
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json)
Hash identifier: 2mHyfhnTQWJlGnT29uwyKclzy0m53iew6iXs1bVb/94=
Subject key identifier: B0:1F:93:17:1D:1B:80:CC:D5:0A:DB:38:35:59:BE:AA:42:8D:AC:B0
Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Certificate serial: 31B211A1E70C8885370D7C8AEC805B6ECCB20B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:18:48 +0000
Manifest this update: Tue 12 May 2026 21:13:48 +0000
Manifest next update: Wed 13 May 2026 23:03:48 +0000
Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=)
2: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: khHuy7PtFJUkIPnsRTmhXKzXqilS4tPrS/V9EwPfeUA=)
3: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b2:11:a1:e7:0c:88:85:37:0d:7c:8a:ec:80:5b:6e:cc:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Validity
Not Before: May 12 21:13:48 2026 GMT
Not After : May 13 23:03:48 2026 GMT
Subject: CN=B01F93171D1B80CCD50ADB383559BEAA428DACB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:d2:54:a5:61:f6:3f:ef:ba:ce:aa:67:b2:
f1:ee:08:c4:19:5d:d9:db:1c:02:2a:e9:62:e0:c0:
9b:8e:23:89:58:92:e6:b1:b2:6e:a8:2f:00:1c:bb:
0f:45:32:e6:b7:42:81:54:c8:96:0d:de:8d:76:b3:
dd:c1:22:98:7c:b0:1c:27:2f:a8:fc:6e:68:9c:eb:
f9:01:de:4f:f4:4c:2a:f8:be:d0:93:b1:cb:7b:aa:
7c:5f:ad:74:5a:3a:8b:89:22:8f:ef:bf:e5:68:aa:
d8:d2:c5:0b:61:36:77:40:5d:be:e0:ff:2a:8d:ad:
41:f2:54:70:1d:8c:75:78:d1:d3:36:ce:40:e4:52:
d6:7e:8c:1a:80:7c:e5:b6:cd:28:3d:63:5b:af:43:
a0:b7:47:09:82:26:3e:53:d1:29:86:60:de:bb:2d:
6b:e6:7f:5b:49:69:75:bf:43:69:3b:3e:ff:8b:4b:
2e:55:bf:65:e5:8a:25:d3:9a:71:2c:fd:47:dc:7f:
84:d0:8e:e6:98:55:31:a9:05:16:d1:8b:ae:8b:f9:
23:76:68:a7:7a:49:49:96:69:09:46:cc:ac:16:60:
a3:54:03:7d:df:3c:48:11:ca:25:ba:0f:94:1b:15:
81:3d:d1:22:11:bf:e9:94:9c:f4:4a:d4:f7:8e:fe:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:93:17:1D:1B:80:CC:D5:0A:DB:38:35:59:BE:AA:42:8D:AC:B0
X509v3 Authority Key Identifier:
keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1a:75:d5:0a:e8:9b:fb:22:9e:60:98:bc:aa:59:c3:df:cf:
82:83:3a:de:bf:9e:91:26:f1:4a:e7:b5:c9:d7:ff:bc:02:e8:
59:47:b6:67:ee:ec:72:8e:f1:cd:52:8b:86:43:7f:ec:79:6b:
13:01:47:34:51:80:f3:7b:19:47:e6:52:2d:31:66:e3:a9:ad:
09:7a:39:c0:a8:39:41:69:d4:a2:50:4f:5c:5e:df:5e:03:cc:
63:ff:2d:ba:44:40:fd:11:f2:4d:6d:ba:9c:17:10:bb:fe:dd:
f7:b7:1a:c0:a2:ad:1c:42:07:b4:b5:1b:8a:38:61:02:76:69:
c8:23:72:a5:98:aa:5e:d7:ad:4c:87:71:47:70:12:9d:aa:1d:
b1:31:4b:52:8d:b5:80:58:fb:30:0a:7c:79:02:f7:69:4f:43:
fe:5f:09:d2:32:37:f6:67:fd:c9:21:84:d1:a5:cf:35:09:89:
cd:aa:55:84:f6:d0:af:af:96:df:8c:2d:79:b9:22:56:38:7b:
f7:a2:e7:0f:51:38:ef:e5:ce:42:0d:d4:76:63:b1:6b:1a:1c:
43:ce:88:f8:dc:0b:4c:e8:93:15:fb:82:02:8c:cd:d4:c6:a9:
7d:a9:46:b6:e5:b6:2f:97:45:3d:02:ea:e8:5f:0e:b1:8a:40:
16:f1:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:23 2026 by rpki-client