
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier: KiVaEcm23Xy0QWQhn20CE3RlBjnWk7R64TGj4Tv/Mw0=
Subject key identifier: C9:63:5F:59:FE:73:27:50:F6:62:09:B0:8A:DA:DD:24:77:87:97:2F
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial: 7804A3E09F10B3354BC04114E040E7E72B4E0D83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:01:50 +0000
Manifest this update: Tue 12 May 2026 22:56:50 +0000
Manifest next update: Thu 14 May 2026 00:53:50 +0000
Files and hashes: 1: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: uAltSiNqs4Mo/O+Iy+JJ6n6nEpZpeCTtMEVH4MITZp0=)
2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:04:a3:e0:9f:10:b3:35:4b:c0:41:14:e0:40:e7:e7:2b:4e:0d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Validity
Not Before: May 12 22:56:50 2026 GMT
Not After : May 14 00:53:50 2026 GMT
Subject: CN=C9635F59FE732750F66209B08ADADD247787972F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:7c:61:a4:e7:56:39:6c:ea:cd:16:27:97:
41:b6:92:00:e8:2f:02:53:9f:f0:73:1b:10:b8:19:
82:bf:c3:c4:18:11:45:b8:71:46:ca:c4:c6:b3:0d:
5a:90:49:3a:bc:a2:d6:49:f9:86:3d:d6:92:77:09:
13:e0:aa:61:88:97:43:1b:07:61:65:ac:d0:52:5c:
9b:3c:a2:c2:70:2d:9b:cb:f6:ed:67:93:da:4c:fe:
28:a6:47:42:01:00:98:89:90:45:44:43:b6:02:55:
30:a2:17:ab:09:3e:56:58:ed:b2:13:00:a9:e3:74:
0d:3d:6c:58:2e:f0:df:97:0f:26:1e:7e:36:3c:b4:
be:c9:ef:6f:84:19:ed:63:0f:b6:1d:aa:4f:68:fc:
81:b9:3e:8e:c8:e6:22:f3:16:1f:eb:2c:a1:a1:bd:
ff:55:cd:50:d5:56:33:cb:55:c7:34:9e:ee:be:1c:
31:d9:c2:ce:b5:d1:f6:3c:48:d3:d1:ce:b6:72:f1:
b2:08:ed:56:e5:f2:60:7f:a8:37:22:ab:84:b6:f6:
0f:f9:e4:15:f6:8c:cf:94:ae:1e:87:85:df:34:e3:
92:fa:4a:ba:27:57:3d:3b:ca:90:0a:2d:44:a3:ac:
c2:98:e5:74:fc:16:1a:35:55:db:ff:6f:2b:c9:28:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:63:5F:59:FE:73:27:50:F6:62:09:B0:8A:DA:DD:24:77:87:97:2F
X509v3 Authority Key Identifier:
keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:64:82:15:08:95:aa:7f:a1:2a:f4:06:bf:0f:2d:00:e7:
ae:60:f3:90:74:a1:21:d4:0e:c1:88:08:5e:e9:e9:5b:1c:9a:
02:2b:ee:08:0c:cd:66:ed:be:47:b1:a5:52:1a:98:82:ad:fa:
24:15:cc:fe:74:aa:9d:76:6f:af:7a:ea:63:7d:89:3f:eb:5c:
10:2f:cc:6e:b4:86:6a:f6:54:e1:8c:17:47:67:5a:f7:53:42:
4f:fb:f9:4e:c1:5f:3e:69:15:75:f9:db:2e:28:8a:05:23:82:
5e:00:27:42:dc:32:1a:57:fa:70:1f:94:a6:95:d1:ce:2b:17:
e3:f4:11:34:20:69:3f:d7:bb:0b:f1:5f:76:82:b4:5c:ad:4f:
6d:fb:0b:32:af:76:b7:45:7a:26:ab:70:a4:72:bf:c6:bc:d0:
d7:05:3d:80:96:09:51:09:69:ff:9c:8c:d3:a3:4c:fb:54:06:
37:88:ee:c5:e9:4a:36:50:d2:5f:31:70:5b:e2:ae:b3:0c:c1:
ce:8b:83:1a:18:d8:a0:ce:7c:35:5b:64:97:dc:da:0f:38:36:
46:96:02:6f:ea:8e:7b:f0:b9:5f:b4:19:07:32:8a:2d:22:a6:
4b:13:cf:f2:10:cd:ea:aa:c2:9f:ca:6f:43:dd:d8:ad:8d:56:
de:b9:7f:1d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeASj4J8QszVLwEEU4EDn5ytODYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUy
MDY2MTdFRjAeFw0yNjA1MTIyMjU2NTBaFw0yNjA1MTQwMDUzNTBaMDMxMTAvBgNV
BAMTKEM5NjM1RjU5RkU3MzI3NTBGNjYyMDlCMDhBREFERDI0Nzc4Nzk3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadHxhpOdWOWzqzRYnl0G2kgDo
LwJTn/BzGxC4GYK/w8QYEUW4cUbKxMazDVqQSTq8otZJ+YY91pJ3CRPgqmGIl0Mb
B2FlrNBSXJs8osJwLZvL9u1nk9pM/iimR0IBAJiJkEVEQ7YCVTCiF6sJPlZY7bIT
AKnjdA09bFgu8N+XDyYefjY8tL7J72+EGe1jD7Ydqk9o/IG5Po7I5iLzFh/rLKGh
vf9VzVDVVjPLVcc0nu6+HDHZws610fY8SNPRzrZy8bII7Vbl8mB/qDciq4S29g/5
5BX2jM+Urh6Hhd8045L6SronVz07ypAKLUSjrMKY5XT8Fho1Vdv/byvJKDyZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyWNfWf5zJ1D2YgmwitrdJHeHly8wHwYDVR0j
BBgwFoAUe+6ykOklTnZqfYw7IW8HhSBmF+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2Y3MmYwMTItYTQzYS00ZmNiLTg2YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBF
OTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUyMDY2MTdFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83QkVFQjI5MEU5MjU0RTc2NkE3RDhDM0IyMTZGMDc4NTIwNjYx
N0VGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2
YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3
ODUyMDY2MTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAh+ZIIVCJWqf6Eq9Aa/Dy0A565g85B0oSHU
DsGICF7p6VscmgIr7ggMzWbtvkexpVIamIKt+iQVzP50qp12b6966mN9iT/rXBAv
zG60hmr2VOGMF0dnWvdTQk/7+U7BXz5pFXX52y4oigUjgl4AJ0LcMhpX+nAflKaV
0c4rF+P0ETQgaT/XuwvxX3aCtFytT237CzKvdrdFeiarcKRyv8a80NcFPYCWCVEJ
af+cjNOjTPtUBjeI7sXpSjZQ0l8xcFvirrMMwc6LgxoY2KDOfDVbZJfc2g84NkaW
Am/qjnvwuV+0GQcyii0ipksTz/IQzeqqwp/Kb0Pd2K2NVt65fx0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:23 2026 by rpki-client