
$ rpki-client -vvf rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.mft (raw, json)
Hash identifier: rcTRGbi9izL6fTPnou/eJKaXVlMViC23di3CmS4yOQQ=
Subject key identifier: FA:7E:C5:7D:2E:18:0E:B9:61:F7:0F:B3:C3:79:DA:B1:C1:14:A3:4B
Authority key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD
Certificate issuer: /CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
Certificate serial: 7A56A8C17BBA2D2D380D485B97282D56059ED5C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 16:09:35 +0000
Manifest this update: Thu 23 Jul 2026 16:04:35 +0000
Manifest next update: Fri 24 Jul 2026 17:23:35 +0000
Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: 8hArOQkZgNmI16L0WGc7RzZ5Ruf+DKiwdMQ56yopHsU=)
2: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: 1PUWFE0HvObC84cJz28KwHOs36xPuTELe/I8Yxh+ht0=)
3: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: zgUoXY12HmCoiLv/YyPkviXHygAhdx3kmWkfk7KOXTU=)
4: 7E5852640ACB27CE4AC466E5338B30E206711DDD.crl (hash: Wm8dQHL0ErnAh3eAiMKdu0I2R9UMw1Lz8M/n4FZbA/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl
rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:56:a8:c1:7b:ba:2d:2d:38:0d:48:5b:97:28:2d:56:05:9e:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD
Validity
Not Before: Jul 23 16:04:35 2026 GMT
Not After : Jul 24 17:23:35 2026 GMT
Subject: CN=FA7EC57D2E180EB961F70FB3C379DAB1C114A34B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:33:09:e2:99:b2:55:a6:9d:74:64:8d:f6:
b4:a8:55:f8:70:c5:6c:31:bf:32:a9:dd:91:29:5c:
40:25:84:b7:1a:eb:d8:27:85:c7:9c:c1:b9:37:a0:
01:cb:ba:58:b3:df:09:8a:4f:fe:4f:5a:ac:bb:31:
df:c3:9d:23:45:e9:2f:ee:6f:86:b9:71:21:5d:f8:
43:91:42:01:b4:55:69:9f:f5:6d:b2:04:cb:2b:e4:
45:78:d0:72:fb:4c:79:a9:7a:12:f6:4b:40:33:4a:
8d:7f:2a:9d:7c:63:2d:05:fa:0f:7d:17:50:6f:33:
a9:ed:44:60:57:c8:77:d9:30:1b:6c:7f:2c:83:c6:
75:8a:f4:60:b5:e3:f2:29:bd:fd:21:80:67:1a:5d:
cb:83:28:08:f1:04:17:80:95:73:d4:08:a6:55:8d:
dd:68:b9:54:4b:02:14:29:2b:9d:6b:9b:83:99:65:
b9:be:79:8e:0d:a7:25:25:b8:04:74:21:c0:2a:e2:
5f:ac:79:b1:89:cb:20:16:9b:f4:2e:10:3a:ef:9d:
08:dc:8c:2b:4e:46:40:2c:35:e7:8b:08:7f:10:f8:
0d:00:6c:13:c3:5b:32:13:a3:72:2a:1a:47:cc:5c:
e2:cd:12:ec:76:b3:a5:bf:53:d6:9e:b2:69:25:d1:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:C5:7D:2E:18:0E:B9:61:F7:0F:B3:C3:79:DA:B1:C1:14:A3:4B
X509v3 Authority Key Identifier:
keyid:7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:c2:16:38:97:52:88:b8:4d:8e:f7:80:22:13:12:43:a3:
f2:96:a7:1e:0a:ce:d3:11:e4:84:be:07:2e:cf:55:34:8f:a5:
2f:c2:ce:ec:27:a0:da:c8:64:8a:14:11:da:de:71:75:9d:e4:
50:92:17:21:ad:4c:19:68:e6:95:2c:6d:b7:c3:53:22:d5:fd:
1c:90:9d:0c:03:69:c9:16:a2:1b:5c:0d:4f:98:42:19:49:e9:
65:e6:04:50:72:81:4b:be:10:96:38:dd:c3:19:19:1a:ec:3c:
08:6e:86:ac:09:29:af:23:cf:55:5c:a7:c2:72:0c:58:9e:1f:
91:db:0e:45:34:6e:8d:54:fd:66:dc:1a:f5:d8:81:fa:34:01:
b5:83:e3:a4:9b:c0:6e:98:1e:33:a3:c1:01:72:2e:5e:a4:5e:
fe:40:f6:fe:6d:b8:1a:f4:a4:5e:a1:c4:04:3c:76:e4:06:ff:
8a:2f:63:c3:11:2a:e4:4e:0d:fc:2b:fa:46:1e:95:3d:e0:a2:
22:dc:89:e4:d2:0b:e5:3b:fe:6d:06:1c:8c:f8:89:fe:ec:62:
4a:1e:6b:2d:04:8e:97:7f:c8:c7:ea:4b:dc:5d:c1:13:de:f3:
9b:09:9a:21:ba:64:c5:f9:4e:d0:73:d7:b9:1e:fd:69:68:ee:
c0:4f:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:28 2026 by rpki-client