
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
File: 357778A786AA1E6854673B0A6AAAA40B85254E94.mft (raw, json)
Hash identifier: 14OTYMClMi6oOuf009CN8YFoZWuaumBM0F+IFMcht8E=
Subject key identifier: 28:67:03:AC:8B:48:E8:08:43:CE:DA:B4:0A:48:69:B6:56:A6:2E:05
Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
Certificate issuer: /CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Certificate serial: 5ADDCD2EBEC1EA8FC5E23808E6789FAF5C8B1846
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 08:55:26 +0000
Manifest next update: Sat 25 Jul 2026 12:55:26 +0000
Files and hashes: 1: 357778A786AA1E6854673B0A6AAAA40B85254E94.crl (hash: iaEO+u4sLfC76OQguLc0qT2CMY5YRdTifFpJ/hgAzzs=)
2: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: 5+l8Bv4b+lu/zj1I0m9wF216uhFzz02OufoiSu3ruBk=)
3: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=)
4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: hjalkv3P7i18uJ7S9FBqgBtHEhsf6OEBgP8fNSR+fXY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dd:cd:2e:be:c1:ea:8f:c5:e2:38:08:e6:78:9f:af:5c:8b:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Validity
Not Before: Jul 24 08:55:26 2026 GMT
Not After : Jul 25 12:55:26 2026 GMT
Subject: CN=286703AC8B48E80843CEDAB40A4869B656A62E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:50:c5:08:17:f8:5c:4d:dc:e6:6e:5b:55:
f2:72:c5:f2:4a:c3:b3:99:85:ed:b0:f3:eb:d4:63:
23:77:3e:67:a8:db:40:51:71:3b:96:1d:cc:13:3b:
dc:ec:95:30:be:36:d9:f9:7a:42:65:ef:19:98:e4:
4e:2f:51:e3:ce:63:78:07:49:16:ee:1a:b8:3a:20:
a7:df:22:c5:b5:77:8c:ff:e0:10:f3:b3:f6:fa:37:
c1:ce:9c:3e:e1:c7:c8:a3:7a:5e:f0:05:48:10:50:
ce:9b:36:7c:57:9a:8b:00:9a:62:f2:c1:94:80:1e:
dd:62:d0:19:4e:f3:24:79:ed:59:7b:18:66:0a:6c:
55:3b:aa:31:48:e8:ea:fd:21:ea:2b:b4:de:3c:d2:
d3:7a:5a:a4:09:8b:7f:0f:a4:de:2e:4b:d1:6b:52:
07:15:64:0e:42:8b:2a:86:38:fa:d0:29:e6:67:b1:
09:c4:5b:2f:c3:11:41:5d:ea:62:ce:b5:b4:34:66:
b3:a2:c2:99:43:1f:30:ad:4a:00:13:91:09:ae:d0:
ba:14:c5:fc:e1:e8:f9:a5:fb:0e:61:ed:8e:1c:fb:
30:67:0b:6c:99:d2:ab:82:1c:bd:53:f2:7e:34:7f:
c7:05:14:62:c8:05:e0:c4:a0:e6:59:af:3b:34:84:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:03:AC:8B:48:E8:08:43:CE:DA:B4:0A:48:69:B6:56:A6:2E:05
X509v3 Authority Key Identifier:
keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:31:c4:1b:28:d9:b5:5d:df:e8:ed:d5:04:97:45:f6:0d:74:
89:80:32:ee:d8:63:79:9d:df:46:a6:bd:96:21:0d:d4:b2:3b:
4b:a5:b7:1d:f6:6d:f2:ad:a8:ed:f0:d4:38:83:3b:a0:a9:68:
9f:82:ea:78:e8:33:7f:8a:4d:9f:f1:c9:4a:d6:c4:ea:7c:e0:
61:bd:ba:90:fe:af:fb:bf:92:62:da:b1:7d:5a:9c:92:1f:c6:
03:a6:3c:40:44:f0:f6:24:90:b5:da:90:20:2c:e0:5a:5b:cb:
01:a3:9b:79:83:0e:2d:79:fd:4a:c9:48:53:6a:57:36:44:38:
d5:87:32:87:10:de:e1:c8:48:70:94:33:76:6f:cc:8b:14:ef:
fc:4f:f9:7d:f1:97:73:7f:07:a7:ad:7d:d1:e9:11:ec:76:9e:
23:d5:38:3b:c6:98:9d:46:a7:c5:02:ab:fa:90:5f:da:50:c0:
40:e9:17:c9:59:1d:29:d1:3c:e1:6a:70:d2:66:b0:cb:b3:1d:
d0:18:90:99:c7:51:19:a0:bb:af:c6:3d:8b:3f:d0:0a:45:56:
10:91:cf:a2:b5:08:7d:bf:31:f3:fd:0f:b9:7f:b0:eb:be:ce:
90:b0:ab:00:11:47:a0:da:c9:f9:95:a1:7c:fd:5f:cd:e0:69:
e6:dc:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:20 2026 by rpki-client