c6:f7:e5:7b:44:f8:6d:b9:a4:62:
29:be:28:38:33:3f:c9:20:ab:7f:fe:55:39:2b:3f:b9:57:bf:
c9:2d:2d:9b:a7:92:a3:13:e4:48:69:d0:27:b3:42:be:09:75:
0c:63:93:0e:e5:dd:a2:dc:0e:93:3c:79:2e:3d:07:48:72:f1:
f8:94:9a:1a:d9:6d:ee:6e:5c:39:b2:54:07:39:cf:90:09:51:
f3:5d:a0:04:76:a2:b0:d5:d9:d1:8e:67:9c:7b:11:d4:2a:4e:
69:45:24:f4:31:ee:81:c6:40:88:83:9d:f9:b2:9b:74:a7:99:
ff:a6:b4:bd:83:11:ee:df:6b:d6:86:63:75:db:b5:4e:2b:44:
8f:8f:64:35:7d:16:c2:54:53:9b:0f:18:36:cc:10:30:28:d7:
be:0b:dc:46:bc:12:a3:81:d6:6f:f3:ff:fe:6e:2b:75:ca:5a:
82:5d:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:42 2026 by rpki-client