
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json)
Hash identifier: ZYslM26zvErJ+yOJFCbjmXz0xnd0gCboMZ4yeZxUTpM=
Subject key identifier: B5:64:C7:A3:9E:2F:D1:05:6C:77:21:60:D9:00:03:4D:04:FE:93:AC
Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Certificate serial: 406DBDBA147DD7B3D222FF981AEF50C8C8BCF754
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:54:57 +0000
Manifest this update: Tue 12 May 2026 04:49:57 +0000
Manifest next update: Wed 13 May 2026 08:13:57 +0000
Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=)
2: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: vds9MacumqzVXNfAtRR4yz7P9IFfZ/jqEf1qL7GyftY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6d:bd:ba:14:7d:d7:b3:d2:22:ff:98:1a:ef:50:c8:c8:bc:f7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Validity
Not Before: May 12 04:49:57 2026 GMT
Not After : May 13 08:13:57 2026 GMT
Subject: CN=B564C7A39E2FD1056C772160D900034D04FE93AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:67:dc:4b:94:58:36:1f:73:75:69:90:ff:
83:59:ce:c8:c4:ee:de:63:d6:ec:22:4f:a2:c3:40:
80:5e:68:34:b6:f2:96:bb:f8:1e:9f:a5:e5:3a:23:
6e:54:65:ef:6e:7f:61:c6:8f:6d:92:ec:03:35:cc:
a8:98:2f:c6:90:30:f0:ab:7e:db:af:29:28:f9:b2:
b9:1f:fa:c3:f6:32:47:3f:69:1e:8f:63:8f:bc:c0:
73:e7:13:54:42:e7:d9:54:e2:78:e1:ac:f4:f1:29:
64:f4:58:40:3d:76:7b:b1:71:ee:e5:92:80:e0:48:
e4:b1:38:66:20:2c:3c:97:54:17:fb:25:46:26:dc:
d6:5b:4c:b3:bd:f2:4c:c6:02:1e:25:9c:f2:3a:3c:
3a:1c:49:ac:a3:29:ac:f3:1a:10:5b:af:71:e1:41:
e9:11:22:37:88:a1:51:ba:d1:7e:13:4a:84:72:fd:
ea:30:61:43:62:8f:e2:a6:40:2b:2d:e4:fe:aa:d6:
b9:73:61:bf:95:24:6c:be:c7:ea:8c:4b:f9:c3:10:
35:a0:36:58:96:a1:b1:9f:3b:c8:34:86:ce:14:83:
53:ca:2e:e2:ea:94:2a:44:7d:27:4b:fe:ad:35:88:
c2:8d:a2:ec:67:51:4c:e0:29:e5:22:36:b6:67:67:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:C7:A3:9E:2F:D1:05:6C:77:21:60:D9:00:03:4D:04:FE:93:AC
X509v3 Authority Key Identifier:
keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:dd:0e:8e:85:59:8f:3c:05:9f:38:10:76:91:21:8e:c9:6f:
09:fa:e6:6a:c2:ec:f8:99:d2:10:b8:d5:3e:00:1f:eb:94:d9:
91:63:c1:8a:7a:17:5d:d3:96:4c:9a:f2:57:16:b8:19:70:ad:
75:dc:38:5e:1d:ba:4a:1a:ba:a9:c6:7c:ab:25:2b:33:a6:1e:
e6:33:1c:25:14:af:ee:14:fd:e9:10:aa:48:e0:08:95:0a:84:
07:6b:f4:85:eb:0b:7f:19:51:1f:f8:10:92:fe:e6:49:f3:56:
23:77:8c:ea:3d:89:ff:08:01:8f:66:35:b4:1a:3a:e7:b5:84:
e0:51:40:99:49:94:44:fa:37:2d:7d:c5:56:9e:50:06:ae:4e:
cd:98:19:e9:1e:a1:78:b1:0a:2c:0f:d3:b7:fa:09:ae:ae:01:
a6:92:d3:03:c8:c5:ea:08:e5:3e:97:82:ed:1f:75:5e:97:11:
f3:6b:d7:c8:2f:12:40:c1:fe:9a:65:a5:a7:e0:57:39:6c:49:
14:82:aa:c3:2d:cf:bf:2c:07:b1:02:78:4c:af:dc:26:b5:aa:
2d:81:96:fc:07:c9:41:a6:06:e3:92:f7:55:c5:6b:56:06:a6:
23:f3:1b:ec:40:a9:41:ab:f9:ad:69:1b:39:19:ff:1c:eb:40:
1e:e3:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:36 2026 by rpki-client