
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
File: 7B9D20A52D1839E0A747B27E30961527317BE820.mft (raw, json)
Hash identifier: mVS6yu9kYUv2fUB5NloDof8XUzm9f+YxCQ2dEn2dqvI=
Subject key identifier: 83:17:55:4B:F6:77:DF:72:0B:DE:95:85:1C:EC:9E:9C:60:14:8A:AD
Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820
Certificate serial: 07DC558351E6232820390146FE3549F8FAFC9E35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:00:03 +0000
Manifest this update: Tue 12 May 2026 21:55:03 +0000
Manifest next update: Thu 14 May 2026 00:30:03 +0000
Files and hashes: 1: 7B9D20A52D1839E0A747B27E30961527317BE820.crl (hash: uqx76O6abOjbUYBQIEofmu9eRX02w4Vm2T4zLCGVp8w=)
2: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=)
3: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=)
4: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:dc:55:83:51:e6:23:28:20:39:01:46:fe:35:49:f8:fa:fc:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820
Validity
Not Before: May 12 21:55:03 2026 GMT
Not After : May 14 00:30:03 2026 GMT
Subject: CN=8317554BF677DF720BDE95851CEC9E9C60148AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:ea:1e:79:79:f1:97:13:03:21:04:30:bb:
71:41:d8:fe:d7:1b:22:32:60:3e:23:c1:46:cd:f3:
74:4b:a5:29:83:c3:f9:08:4b:14:c5:69:ec:00:1f:
a6:6c:17:77:61:c3:55:e1:d6:71:6b:2f:e4:a3:25:
c8:19:36:67:9f:62:39:2c:32:0b:9c:e3:bc:e2:11:
07:9a:af:cd:3e:22:0a:73:49:c8:66:65:e0:1f:e8:
69:a4:1c:9c:ba:38:97:87:42:06:bd:19:15:9f:0c:
fe:16:88:fa:c2:6d:a6:8f:f2:cd:14:96:ff:9c:24:
1d:c8:a2:1e:d0:31:7c:a4:33:e5:ad:67:5a:7f:b4:
25:5b:8e:fe:a0:3a:dd:ab:28:a5:78:7a:f4:46:47:
e0:74:f3:a2:79:e0:2e:71:ed:96:8d:e6:35:96:76:
21:b8:63:96:55:fb:b8:99:9a:21:9f:66:3d:f6:b3:
7b:98:15:e2:15:16:aa:5e:23:96:b7:42:6d:bf:8c:
4d:e7:a3:72:75:12:0e:b1:c4:41:86:5c:55:07:50:
a3:0d:6f:dc:a8:8a:d4:44:3e:29:d9:0d:9c:6b:a8:
60:3b:00:35:f0:82:ee:13:8f:7e:55:da:e1:36:07:
49:48:21:28:4b:84:77:d2:bc:62:60:69:d3:42:38:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:55:4B:F6:77:DF:72:0B:DE:95:85:1C:EC:9E:9C:60:14:8A:AD
X509v3 Authority Key Identifier:
keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:b8:bd:75:2f:6d:83:7a:89:da:b9:14:2f:87:1d:88:d6:
96:c1:33:fa:65:74:7e:e8:8c:b2:80:fa:3a:78:36:dd:ca:0c:
bc:05:7c:fc:be:b0:77:88:99:23:c2:1c:b0:a5:43:04:a4:99:
40:1b:1d:81:e5:06:31:f4:f4:fe:3f:68:f6:df:91:a1:b0:57:
d8:2a:3c:31:dc:e6:6f:9f:84:e7:e5:e4:50:5c:9b:3e:7e:cd:
66:f8:fa:d5:60:08:bf:bd:a7:e1:9f:68:0d:95:3b:0f:22:51:
75:55:72:53:68:ee:cf:ba:0e:de:d2:b7:5e:18:bf:b4:97:0c:
c7:90:eb:52:c7:27:b5:81:32:2b:1b:ee:aa:d9:5d:21:39:ec:
62:96:ca:10:4e:ac:6b:f3:22:16:e2:d3:03:ff:0b:eb:d4:6e:
85:20:aa:22:cb:30:6f:8f:45:b4:6e:41:1c:77:60:f6:70:0b:
1d:48:17:fb:39:78:80:62:c8:1e:a8:70:72:04:e0:9b:25:82:
47:d0:d9:ee:43:90:f7:52:65:e3:96:f5:d1:27:8a:21:a4:ad:
bc:22:f1:5e:45:e4:c7:04:49:b6:71:3e:cc:64:61:2d:09:15:
87:76:73:24:a0:cb:33:ef:64:6a:e8:70:4f:3c:72:02:9f:99:
bd:f4:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:36 2026 by rpki-client