
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json)
Hash identifier: tTHaA2xYXbbS+VX+mlJjtAK6x3w1cdZaf471a8UhhCg=
Subject key identifier: C2:48:0E:43:4C:1D:92:F7:23:7E:CD:CC:8D:58:E0:E9:F0:EA:03:DF
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Certificate issuer: /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial: 40C9206A3D4AEDAD01188476D40CFA3B79604795
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 10:53:24 +0000
Manifest this update: Thu 23 Jul 2026 10:48:24 +0000
Manifest next update: Fri 24 Jul 2026 11:59:24 +0000
Files and hashes: 1: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=)
2: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=)
3: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=)
4: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=)
5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=)
6: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=)
7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=)
8: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=)
9: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: 1Zu/ShIp5ZWyxyN8qpFs8eh4miFSqeRc7fLw4Pp6pR8=)
10: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=)
11: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 11:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c9:20:6a:3d:4a:ed:ad:01:18:84:76:d4:0c:fa:3b:79:60:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Validity
Not Before: Jul 23 10:48:24 2026 GMT
Not After : Jul 24 11:59:24 2026 GMT
Subject: CN=C2480E434C1D92F7237ECDCC8D58E0E9F0EA03DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:44:00:f0:41:13:34:a7:d7:fe:64:60:89:
9a:48:ed:4f:7f:ce:5e:db:0d:5d:43:26:d8:b0:2d:
5c:39:cd:5a:eb:5c:45:86:a6:eb:88:c2:33:f4:12:
bc:7d:48:88:1a:fd:f9:be:ea:06:17:fb:79:e3:39:
38:4e:7a:6f:58:1a:88:cb:2a:8a:8b:93:ca:be:56:
0f:7f:5b:a2:18:f3:3c:7b:b3:77:2b:e9:42:df:af:
95:3d:ec:11:11:cc:06:0c:0a:f1:46:76:51:27:18:
04:aa:79:7c:5e:c5:10:7f:e7:2d:21:b4:13:81:df:
c5:2b:1b:42:f5:0c:65:62:8a:cd:9a:bc:fc:e9:df:
13:1c:07:65:5e:7b:6f:c4:90:98:9f:d8:e0:8c:62:
1b:d6:71:bf:18:9c:31:28:c7:3c:5b:14:0a:fc:70:
11:86:83:cc:7d:f8:60:dc:19:be:ba:75:a1:8e:57:
5b:2b:cd:49:a6:56:a7:89:80:fb:d9:87:1c:d4:70:
b0:4e:8a:91:75:76:76:b5:97:20:a4:ce:fa:8c:3f:
56:e7:af:ea:d1:b3:ac:7d:bc:e0:a7:46:55:3d:5a:
f7:5c:bb:87:39:62:9c:af:cc:8a:de:5f:b3:3b:3e:
94:5c:4e:3a:32:f1:cc:1a:10:06:20:91:dd:52:de:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:0E:43:4C:1D:92:F7:23:7E:CD:CC:8D:58:E0:E9:F0:EA:03:DF
X509v3 Authority Key Identifier:
keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:fb:7b:24:8b:16:2c:22:55:25:0d:76:cc:1d:f7:d7:f6:
3b:15:22:37:5c:f6:10:9e:ad:2a:23:7a:38:7e:33:ca:14:b8:
61:1e:3b:ce:06:dd:4b:2f:ee:01:04:47:4a:8d:13:98:a7:c2:
40:9a:f3:22:82:ea:55:d3:67:8f:46:87:62:d4:a1:28:58:77:
df:5a:0e:17:03:a3:8e:52:5b:b9:e1:5e:74:f5:eb:8d:24:9b:
55:ea:b9:4f:cd:73:84:ad:96:e4:22:5f:39:d5:e6:66:47:a7:
34:52:a7:6f:18:36:75:5a:23:88:12:58:56:a0:a3:e5:fd:13:
61:b7:a4:2c:87:bf:39:e5:94:cc:78:99:69:c5:b2:a4:e5:46:
08:07:d6:c7:55:90:cd:8b:a0:2a:1f:04:1d:32:cf:98:40:db:
a5:76:03:de:c4:93:07:09:b6:5a:fd:12:77:88:3f:08:10:d2:
5b:6a:8b:47:9d:1e:4d:f3:3e:d3:d1:8d:b0:58:73:11:4f:cd:
58:97:5f:92:9e:25:7f:39:19:af:b8:92:cd:04:48:64:fc:ea:
a2:e7:00:ff:7b:9f:47:b6:92:3f:24:82:d7:43:0d:b4:bf:60:
e8:b2:f4:86:d8:be:af:04:b8:09:69:90:e8:23:22:69:cf:6f:
32:01:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:21 2026 by rpki-client