
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json)
Hash identifier: GPe/qRpouenD+34PYrXlHNoASA8VVuszlMk8n+8uIC0=
Subject key identifier: F4:39:50:03:06:22:8C:06:75:0B:22:F5:CD:95:AD:89:3C:B4:B1:00
Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Certificate serial: 71B6DA10BF3B7EE9E653153EB8D7C90EC55B8C29
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 04:31:11 +0000
Manifest this update: Thu 24 Sep 2026 04:26:11 +0000
Manifest next update: Fri 25 Sep 2026 06:47:11 +0000
Files and hashes: 1: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: EcqT6FzahrlqFfSWMzVqonQXkD+2eMuYq+eOco3MzCk=)
2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=)
3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=)
4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 06:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b6:da:10:bf:3b:7e:e9:e6:53:15:3e:b8:d7:c9:0e:c5:5b:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Validity
Not Before: Sep 24 04:26:11 2026 GMT
Not After : Sep 25 06:47:11 2026 GMT
Subject: CN=F439500306228C06750B22F5CD95AD893CB4B100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:94:d4:c6:f4:72:ee:3e:e5:3d:5a:85:fa:
c6:1c:7f:1a:c9:84:b6:75:6c:aa:32:02:30:d3:8b:
b9:bb:37:16:03:dc:ca:cc:51:04:9e:db:3f:14:f2:
61:f6:fb:0a:12:4a:b7:95:fa:c8:ae:4a:71:74:23:
88:1e:77:0e:2f:ba:1e:e0:d7:5c:f6:d3:ad:c8:a6:
27:8b:cd:c7:a3:2a:0c:8a:2e:3f:6f:94:63:71:4d:
f4:6f:11:57:3b:50:e0:ee:a7:b7:d8:3d:1a:bf:72:
e6:84:9b:33:86:71:8c:e3:08:65:c8:9f:ed:27:67:
c0:ec:6b:ce:d7:7b:dc:c4:83:0b:fc:7c:e8:f4:7f:
6e:cd:d8:ff:93:1a:b9:ad:5d:4d:84:b6:ff:40:5e:
d7:d8:b4:e0:27:1d:81:80:9b:2e:d7:6e:d6:1b:d7:
05:b0:de:9a:be:bf:cd:16:ef:42:23:c0:33:cb:9a:
f2:47:c9:fd:3e:49:e2:e4:3d:cc:f3:be:89:02:b0:
40:48:1d:2a:0c:42:9d:36:56:ab:f8:58:1e:c6:d5:
a2:20:58:a2:6b:55:b7:6a:75:71:f2:10:4a:e5:99:
ed:5d:3a:78:bf:c6:27:11:f5:d9:de:b3:ae:7a:48:
74:36:81:06:b2:be:63:73:23:d7:12:4f:01:32:f5:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:50:03:06:22:8C:06:75:0B:22:F5:CD:95:AD:89:3C:B4:B1:00
X509v3 Authority Key Identifier:
keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:44:c4:cb:55:35:e4:74:9a:cd:2f:ee:d0:02:43:35:3d:
bc:be:92:a1:0c:7b:a8:13:ce:0f:a2:55:52:58:1b:b9:22:c0:
b5:80:a6:a3:d1:2c:37:30:84:2a:fa:1d:cc:95:74:f6:79:65:
4f:62:89:f4:c1:70:c0:78:72:e9:58:0e:7f:95:b2:10:e6:7d:
9e:7c:7e:7d:39:52:06:e8:50:72:5a:90:74:2f:8a:03:28:5a:
5d:84:e9:31:ec:e0:5b:d8:ed:c3:34:b7:03:a0:38:84:1b:3e:
70:d3:98:09:0c:6b:c4:1e:72:6e:40:08:8c:10:0e:66:f1:f3:
d0:0b:2c:57:e8:e2:c5:79:e4:33:7f:6c:91:89:24:0f:af:46:
4b:4a:2b:d0:e3:46:88:53:34:c3:cc:11:2a:b1:cb:05:b2:cf:
7f:ec:48:64:21:75:d8:e2:5d:7c:43:fc:c3:c2:02:8a:45:21:
cd:eb:74:e3:11:76:86:86:c0:6e:7a:9a:82:20:93:b3:6c:61:
a0:c8:5e:38:05:3c:65:ae:3e:f4:49:ff:1e:b6:37:da:21:13:
69:fd:d7:77:a1:ae:1b:08:e8:9e:b1:d7:d2:c2:92:ec:85:f5:
34:ed:40:59:ef:79:35:26:f5:38:c7:c7:18:2a:2e:4c:34:90:
27:1a:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:46:43 2026 by rpki-client