
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier: Kjr278wJHAmTVzjyl31OyoregVT4zUQ9+HoqSsWChQs=
Subject key identifier: 8A:44:B2:82:88:17:2C:43:F1:CD:E1:FE:C6:F6:AC:55:D8:18:67:EB
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial: 5AC20B91EB4DC78936B11931C18C50D9B40E9035
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:04:23 +0000
Manifest this update: Fri 24 Jul 2026 03:59:23 +0000
Manifest next update: Sat 25 Jul 2026 06:24:23 +0000
Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
2: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: L4xA951BxebLItRwL/fYltHgHSQAboxLiMNHdFDaWkk=)
3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c2:0b:91:eb:4d:c7:89:36:b1:19:31:c1:8c:50:d9:b4:0e:90:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Validity
Not Before: Jul 24 03:59:23 2026 GMT
Not After : Jul 25 06:24:23 2026 GMT
Subject: CN=8A44B28288172C43F1CDE1FEC6F6AC55D81867EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:53:09:55:02:2b:df:bb:e9:a6:fc:00:68:
5f:56:f8:d8:af:03:34:bb:a4:f7:5f:91:80:54:ed:
23:f9:ad:d8:2c:bc:0f:a7:4f:52:48:64:86:b6:f1:
30:8c:c0:1f:71:cf:7c:10:9e:93:50:f1:82:bd:0e:
20:e8:3f:a9:b6:db:b9:08:84:e1:02:20:a0:07:55:
c8:e4:d3:93:a0:0f:4e:13:32:d1:f4:4e:75:ba:f5:
38:0a:86:f2:7a:63:c0:cc:2f:ce:c5:9d:73:3a:64:
0e:92:05:20:bf:43:cd:0a:8c:a6:f9:a2:38:77:54:
91:08:64:6d:d9:f0:dd:e3:24:7b:47:b3:5d:c0:9a:
55:83:fe:93:61:11:48:b7:06:74:4d:8a:f5:f1:53:
be:42:7d:c7:7c:24:c2:62:7f:c5:34:c5:8c:93:58:
3f:6a:7f:e0:6f:d8:b2:07:cf:cc:85:63:36:0f:00:
75:5b:ac:e4:d6:99:97:f8:8e:29:23:1e:25:10:9c:
4d:b3:49:ee:77:7b:b2:4b:52:2f:a8:7c:05:e5:dc:
c7:0f:4a:b1:3e:6a:74:36:fa:8c:51:b6:91:9b:c6:
69:0a:a3:53:1d:76:b7:f0:f8:00:fc:8a:db:17:e7:
c9:15:b7:cb:26:33:ce:4a:a9:71:55:9c:4b:3e:cc:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:B2:82:88:17:2C:43:F1:CD:E1:FE:C6:F6:AC:55:D8:18:67:EB
X509v3 Authority Key Identifier:
keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b8:4b:81:df:81:23:ef:e0:e6:8a:d0:24:c8:de:fa:ec:34:
6f:3c:6c:9f:7c:cf:ec:8b:ca:29:0b:dd:84:55:42:52:ca:8f:
57:d2:7e:97:a3:5c:d4:09:06:fc:33:bd:c6:86:be:d2:a6:46:
74:bb:12:fc:b1:c2:3b:e5:ad:fd:b5:63:2e:ce:6d:65:a3:23:
58:52:de:ef:85:6e:bc:f5:d5:39:ac:0c:f3:95:73:3b:7f:57:
36:8b:3b:69:8c:c6:a2:e6:a0:84:7c:95:66:cc:7c:59:13:58:
5c:b2:93:e3:b8:bf:20:b8:4c:93:0c:1e:b7:db:34:e4:bd:e3:
3b:55:2c:72:77:1c:b8:bb:9e:16:bf:19:fd:ac:b4:c5:c0:79:
92:8b:af:45:49:56:5b:05:d8:dd:b9:86:03:71:5e:34:88:77:
46:97:41:c2:5f:2e:c7:20:b4:05:d2:a4:47:22:39:06:aa:7a:
54:05:bb:f3:26:b0:2e:bd:bf:de:60:53:6c:3c:cc:26:56:58:
cc:cd:5b:73:fa:1b:e4:26:ca:9b:28:cb:6a:1e:ed:60:56:6b:
dd:73:cc:f1:2f:b2:a2:28:9e:c5:58:ce:a2:1c:a9:f4:3f:64:
91:a4:1d:2f:be:0b:0f:be:4b:1f:9a:4c:81:1e:e0:46:44:f8:
4c:b7:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:57 2026 by rpki-client