
$ rpki-client -vvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
File: 7445E0A188A89312C5454C032583053AC7510B2E.mft (raw, json)
Hash identifier: 29pPX6qKjr+ilA0QLHc2wREdj91iHgmMaOnyVVH+EiI=
Subject key identifier: A8:90:5C:75:2F:B8:01:AA:32:17:4C:7B:01:B4:B2:24:71:A7:D7:F2
Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
Certificate issuer: /CN=7445E0A188A89312C5454C032583053AC7510B2E
Certificate serial: 29C98D602E08FA8DFAF5B8DE38EC32DE76633C1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:46:01 +0000
Manifest this update: Tue 12 May 2026 19:41:01 +0000
Manifest next update: Wed 13 May 2026 21:30:01 +0000
Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=)
2: 7445E0A188A89312C5454C032583053AC7510B2E.crl (hash: yutbHvV6kCRhjAacdT4eItollN2qScQcPYoRDxncESE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c9:8d:60:2e:08:fa:8d:fa:f5:b8:de:38:ec:32:de:76:63:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E
Validity
Not Before: May 12 19:41:01 2026 GMT
Not After : May 13 21:30:01 2026 GMT
Subject: CN=A8905C752FB801AA32174C7B01B4B22471A7D7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:49:e8:5e:fb:12:3a:88:7a:c5:fc:c7:93:
f0:c3:16:f0:3b:12:05:64:2c:81:62:2a:dc:14:85:
12:03:ad:f7:b2:dc:5f:3e:67:1f:44:ac:e0:ab:a9:
a8:9f:f6:83:47:fd:fb:39:03:d5:2e:0c:ae:e1:17:
83:9f:ad:20:19:39:51:e6:91:bc:a3:29:01:68:c5:
45:2d:3e:e7:98:6d:bc:29:f3:02:b3:1e:69:5e:b4:
c2:83:f0:66:38:71:2d:14:6f:75:15:7a:2f:d4:15:
40:59:d7:62:e5:55:0e:30:2f:33:9d:ee:4e:dc:a7:
6b:68:b1:fd:e6:3d:a9:19:6c:44:cc:e1:f4:ce:dc:
98:93:d0:82:4b:88:5b:d2:d2:5f:9f:1c:77:b1:fc:
d5:37:f0:81:88:f7:05:1a:92:46:09:aa:b4:b0:33:
46:e0:4a:7d:e5:eb:ac:9c:ec:52:d7:a0:ea:8a:85:
93:dc:8e:af:fb:34:3e:fb:fa:f6:03:f5:5b:4f:e7:
34:f4:66:00:55:4b:13:29:f1:6c:50:b8:16:8d:b0:
20:7f:85:ae:67:d4:c1:c3:67:f5:da:94:42:c2:3b:
c8:cf:4d:a2:73:39:72:d8:56:41:f2:a4:79:35:ee:
eb:79:10:b7:71:df:9d:d9:c0:88:03:bd:7e:7f:4d:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:5C:75:2F:B8:01:AA:32:17:4C:7B:01:B4:B2:24:71:A7:D7:F2
X509v3 Authority Key Identifier:
keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:2d:46:5e:40:e5:b8:2f:88:bb:5c:71:07:9e:d2:28:5b:
1b:7c:d6:c0:24:61:20:e8:6b:b0:e2:e1:c9:6d:74:fc:43:4a:
e6:c3:fb:e9:47:28:03:34:27:fc:6d:3b:c8:21:02:3a:67:65:
14:17:25:af:b8:b8:51:1d:d7:80:64:13:66:0b:d9:29:40:ad:
5e:8a:cc:c3:0c:c5:03:f1:05:cc:37:e2:8e:9a:b5:ad:07:cc:
6c:ce:97:f6:b9:ef:82:d0:54:7e:93:48:0f:4c:16:62:dd:b3:
10:91:ea:77:5e:d9:52:8e:ee:e8:ca:a1:0e:49:5a:24:85:2d:
1b:f1:3e:84:f5:91:6f:1e:57:e5:38:55:5d:59:bb:00:a5:02:
06:19:ef:a3:0f:40:2b:78:43:c0:91:2c:73:f1:03:d5:0a:ec:
24:1f:49:d1:c0:f6:6d:1f:5b:e9:95:2b:4b:da:2f:89:fb:f7:
73:35:4c:9d:f2:9a:fc:09:4d:37:b2:42:7e:13:83:2b:d8:f8:
d7:45:12:2f:7a:3a:1b:b5:48:99:80:f5:76:ec:91:2c:bf:c5:
4b:23:9b:f5:e2:c0:b4:54:9d:b0:9d:d9:d3:c9:6c:b5:b9:50:
c9:0a:b2:36:5d:93:73:f1:e2:14:74:eb:b8:0c:f5:8e:c4:42:
89:5b:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:15 2026 by rpki-client