
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json)
Hash identifier: tlsxdKKL+IcIk74O5UOK2opMdk2AQeQZ3IdO/ypPlDU=
Subject key identifier: 65:70:A8:96:FE:26:4E:02:B1:63:E4:30:89:AE:4D:5F:A9:7E:15:25
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial: 51416ED16B171EC8CF71EDA3AD4B46412FF9B412
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:15:44 +0000
Manifest this update: Fri 24 Jul 2026 01:10:44 +0000
Manifest next update: Sat 25 Jul 2026 04:30:44 +0000
Files and hashes: 1: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=)
2: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=)
3: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: AkjM7L4Jl/TT13Y6LNFj41DER9vnC9QUQRzBLNsaKUE=)
4: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=)
5: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=)
6: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=)
7: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:41:6e:d1:6b:17:1e:c8:cf:71:ed:a3:ad:4b:46:41:2f:f9:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Validity
Not Before: Jul 24 01:10:44 2026 GMT
Not After : Jul 25 04:30:44 2026 GMT
Subject: CN=6570A896FE264E02B163E43089AE4D5FA97E1525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:df:f4:be:d2:f9:93:9b:e5:56:b3:b5:1b:
67:3a:8d:ba:0d:05:dc:d4:49:6b:1a:13:b4:e5:ef:
33:52:46:b8:f2:ce:e9:76:49:fa:cc:cd:8c:b1:0b:
bc:bc:d5:75:ee:e6:26:8f:43:ac:b4:75:5e:a6:2c:
50:ec:ef:31:69:33:33:68:fc:db:79:df:94:ef:17:
57:ea:4d:9a:51:bd:a2:2a:4f:dc:9f:9d:15:6b:41:
16:94:82:6f:1d:16:2a:21:7b:95:69:65:aa:a4:11:
0b:a9:e5:c2:a6:a2:a8:a1:07:c4:1f:a9:11:4b:16:
d0:55:f6:2c:8e:e3:63:cb:a0:ed:50:93:93:56:46:
3e:ab:9a:53:f1:f2:b6:22:61:92:cb:0d:75:6b:5d:
de:2e:cf:ef:10:f8:d7:fa:50:80:1f:e2:c2:0e:94:
f1:6e:23:59:e2:d4:ef:72:33:f2:3a:83:d4:89:3c:
de:b0:db:da:c4:6b:cc:77:5a:56:11:ce:2e:30:d3:
ab:9e:d6:5e:57:9c:2a:57:c6:b0:3e:cd:b4:d4:9a:
d8:17:3b:23:08:32:10:e1:7c:e1:2e:82:4d:67:b5:
91:8e:3e:f3:d1:0d:04:9b:f4:6b:16:d1:5b:13:8d:
86:64:3a:b7:9b:01:90:f3:90:50:f9:28:c6:0f:f0:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:A8:96:FE:26:4E:02:B1:63:E4:30:89:AE:4D:5F:A9:7E:15:25
X509v3 Authority Key Identifier:
keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a2:29:bf:ab:ba:f4:e3:85:7a:b2:19:0e:65:08:3a:f9:35:
c8:a0:66:d6:12:d6:34:bc:77:3a:60:45:b3:9e:ae:8f:36:52:
b4:bd:fc:55:8a:e4:ae:c8:9b:b7:1c:3b:a8:22:38:77:df:ac:
a4:5b:f4:7b:2a:e6:f0:bc:63:1b:50:42:1f:00:76:1f:99:79:
54:32:b2:cb:94:8f:66:7e:1b:ea:b9:73:fa:9f:df:2f:17:b2:
c4:39:25:ee:24:84:cd:bd:57:77:d1:3c:9a:95:76:29:96:30:
89:d9:c1:d0:e7:b4:07:74:87:c1:83:af:b2:7e:d0:4b:af:cd:
91:b5:61:ac:3a:52:7e:1e:22:6d:0b:45:92:17:67:4b:21:86:
b5:20:87:be:b9:39:27:d1:bf:db:49:59:1f:6b:ad:68:a6:80:
bb:7f:dc:45:e1:3c:76:37:4d:a6:d3:b3:c8:86:d4:8b:ac:5e:
96:6d:7e:1f:b1:74:fa:3b:aa:46:f0:39:29:a8:b2:b0:59:c6:
37:f0:4d:82:6b:82:36:8d:43:d9:ce:91:f1:26:82:3a:54:43:
b1:00:b1:a1:be:57:f3:09:74:25:26:28:16:86:23:5f:23:15:
82:63:46:6f:68:e7:8b:36:1b:76:d4:ef:9f:b7:6b:60:5f:7a:
ab:89:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:14 2026 by rpki-client