
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
File: D7F0443E844F58413FEE61023C66F3C2AF619180.mft (raw, json)
Hash identifier: +vheikYv8k4GrrcQQsG41vg7ZnZoVyb5J2Fwu3suEek=
Subject key identifier: D7:CA:E8:07:92:EB:5C:06:5B:BB:34:54:AE:AE:7D:05:47:F8:70:7E
Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
Certificate issuer: /CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Certificate serial: 4A08BB43015A5FBAD24A8C95D71CF01917AF9D34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 08:14:36 +0000
Manifest this update: Fri 24 Jul 2026 08:09:36 +0000
Manifest next update: Sat 25 Jul 2026 10:06:36 +0000
Files and hashes: 1: 3130332e35352e3235342e302f32342d3234203d3e20333936393832.roa (hash: m9XJT/DbxbJ6+jpB+KGYoQwi9JE9k1D/+aAA0o2JVf0=)
2: D7F0443E844F58413FEE61023C66F3C2AF619180.crl (hash: 2eZ7U64Pjih62yvF/rV1uRuYE8f7DnEaHCO2nMzUXHc=)
3: 3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (hash: 1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:08:bb:43:01:5a:5f:ba:d2:4a:8c:95:d7:1c:f0:19:17:af:9d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Validity
Not Before: Jul 24 08:09:36 2026 GMT
Not After : Jul 25 10:06:36 2026 GMT
Subject: CN=D7CAE80792EB5C065BBB3454AEAE7D0547F8707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:f2:26:0d:17:6b:8f:9a:59:4d:77:d6:ac:
69:7e:2e:30:ba:13:93:cb:04:bf:f4:09:44:3f:30:
6b:43:5d:89:7e:9e:a0:ae:fd:06:0c:d5:54:7e:70:
b4:88:be:46:d2:48:b7:8d:03:ed:ab:44:da:77:2a:
b9:6d:67:fd:2f:99:9f:e5:3f:26:a6:aa:90:e9:2c:
6e:c1:07:cd:5f:f9:1d:09:0b:c6:be:78:5d:06:66:
c5:2b:86:27:32:63:49:2c:bd:63:aa:97:4e:3d:d3:
48:83:63:76:2a:76:bd:0a:a9:34:9b:44:2b:65:85:
32:78:9e:01:18:dc:0f:56:7c:60:93:59:f4:4a:26:
8e:06:f0:fd:4b:1c:38:3b:2c:c5:18:59:f2:e6:43:
1f:7a:4f:48:2e:21:d3:63:28:b5:c3:30:e7:f4:4a:
5a:4e:87:d5:c9:ae:64:d3:e0:2b:e2:61:43:31:93:
99:97:74:f2:a3:c0:ba:58:e3:8e:11:f0:0a:9f:52:
0a:da:b9:6c:c2:65:28:99:3e:05:08:2a:76:7d:fe:
a5:4c:c2:63:3d:b0:50:39:12:57:80:15:46:31:7c:
3d:a7:16:6f:50:39:2d:93:37:07:a2:a2:a1:45:42:
2f:96:bb:b4:ec:49:de:69:1e:e6:bd:b5:7f:92:f1:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:E8:07:92:EB:5C:06:5B:BB:34:54:AE:AE:7D:05:47:F8:70:7E
X509v3 Authority Key Identifier:
keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:67:a0:1e:8d:c3:8a:d0:45:2b:a4:28:9e:ae:8a:57:dd:
40:2f:61:c0:b5:e2:da:ee:e8:6b:06:98:50:b8:70:96:a9:79:
4d:2a:cc:33:4d:a6:33:30:92:66:23:06:b5:95:66:63:3c:65:
62:27:fb:9c:56:f8:52:be:ef:64:19:49:88:4a:2f:3a:f1:c1:
db:bc:10:cc:30:eb:47:2c:a7:ca:3e:ab:84:21:03:7f:e2:36:
43:18:b5:44:9d:3f:05:22:60:54:e1:2a:b1:8f:67:1b:66:15:
8a:b4:c7:46:8e:58:fd:5b:1e:ec:39:63:4c:fb:cd:29:a2:33:
1a:98:e6:a4:4e:10:ac:34:85:e6:e7:cb:a8:60:bf:2e:3e:aa:
a8:27:14:66:18:c9:82:1c:23:07:88:44:ff:77:e3:64:bd:4e:
e8:63:17:b0:a3:dd:6c:1d:93:ed:c0:4e:51:de:8c:9c:10:13:
7d:32:8e:c8:67:2a:28:e7:b9:b6:d6:de:bd:e5:ec:4e:bf:de:
4f:7f:41:a0:d8:42:6f:0c:be:b2:d3:d9:78:55:26:6e:f8:e9:
fc:2e:ba:ee:7b:b9:77:89:db:d1:be:49:97:22:db:4c:9d:5d:
99:d7:38:2a:e0:de:12:fc:47:43:c5:39:b8:1b:5f:2b:5c:50:
de:d0:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:54 2026 by rpki-client