
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json)
Hash identifier: xCziMFtBAUUYiE75C2M/iR9c0te8/iXzZoybMACHOV8=
Subject key identifier: C3:24:5A:88:13:5D:2E:A3:3C:28:FE:BA:55:DD:66:0A:AD:B1:EA:0E
Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864
Certificate serial: 20B8BB16482C0C74E407A7AA8D001BB56A9E8243
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:45:21 +0000
Manifest this update: Fri 24 Jul 2026 04:40:21 +0000
Manifest next update: Sat 25 Jul 2026 08:12:21 +0000
Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=)
2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=)
3: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: fqXKhEGIKWsWQ7fBNjzvAF7z1yVD3lBz25lPtV+Rerc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b8:bb:16:48:2c:0c:74:e4:07:a7:aa:8d:00:1b:b5:6a:9e:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864
Validity
Not Before: Jul 24 04:40:21 2026 GMT
Not After : Jul 25 08:12:21 2026 GMT
Subject: CN=C3245A88135D2EA33C28FEBA55DD660AADB1EA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:46:0f:1f:92:a3:c8:7c:ee:17:39:9e:48:
0c:50:37:c9:35:7e:cc:16:2c:b9:29:f6:08:8d:d0:
d4:92:49:6c:14:c2:75:e3:49:e9:07:61:8f:38:e1:
4c:f5:4c:15:e6:f4:27:2d:c6:30:60:1d:65:07:fb:
8d:e6:21:81:d8:75:28:66:ce:fb:71:32:17:58:f7:
5e:cd:6d:15:45:1a:fa:91:27:a2:34:53:4f:14:88:
d0:ee:0d:1c:05:00:89:fd:94:ae:f3:4e:09:14:60:
30:d3:f9:d9:59:b8:2b:86:f3:62:11:d6:18:de:fc:
74:bc:be:09:cb:54:00:06:1d:b2:36:8c:8e:22:17:
e3:da:02:07:b3:b4:f0:95:93:cf:60:66:80:f3:5b:
97:65:a5:25:bb:31:96:cd:82:a1:8c:12:a8:ac:78:
22:7e:0c:6d:14:0a:12:a7:4e:d4:7c:0f:22:45:d3:
91:40:e9:35:da:a5:b9:49:d1:65:8e:f3:30:79:46:
c1:7e:e8:7a:15:c8:aa:ea:5f:09:42:d6:a0:ba:dd:
cf:f7:2d:47:1d:2f:d0:09:6b:a3:33:aa:cd:07:60:
6c:aa:a9:d0:07:08:0e:57:45:8e:12:0d:91:a8:68:
1b:67:9a:a7:c8:b7:ab:8a:50:25:14:aa:6c:19:f0:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:5A:88:13:5D:2E:A3:3C:28:FE:BA:55:DD:66:0A:AD:B1:EA:0E
X509v3 Authority Key Identifier:
keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5d:39:45:f3:93:52:3e:50:f9:4e:b8:05:00:eb:fd:b4:c1:
0f:e1:78:25:40:7c:36:b7:5d:ac:9e:39:3b:b5:40:fd:a6:8b:
03:05:4a:19:54:20:25:f1:fe:6f:f4:cd:18:45:10:ee:b1:1a:
b1:fe:ba:78:d6:8b:09:5c:0a:de:f5:d7:6e:fe:a6:f2:da:46:
be:a6:45:f5:a2:23:46:4d:dc:c5:9b:09:12:cd:44:9c:83:25:
41:2c:b5:13:a0:e0:bc:fe:45:93:65:f8:59:32:40:81:9e:8e:
e5:57:51:9d:63:db:d9:cc:7b:53:70:24:26:2f:29:b1:1e:b4:
bc:84:20:8b:59:e4:fe:55:4b:1d:bc:35:c4:a1:af:45:fc:13:
44:f3:04:c2:cb:4a:70:67:48:61:2e:8b:12:4a:a0:e4:ba:d1:
27:05:15:3f:99:3d:0d:1d:59:10:ff:3e:2a:7d:5c:11:0d:74:
b5:1f:6e:4b:5f:f8:ea:60:12:48:b9:e8:4b:61:60:cb:20:6b:
f7:57:5c:d2:f9:83:c3:6d:5c:b4:96:a5:e8:e7:99:91:44:d2:
a9:fc:f5:65:a3:05:f1:e3:cc:e0:d4:63:12:a0:6a:8e:38:95:
9e:09:17:c7:5d:62:8b:48:a7:59:3c:1b:ad:fa:d1:07:69:ab:
2b:6a:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:59 2026 by rpki-client