
$ rpki-client -vvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier: 0yhGVN/ePgwOllhmRyi80cfH/xJfs1T9mzpmvPu2PLI=
Subject key identifier: B7:9A:B1:03:06:F6:AD:35:CA:74:FD:00:38:EA:45:AC:72:B4:72:06
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer: /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial: 06F8002A314B315CA3B09423DCE3E339C1657C37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number: 71
Signing time: Thu 23 Jul 2026 17:57:04 +0000
Manifest this update: Thu 23 Jul 2026 17:52:04 +0000
Manifest next update: Fri 24 Jul 2026 18:29:04 +0000
Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: 5b3aEIy3Y4U1ckKZmuaHwnrs9IgI+byn/XOWyhCJnyo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f8:00:2a:31:4b:31:5c:a3:b0:94:23:dc:e3:e3:39:c1:65:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Validity
Not Before: Jul 23 17:52:04 2026 GMT
Not After : Jul 24 18:29:04 2026 GMT
Subject: CN=B79AB10306F6AD35CA74FD0038EA45AC72B47206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:06:1a:83:c2:da:5c:34:35:0c:82:16:00:
56:55:95:80:25:16:67:3a:c8:ac:d4:d5:7e:ce:fc:
9a:cd:ae:58:ed:1f:fb:09:c7:d1:9b:0d:9c:41:d0:
1b:43:af:02:fa:78:04:ba:9f:b5:d7:16:44:c6:ea:
99:00:6e:b2:8f:e5:d4:59:70:a0:d2:0b:d8:68:6b:
72:8b:d3:9e:af:36:58:27:e0:f1:16:dd:8e:b5:16:
9e:ba:eb:28:a4:12:a7:4b:e5:74:7c:20:04:24:9d:
b7:ee:6f:88:06:2d:d4:77:20:62:a7:43:e5:75:49:
61:c7:86:54:68:6d:e2:dc:ec:a1:dd:fe:24:23:3c:
a1:9c:ae:ba:98:ed:3c:e3:3e:be:fe:e9:eb:70:b6:
32:c6:2f:2b:fb:e5:e1:13:4d:c1:46:ad:9d:08:8a:
b2:04:00:71:4c:24:c8:5f:e1:47:0e:e1:99:57:91:
b9:19:70:86:77:15:01:02:d2:b9:98:db:b3:be:19:
b5:92:2f:d5:48:af:87:b0:f7:52:61:98:90:40:ac:
5c:4a:13:7f:1a:27:0a:44:ce:20:72:31:9c:b5:28:
ac:7e:ee:a5:34:14:71:2c:dc:6a:47:0a:a9:14:a2:
04:93:41:5b:64:01:51:ed:c7:fb:9b:0a:58:75:0a:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:B1:03:06:F6:AD:35:CA:74:FD:00:38:EA:45:AC:72:B4:72:06
X509v3 Authority Key Identifier:
keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:a9:fd:bd:c9:c4:2f:ea:86:c1:f4:99:23:1a:f0:14:16:
20:95:88:c1:18:9a:c0:f6:47:37:6a:ce:40:63:c2:cb:8d:43:
8c:10:a8:c4:8c:1a:b8:a7:f6:5e:e8:92:20:e6:4a:03:a6:37:
54:18:c8:35:22:0d:68:81:92:b2:af:10:46:13:da:a5:68:eb:
bb:47:db:55:e3:02:8a:d6:81:12:80:22:91:18:e3:98:bc:10:
7e:0a:c8:c5:cd:66:29:83:ff:2b:05:7f:c4:e6:b5:1e:12:bc:
32:c9:d6:d4:79:22:2d:aa:e2:d5:26:0a:2f:a6:ed:3f:99:9c:
37:55:5e:86:f2:64:2f:a3:a9:3e:f8:44:d8:8c:7f:2e:f7:dc:
7b:de:21:d5:5f:e6:53:35:b9:fd:37:4f:e7:93:7b:d3:5f:3e:
bb:7f:8e:9f:42:e8:3e:e7:fa:ab:c9:63:38:ac:fd:4a:49:ce:
52:dc:16:da:23:0b:10:ee:c7:b9:ab:32:83:14:24:f4:5b:42:
19:85:b2:0b:49:b2:27:6d:b5:c3:09:88:06:ca:b5:24:21:cb:
61:87:81:83:d6:04:b4:e8:19:07:08:ae:6f:c5:ec:37:fe:81:
c5:c6:59:46:7f:ae:e6:80:23:50:52:64:78:0a:1a:f6:e1:f3:
19:c1:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:57 2026 by rpki-client