
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft
File: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft (raw, json)
Hash identifier: gGdF2qY1nwHnYCveaS6E8jwLQFjHDY4/MJnGQ1RSy20=
Subject key identifier: 7B:2B:64:D3:65:11:6D:64:F4:25:7E:BF:E2:4D:02:8F:E7:69:65:2E
Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1
Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1
Certificate serial: 1273F5E6CD02199305638DD405CC6D671FD956E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:29:08 +0000
Manifest this update: Wed 13 May 2026 00:24:08 +0000
Manifest next update: Thu 14 May 2026 00:53:08 +0000
Files and hashes: 1: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s=)
2: 7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl (hash: ix2g3aabp1SAmx4fFYvWkSFUudLp3S0XVYA2uTDHDq0=)
3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zo6afGUZ+xANx2saBKFoToM4ZfJx6MQbAdVSKsyqc3E=)
4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: tK3BCEgCj8v33DN7k7o6YbHDtq6HBaeP5Xix6hm+Kxc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl
rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:73:f5:e6:cd:02:19:93:05:63:8d:d4:05:cc:6d:67:1f:d9:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1
Validity
Not Before: May 13 00:24:08 2026 GMT
Not After : May 14 00:53:08 2026 GMT
Subject: CN=7B2B64D365116D64F4257EBFE24D028FE769652E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:a5:e0:2c:66:87:bb:e3:81:45:c3:44:03:
21:d3:2a:f6:ff:a1:13:99:f8:a8:a9:12:07:95:fd:
ac:7c:19:95:2b:e9:95:c8:3e:db:53:d8:b4:46:9f:
ea:61:ef:70:9f:4d:94:6b:d3:a8:bd:dc:e2:9e:af:
a3:46:c5:a6:51:93:45:c0:0b:2e:ec:39:59:0e:74:
b3:57:98:f2:e6:40:95:e8:65:9f:14:c2:1d:d5:94:
a9:85:b1:fd:78:59:21:40:e0:66:82:79:4a:68:d8:
ef:31:99:8e:6d:95:03:98:3f:46:7b:c8:81:fd:e3:
34:9a:44:3b:b9:9c:7e:54:18:d7:c5:30:2c:6e:6d:
69:88:73:61:47:aa:45:f6:f6:5f:05:76:a8:87:a8:
50:70:56:c3:77:59:83:f6:af:8e:f6:04:45:16:b0:
01:12:fe:ff:33:8a:ed:47:b1:d5:2c:72:1c:04:3a:
bc:fd:c6:a3:dd:d4:1a:31:d8:a9:d5:94:c4:9f:f4:
2a:01:97:a2:77:a6:8a:d7:e7:8a:af:57:01:5d:9d:
8a:76:0c:ff:f5:d2:6a:7f:79:5c:8e:e8:11:6e:2f:
15:ae:80:4d:1a:5d:a8:ec:fc:0b:bb:0f:c1:2c:4f:
37:a5:5c:92:b2:b4:5a:72:00:a2:78:92:28:6f:33:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:64:D3:65:11:6D:64:F4:25:7E:BF:E2:4D:02:8F:E7:69:65:2E
X509v3 Authority Key Identifier:
keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:24:0a:6a:34:ba:38:14:40:87:1f:bf:fc:b6:92:4b:50:2a:
8d:6b:84:61:25:34:9f:cd:54:56:44:58:03:81:e1:65:1e:b6:
64:8b:15:d4:3e:e4:c1:b6:63:e1:7e:b4:c5:91:4e:a1:c9:a5:
e4:63:95:bd:dc:2f:b8:5e:a1:db:23:e6:c5:12:18:96:06:a2:
38:9c:e8:ee:f0:6d:e6:a0:37:02:9c:75:f4:9a:5c:3c:94:98:
fb:15:3f:e2:e9:ab:ae:ca:b5:12:71:b4:f7:2b:81:c4:a7:16:
0a:87:d5:86:d5:76:5c:09:87:30:40:51:5e:2f:06:0e:51:47:
9a:85:24:74:52:38:c8:4b:f4:77:61:8a:19:5c:f2:cf:cd:6f:
30:95:93:57:85:63:b9:87:d0:9e:7f:56:eb:0e:ef:3e:c8:a7:
99:d2:15:8f:e2:29:6b:8d:ed:c0:ae:50:1c:5b:c5:50:fc:00:
9d:cb:aa:08:fd:db:f9:c8:da:d2:2b:1b:44:8c:2d:eb:b9:03:
44:27:46:a8:77:42:b7:80:09:93:6e:17:0c:e1:f6:3a:80:3d:
5c:07:29:4c:c9:b0:f1:19:9e:ff:c0:fa:a0:d9:69:69:83:fa:
bf:0f:07:f4:e7:84:0d:4e:ee:83:3e:a6:3d:1d:d9:c9:5f:1c:
01:b0:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:43 2026 by rpki-client