
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft
File: 7A5669C255B31F7829A430EF62917FD62B166DD2.mft (raw, json)
Hash identifier: cQtFeWK5v5iuJ6zOSKjclmt7yS3rSg5HKRAW0CvW4UY=
Subject key identifier: DA:9B:66:85:71:4F:F4:E4:2A:E5:9D:12:3D:15:3D:11:2C:87:AB:47
Authority key identifier: 7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2
Certificate issuer: /CN=7A5669C255B31F7829A430EF62917FD62B166DD2
Certificate serial: 6A8C80890B099466FB96AA8C8592D946BB0E69F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 21:22:01 +0000
Manifest this update: Fri 25 Sep 2026 21:17:01 +0000
Manifest next update: Sun 27 Sep 2026 00:14:01 +0000
Files and hashes: 1: 3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (hash: l4yczOyQxPFtzGJ+/dZhBHx9S0acVnl4y0Po1T7SNGM=)
2: 7A5669C255B31F7829A430EF62917FD62B166DD2.crl (hash: jlHtP1cQr+8k6X+VRL5eiB3Gz+ehbTxgNnERLlG6OG0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.crl
rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8c:80:89:0b:09:94:66:fb:96:aa:8c:85:92:d9:46:bb:0e:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5669C255B31F7829A430EF62917FD62B166DD2
Validity
Not Before: Sep 25 21:17:01 2026 GMT
Not After : Sep 27 00:14:01 2026 GMT
Subject: CN=DA9B6685714FF4E42AE59D123D153D112C87AB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:b0:82:fd:c1:83:26:e0:8f:11:f3:2b:33:
1f:69:46:bf:9b:f2:9b:ab:da:c6:cd:85:d6:97:65:
cd:95:b1:e8:f0:95:5c:fa:df:28:26:3b:a8:e1:1f:
e6:71:04:71:7b:fe:b6:3d:72:02:a6:f7:40:92:5a:
ea:48:af:30:e7:21:cd:33:ef:b3:ee:50:6b:5e:9a:
94:0f:98:6d:c0:c4:01:fe:b4:49:68:cc:d3:e2:1b:
6d:9d:f9:6c:02:cc:22:50:d9:30:a1:70:f4:e7:d3:
a1:c3:89:6c:3c:fb:58:78:15:0b:60:86:7f:ed:cb:
a4:9a:53:15:44:44:50:15:aa:f4:ea:21:11:4a:52:
7d:72:4d:a6:ae:2e:a7:aa:4f:54:5b:55:54:1f:d0:
d1:8f:0f:3d:44:10:14:d0:4b:26:65:46:07:ca:54:
a2:fe:8e:bd:a1:89:32:87:c4:59:68:8d:65:57:67:
97:42:a4:d0:5e:7c:77:95:74:ea:1c:27:cc:03:82:
80:f0:80:e9:f1:b2:99:02:38:58:fd:0e:a0:2f:e3:
12:41:eb:2a:77:13:43:89:f9:d4:c9:03:8d:c3:c1:
54:a8:ec:57:65:bd:02:cc:02:93:dc:fe:b6:b8:3a:
14:90:e5:01:0a:ed:17:2e:07:27:23:96:c8:c2:fe:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:66:85:71:4F:F4:E4:2A:E5:9D:12:3D:15:3D:11:2C:87:AB:47
X509v3 Authority Key Identifier:
keyid:7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:77:74:a8:56:56:aa:3d:49:d3:7b:74:fa:56:74:58:74:b6:
9d:85:53:47:48:57:3a:b9:33:1f:b2:a3:a8:28:96:cc:d2:45:
73:72:3e:5d:f5:b1:81:24:be:e1:90:45:d7:67:36:40:0b:3c:
dd:22:21:ff:32:be:02:65:ac:90:9e:07:59:04:6f:bb:69:1d:
5a:93:c9:6a:54:dd:65:54:b3:aa:27:ba:18:f2:12:36:50:87:
a2:0f:ea:f0:a7:5b:ce:f1:12:d5:b7:31:a9:4b:5e:ea:04:1c:
6f:88:68:9f:54:1f:b9:ed:95:f9:ba:59:af:0b:4e:0f:26:c7:
c4:3e:4c:9b:ed:3d:92:22:58:65:a6:57:61:2a:d6:28:d2:13:
18:91:1f:ca:ee:00:2b:75:eb:04:e3:d8:c0:66:ab:8b:32:27:
a2:6e:5f:89:a0:29:d3:dd:47:0b:37:2f:49:2c:53:c7:4a:b1:
5e:dc:ce:e6:58:e0:2b:be:db:1c:48:6b:65:d2:84:f2:50:e5:
8c:f6:26:27:db:5d:5f:28:fb:c8:57:e8:71:5f:da:fd:6c:ce:
84:bf:4c:3e:c0:de:1b:61:97:92:00:45:b2:d3:b3:af:19:30:
c5:44:67:64:a4:f9:95:a2:4f:95:fb:98:d2:57:4a:b9:81:2a:
d3:09:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:40 2026 by rpki-client