
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json)
Hash identifier: netIKD7xMTfYMao8Fr4D2HjzoEz+HUtEoat2W6YxQeM=
Subject key identifier: 1F:1E:18:7A:C8:B0:89:E9:EF:79:41:17:07:52:00:13:FC:36:E9:38
Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Certificate serial: 31370FBC0031D03FFE9BA9A88765945953B872BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 18:32:38 +0000
Manifest this update: Thu 23 Jul 2026 18:27:38 +0000
Manifest next update: Fri 24 Jul 2026 21:56:38 +0000
Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=)
2: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: tmeEbqqetJRp9NNiwfZ/rSUHHpzd1GlTHRrkDobx830=)
3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=)
4: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:37:0f:bc:00:31:d0:3f:fe:9b:a9:a8:87:65:94:59:53:b8:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Validity
Not Before: Jul 23 18:27:38 2026 GMT
Not After : Jul 24 21:56:38 2026 GMT
Subject: CN=1F1E187AC8B089E9EF79411707520013FC36E938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:fb:b4:c3:b8:0b:c2:8d:9d:85:f4:80:01:
45:08:78:ba:d6:5b:92:58:92:2b:a9:ab:8d:67:57:
47:55:56:28:9f:9f:bd:ec:8c:ee:07:89:40:d4:b6:
39:dc:ba:89:de:7b:bc:df:e4:f5:d3:4a:e6:de:da:
a3:95:8a:8c:19:79:c0:84:fa:a9:7e:35:dc:73:aa:
7f:fb:6d:da:9b:26:95:2c:1e:99:46:2c:17:02:fb:
1c:9b:14:9a:4f:51:12:dc:fb:d1:d5:28:fb:e0:10:
82:35:09:f4:7a:c5:61:22:14:ac:ae:0a:b2:a2:38:
25:b7:81:0e:94:d8:5b:c3:af:d8:09:86:c2:53:52:
be:57:99:38:c5:29:b9:4a:40:5e:56:56:7e:a1:ab:
74:a3:46:c5:14:00:26:df:b0:8a:d3:2a:98:40:33:
c3:e8:67:23:bf:a2:a6:04:75:4d:38:f7:38:4e:62:
49:e6:50:5d:d8:8a:ed:c1:a6:b7:1b:14:40:e7:f9:
dc:0c:3b:b7:06:06:af:ab:e9:2a:58:6e:46:2a:3e:
40:5c:76:b4:bf:f2:ba:80:34:46:6f:e7:cd:18:fa:
77:59:c2:ea:e1:fe:ce:1a:15:e3:6b:1a:31:8c:16:
d7:55:85:b5:cb:c0:20:40:61:7d:c3:89:1c:52:1b:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:18:7A:C8:B0:89:E9:EF:79:41:17:07:52:00:13:FC:36:E9:38
X509v3 Authority Key Identifier:
keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:e1:5d:5a:d1:23:be:14:a6:ae:49:ac:81:d6:0e:52:f2:
b8:13:b2:db:95:8d:c2:ec:c6:d9:5e:83:3c:da:9e:a6:6d:60:
aa:67:d9:e5:e6:fd:f8:b2:40:cc:35:2a:b7:c6:73:b9:f4:b8:
f6:e5:de:36:b2:da:00:eb:a3:d4:d2:f8:71:19:28:15:5a:0d:
3d:fc:13:65:59:89:d8:e4:56:c2:14:74:b1:3b:96:a6:b2:44:
7b:ac:61:a0:a3:31:d3:39:0e:37:a7:08:d1:9c:d4:f5:17:9f:
d8:cd:0b:25:ab:d5:fe:58:72:75:02:82:12:9e:76:3a:5f:c4:
15:90:b5:d7:2e:9a:ea:3b:ff:13:da:1d:0a:1a:08:14:bf:87:
70:ca:0d:cc:7c:77:1c:93:79:75:e4:ba:bc:0f:c5:b8:69:79:
32:88:43:e1:49:bf:d3:1c:46:1b:54:32:d3:18:17:be:cb:4e:
2b:54:da:46:30:29:2d:ef:99:51:1b:58:c1:af:75:86:f4:ea:
28:c4:e1:ba:24:85:10:d6:7a:c4:2b:47:91:43:15:85:00:5c:
2e:5f:cc:4d:11:5f:b4:9c:32:55:e7:f1:3e:0d:19:0a:af:54:
de:e0:6d:f2:dd:54:93:50:28:ac:fd:da:35:83:96:47:d8:68:
57:2f:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:13 2026 by rpki-client