
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft (raw, json)
Hash identifier: Ct8zKo57HK53+sqh3OI3rvD6hd13qwHSch4+BcDIzo4=
Subject key identifier: 44:C0:13:03:B9:45:3F:01:FD:0E:B0:E0:6B:31:D2:B4:B2:80:8C:D8
Authority key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90
Certificate issuer: /CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
Certificate serial: 504BD4FABB6E96783C5B3DEB3B251F79C239011E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 00:08:37 +0000
Manifest this update: Wed 13 May 2026 00:03:37 +0000
Manifest next update: Thu 14 May 2026 00:33:37 +0000
Files and hashes: 1: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl (hash: 5eAFkPfuVUkOVNAXVyxt1gbSYRoeW2rqBFOucX8b4Fk=)
2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: 02qGuHs8PWiwuegUDxDYjRjxgPk9hr8EhoopovjNuGM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl
rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4b:d4:fa:bb:6e:96:78:3c:5b:3d:eb:3b:25:1f:79:c2:39:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090
Validity
Not Before: May 13 00:03:37 2026 GMT
Not After : May 14 00:33:37 2026 GMT
Subject: CN=44C01303B9453F01FD0EB0E06B31D2B4B2808CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:fe:c4:79:19:f9:80:5f:e4:b6:a7:48:20:
72:66:dd:a2:e6:d6:b4:0e:ff:1c:6b:0f:06:91:21:
ee:4e:c0:e9:2c:8c:9e:5c:29:63:6b:37:95:a7:bb:
f6:bd:ba:d3:1a:d6:3d:d6:02:c6:66:ee:8b:69:a6:
0b:db:58:2d:2b:50:bf:4b:23:96:a9:e6:ce:ee:26:
50:38:84:25:81:32:fe:8a:e3:e0:23:3b:47:6f:0a:
c0:8c:fe:c8:be:7e:43:83:78:a2:bd:e7:10:cf:7a:
62:64:e8:63:d0:61:8d:55:e3:49:40:b0:7f:54:69:
b9:4a:43:6d:25:4d:ff:a3:7b:d9:bc:4c:17:79:53:
d6:25:82:9f:46:b6:e4:9b:3d:c2:e9:f8:d8:8f:f6:
9b:51:f8:6f:74:f5:c2:e6:49:29:76:2c:0e:4e:b1:
fa:d3:d0:db:87:66:80:2c:74:34:18:75:c8:8e:a5:
ba:ca:9b:62:e0:d6:6b:9a:53:ae:0b:01:0b:52:89:
ae:96:15:f7:ff:ef:bf:6f:1f:94:8b:ab:b2:e8:a8:
f1:8a:2d:96:80:7f:38:9c:4b:7e:28:6f:6f:af:b9:
6e:79:67:52:f4:19:ba:2c:79:c1:0e:26:13:1e:37:
5f:65:2d:32:83:cc:97:8d:cf:56:ab:42:62:6b:5f:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:13:03:B9:45:3F:01:FD:0E:B0:E0:6B:31:D2:B4:B2:80:8C:D8
X509v3 Authority Key Identifier:
keyid:7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:27:17:35:47:b7:6f:af:b2:41:3f:10:20:09:26:0b:ad:d8:
e7:d0:2c:7c:d2:56:e5:eb:27:0c:3d:eb:a1:ce:65:74:61:a5:
b7:55:2b:a2:1f:2d:a7:b5:5e:ba:30:c6:d0:19:c1:52:32:c2:
18:d9:fe:a9:f8:53:4e:13:3a:2e:cd:83:1e:9e:8e:aa:b8:15:
50:7d:10:b2:ee:18:e5:f0:0c:70:09:be:e3:4c:e8:26:11:55:
f4:24:bb:18:c1:b6:b4:88:28:b0:c0:b4:86:44:2d:61:57:52:
68:04:4e:c1:d8:03:08:f0:c4:a8:67:59:02:c7:95:b3:b3:8d:
33:c7:0c:fd:de:bb:b7:b1:10:88:28:a0:43:04:a0:b0:e6:7b:
6f:25:03:e1:1d:98:a8:e5:73:21:fd:cf:46:33:9b:0a:cd:95:
08:e1:6c:af:bd:04:91:77:76:6b:8a:82:90:c8:86:9e:a0:78:
4e:1e:bf:0a:48:1a:b4:c5:64:7f:ef:06:b7:fa:10:70:24:19:
c2:f2:27:82:9c:76:cf:f4:0c:f6:8d:a2:3d:1e:0e:a2:78:ce:
bb:2a:7d:8e:42:36:6d:a0:10:31:8c:fb:3d:74:3c:4f:89:f2:
72:fc:8e:98:ca:9c:92:1c:47:9f:df:0b:ec:59:20:33:9e:4c:
d1:8e:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:11 2026 by rpki-client