
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json)
Hash identifier: h3E8dMQifbR0AlG5+i8ps+XKSexPAD4G9hwtIGaVgjQ=
Subject key identifier: 67:E7:1E:E8:2F:AC:08:B6:B2:84:CA:1C:D8:A5:4F:8E:3A:4C:98:C5
Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A
Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A
Certificate serial: 4FFFC57E888A19F1B8CA067AADA4D8C0EC621132
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:37:32 +0000
Manifest this update: Thu 23 Jul 2026 22:32:32 +0000
Manifest next update: Sat 25 Jul 2026 01:30:32 +0000
Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=)
2: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: ULZTgF1ohqkNhUDij19PYG3UFl094GOYIwKxmvzxC6k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl
rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ff:c5:7e:88:8a:19:f1:b8:ca:06:7a:ad:a4:d8:c0:ec:62:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A
Validity
Not Before: Jul 23 22:32:32 2026 GMT
Not After : Jul 25 01:30:32 2026 GMT
Subject: CN=67E71EE82FAC08B6B284CA1CD8A54F8E3A4C98C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:c4:3d:b6:6a:2f:79:9d:38:99:0a:8d:13:
07:56:5d:23:64:f4:65:b3:96:e0:4d:58:e0:a4:72:
c2:dd:47:85:74:8e:c3:9c:d4:7b:8a:1b:b1:b5:3f:
a4:7a:91:bc:d7:dc:a6:09:07:7b:fd:08:a9:c7:a8:
cd:db:da:16:40:28:eb:b5:f1:36:8b:f7:8e:94:3a:
15:9b:da:4e:1e:91:c6:20:75:92:a7:7d:b8:33:83:
40:0e:18:29:6d:f4:bd:2a:66:f5:37:eb:8c:77:1c:
be:95:cf:6f:68:8b:a0:53:f8:b0:55:a4:56:1b:70:
c3:5e:b3:54:28:3d:a1:fb:e0:cb:a7:94:00:32:4d:
df:16:cf:5f:3c:ae:a5:22:bd:a0:ce:86:fe:e6:e7:
51:27:13:1f:ab:c4:3d:bd:9d:6d:64:a6:33:de:4a:
00:8b:09:a0:b3:e3:f5:7a:41:2c:6e:cb:c8:0a:e8:
83:7e:3f:2f:19:03:82:7f:3e:4a:f1:90:d1:fe:9c:
04:91:c8:4f:62:19:4d:1b:19:48:ed:dc:bb:65:db:
e1:63:b7:30:14:53:9e:7f:be:11:d2:6d:37:d6:e3:
82:37:00:d7:f6:1d:0c:e7:07:c3:33:ad:55:76:9e:
f4:a2:fa:a5:18:60:9e:70:2b:3c:ac:d5:4d:74:61:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:1E:E8:2F:AC:08:B6:B2:84:CA:1C:D8:A5:4F:8E:3A:4C:98:C5
X509v3 Authority Key Identifier:
keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:61:30:85:c8:51:78:08:9e:46:95:90:1e:d0:60:e5:4b:
b7:17:a8:e3:41:b0:0f:53:3a:43:75:55:a4:d7:72:a6:dd:d8:
56:c7:1a:0b:c3:f1:26:a9:20:1a:e6:fa:6e:b1:c8:8b:c8:11:
92:8d:ac:6e:f9:b4:44:31:98:f2:57:f5:f1:c5:81:c0:c5:85:
62:f6:62:41:a5:ec:e7:51:ed:e0:03:c7:ad:39:1e:3b:10:3d:
07:c4:f1:a0:62:7d:2d:99:35:05:75:64:93:03:94:7c:d7:4b:
48:ca:a1:73:f9:b2:65:2d:30:8c:84:ff:b5:09:02:e3:9e:f1:
36:c3:3c:b4:a4:fa:89:98:7c:09:cf:d7:b3:1f:8a:5c:23:86:
d1:73:12:22:29:e8:11:44:73:9e:f2:6a:96:67:31:59:f8:ee:
ac:d6:10:10:5f:d0:1e:c2:b1:13:af:91:32:a9:2f:e5:0d:65:
3f:32:ed:a6:d6:29:31:7d:9d:7f:66:db:f0:b1:5e:dc:dd:0a:
b5:a5:83:ef:ae:cd:65:e3:1a:b1:59:ad:59:59:36:81:44:1d:
08:74:79:df:fb:3b:cb:e0:a7:52:ad:e7:b2:fe:68:e2:4c:d1:
04:3f:7f:05:6d:df:7f:99:d2:3f:4f:e0:ed:4c:59:fd:1a:d9:
de:ea:3e:cb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUT//FfoiKGfG4ygZ6raTYwOxiETIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC
QkExRUMwQTAeFw0yNjA3MjMyMjMyMzJaFw0yNjA3MjUwMTMwMzJaMDMxMTAvBgNV
BAMTKDY3RTcxRUU4MkZBQzA4QjZCMjg0Q0ExQ0Q4QTU0RjhFM0E0Qzk4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr4MQ9tmoveZ04mQqNEwdWXSNk
9GWzluBNWOCkcsLdR4V0jsOc1HuKG7G1P6R6kbzX3KYJB3v9CKnHqM3b2hZAKOu1
8TaL946UOhWb2k4ekcYgdZKnfbgzg0AOGClt9L0qZvU364x3HL6Vz29oi6BT+LBV
pFYbcMNes1QoPaH74MunlAAyTd8Wz188rqUivaDOhv7m51EnEx+rxD29nW1kpjPe
SgCLCaCz4/V6QSxuy8gK6IN+Py8ZA4J/PkrxkNH+nASRyE9iGU0bGUjt3Ltl2+Fj
tzAUU55/vhHSbTfW44I3ANf2HQznB8MzrVV2nvSi+qUYYJ5wKzys1U10YdvDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZ+ce6C+sCLayhMoc2KVPjjpMmMUwHwYDVR0j
BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4
Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF
QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0
NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC
MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHE0YTCFyFF4CJ5GlZAe0GDlS7cXqONBsA9T
OkN1VaTXcqbd2FbHGgvD8SapIBrm+m6xyIvIEZKNrG75tEQxmPJX9fHFgcDFhWL2
YkGl7OdR7eADx605HjsQPQfE8aBifS2ZNQV1ZJMDlHzXS0jKoXP5smUtMIyE/7UJ
AuOe8TbDPLSk+omYfAnP17MfilwjhtFzEiIp6BFEc57yapZnMVn47qzWEBBf0B7C
sROvkTKpL+UNZT8y7abWKTF9nX9m2/CxXtzdCrWlg++uzWXjGrFZrVlZNoFEHQh0
ed/7O8vgp1Kt57L+aOJM0QQ/fwVt33+Z0j9P4O1MWf0a2d7qPss=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:57 2026 by rpki-client