
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft
File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft (raw, json)
Hash identifier: MPr9z+ekCvDukCIJGFlHecqpW+uszbfmahM9ojotXrk=
Subject key identifier: 80:B7:F3:72:D9:5A:AE:E5:85:08:7E:3A:15:31:78:7E:71:84:E3:56
Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE
Certificate issuer: /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE
Certificate serial: 3B63C1DCDEEF1D40549074D78AA356C5FE135295
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:52:54 +0000
Manifest this update: Tue 12 May 2026 06:47:54 +0000
Manifest next update: Wed 13 May 2026 06:58:54 +0000
Files and hashes: 1: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: O/6Vse93iZ++RJMaxSdbmCU7yuXgswidaAAY3SDWRSc=)
2: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=)
3: A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl (hash: gU3m+loSg3rl147weTvGJhLpgGkqsEnkdpAU9G3wlZQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl
rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:63:c1:dc:de:ef:1d:40:54:90:74:d7:8a:a3:56:c5:fe:13:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE
Validity
Not Before: May 12 06:47:54 2026 GMT
Not After : May 13 06:58:54 2026 GMT
Subject: CN=80B7F372D95AAEE585087E3A1531787E7184E356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:0a:a5:61:93:4b:21:b0:ee:62:b0:02:85:
a2:eb:86:18:13:02:db:26:b8:7a:25:1d:4b:11:f9:
0f:3e:89:fc:f1:57:b7:9d:a9:ba:5c:ed:4e:4e:11:
4a:22:63:a2:74:91:00:30:ae:53:23:2a:93:d7:9d:
d6:a1:85:ad:55:2a:f6:87:ae:d2:e6:5d:9f:37:11:
1b:4c:24:cd:fa:dd:f5:9c:6b:74:48:ee:df:51:6f:
08:6c:e9:ab:db:28:07:96:20:35:0d:4a:db:e4:e1:
e8:9e:77:7c:c0:8a:84:40:aa:e0:4d:08:e1:98:30:
b4:0f:2f:22:3c:95:f7:a1:19:1a:1c:b7:19:5c:60:
10:15:09:80:2a:c9:fb:80:a6:f7:04:36:3a:e2:4a:
4d:e8:76:2a:fe:0c:4c:ac:74:a8:6b:28:58:4f:44:
44:67:19:18:94:4a:c6:a9:78:34:47:26:7b:fa:42:
0d:35:b3:3e:0b:5f:fb:c2:ba:ae:b0:3d:24:1e:2c:
44:fe:0e:e4:e7:73:86:51:ea:86:b2:28:c9:26:ef:
66:e7:6b:d2:26:f7:35:fe:ff:26:96:c7:63:4a:6a:
b0:6b:07:8f:30:3a:59:75:4d:d9:33:8a:15:1e:9b:
42:e8:0b:04:17:6d:d5:e8:4a:16:30:97:d1:29:7e:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:F3:72:D9:5A:AE:E5:85:08:7E:3A:15:31:78:7E:71:84:E3:56
X509v3 Authority Key Identifier:
keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:86:a7:2e:16:79:95:26:ce:a9:9f:32:49:88:04:94:df:
a7:ab:61:21:d9:07:74:e6:58:da:be:cf:31:a9:c2:a4:74:5d:
cf:cf:0c:bd:e9:80:dc:44:53:94:a3:1f:0b:da:fc:80:fb:55:
c7:cd:01:00:6a:14:1c:42:b6:b7:71:10:35:da:af:80:82:69:
a7:41:99:a0:a7:4a:b5:32:61:c9:5a:50:db:a5:b0:2f:10:a0:
99:1e:9c:43:f2:73:38:2a:af:14:ae:66:ee:bd:28:7b:0f:fb:
c8:fd:ed:2d:22:e6:96:c9:75:5e:64:b0:61:28:69:c7:0a:8c:
1c:22:b6:d0:fd:c5:c9:67:3b:0c:58:6e:18:d5:cf:28:ac:04:
05:35:df:22:e4:e9:e4:50:35:8f:b8:25:c3:92:16:13:4e:6d:
16:61:56:17:8f:34:7c:04:34:cb:c3:44:fb:b3:0c:0a:c6:09:
f7:7f:85:f4:d8:d6:71:18:b0:cc:35:b8:a5:0f:b1:77:98:ef:
08:ab:45:0d:4e:5b:d4:28:89:d2:c3:fe:ba:ea:43:8f:e8:58:
65:9e:26:02:38:62:15:b8:b0:53:b8:cf:2d:85:8d:62:21:be:
20:47:c7:fa:47:b7:a2:91:9a:7b:37:0b:49:25:97:78:5b:a1:
81:16:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:16 2026 by rpki-client