
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
File: 7F6A7DA96EFF248F18836BABFDA129185606504D.mft (raw, json)
Hash identifier: Veh6eT9UQ7hNFvMWWFNlFlavgJL7Dk5xt9QAsa2PdIY=
Subject key identifier: 2C:7E:ED:DA:5C:D3:AE:52:D8:1E:C2:DE:49:E1:F6:3F:A4:EA:1E:05
Authority key identifier: 7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
Certificate issuer: /CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Certificate serial: 1F9E6044815CDDB7F5F64FC0CF4C9C4653C70DD9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:39:09 +0000
Manifest this update: Tue 12 May 2026 18:34:09 +0000
Manifest next update: Wed 13 May 2026 20:23:09 +0000
Files and hashes: 1: 7F6A7DA96EFF248F18836BABFDA129185606504D.crl (hash: D4vGVR/XbMIrX4b0LFbTY0suzqRuyz2PqSlfPdXVfIQ=)
2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: dkL3RYxUqFK92RNM9WTwGTBFmcpnH2zcxM4bqSEuW3M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9e:60:44:81:5c:dd:b7:f5:f6:4f:c0:cf:4c:9c:46:53:c7:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Validity
Not Before: May 12 18:34:09 2026 GMT
Not After : May 13 20:23:09 2026 GMT
Subject: CN=2C7EEDDA5CD3AE52D81EC2DE49E1F63FA4EA1E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:16:72:83:05:02:9f:21:44:13:e5:98:25:
5b:ad:5f:48:5f:b2:fd:f3:b3:bb:03:ef:89:6c:3b:
ff:ac:24:fd:d0:31:73:c9:8e:c8:bf:6a:13:09:55:
72:e3:16:f8:3d:42:91:9c:0b:36:7a:3e:83:90:b3:
86:e5:34:65:37:e9:d2:ea:7f:e1:51:1a:6e:65:89:
7a:90:12:45:d7:0b:55:59:3e:d4:77:e2:4b:81:8a:
4a:81:db:3e:be:4b:d9:e9:4c:b1:86:31:f8:a4:20:
d8:6a:37:71:b9:13:a7:60:26:c7:78:d8:83:1c:8f:
76:dc:7b:6d:2d:a2:f5:e8:57:22:c8:a5:16:5e:0f:
38:2d:df:fa:cb:28:3d:75:89:eb:d1:fd:00:7b:57:
05:8c:e6:f9:24:fc:45:07:2c:e5:56:ed:f9:2b:3d:
92:00:09:dc:f7:1f:88:c6:79:58:e4:fd:eb:70:17:
15:00:66:b6:09:af:b5:da:d3:c4:e6:94:9c:5f:df:
f5:8a:f4:43:bb:95:dc:6e:31:2c:82:2e:cb:32:41:
ee:4b:28:6b:85:f6:c0:b1:f5:eb:fa:ca:6f:b4:ab:
ea:f2:42:2e:e6:9e:c7:9f:38:8f:f3:77:b0:18:fc:
0f:37:5a:13:58:d1:c5:12:83:38:f1:fb:cc:98:06:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:ED:DA:5C:D3:AE:52:D8:1E:C2:DE:49:E1:F6:3F:A4:EA:1E:05
X509v3 Authority Key Identifier:
keyid:7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:42:5d:38:c1:c8:89:86:8b:98:34:d8:9d:88:4a:48:eb:
a8:fa:7b:69:07:7d:5f:9b:81:0f:c2:29:2e:0e:6d:b7:66:b7:
57:0a:4b:7c:41:5a:de:1a:1d:f9:fb:e9:1e:cb:a4:a2:3c:c3:
63:01:fc:dc:04:40:72:da:9e:6d:e4:b0:d6:98:7e:6f:7c:ad:
e1:3b:e8:e6:d9:ea:9e:19:77:3d:ae:2f:46:78:7c:1b:75:18:
a2:d3:90:4e:79:70:7c:ca:e0:31:1b:39:93:72:c0:8f:75:03:
2e:19:61:7e:1b:e5:af:4c:cd:1d:49:3b:d2:a8:31:a0:55:f3:
17:16:c6:bd:a4:4a:c4:8f:e5:d9:39:94:32:1d:7c:a2:9f:50:
15:0d:fd:2d:08:3f:81:6d:90:bb:dd:bb:eb:3d:03:cd:9a:b3:
97:c5:c1:58:eb:17:26:4f:68:f9:8b:c9:a6:8b:ce:6e:b9:55:
a4:6b:b3:65:02:8d:0a:a6:f7:4a:6e:3f:7c:08:6d:60:bd:2e:
8b:56:41:da:f6:fc:96:0a:f9:e2:2a:9e:17:ba:1d:9f:6a:24:
d1:a0:0e:2f:72:5d:0b:e8:d0:fb:b5:4f:81:30:bd:79:8b:5a:
c4:f9:b9:f9:89:3e:18:c4:7d:4a:c9:e0:b2:30:c2:15:57:49:
b5:ca:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:40 2026 by rpki-client