
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
File: D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft (raw, json)
Hash identifier: zLSzpPvqCOkqm2GzzI6SnnXzlWTf/MUjMxCxKP5nfos=
Subject key identifier: C5:B7:1A:C0:B6:94:45:6A:2E:74:E0:2D:15:66:7B:E4:AB:93:D4:2E
Authority key identifier: D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A
Certificate issuer: /CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
Certificate serial: 250883155E0BDEEA6E7AE97E3BAB9116D6A712BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:47:41 +0000
Manifest this update: Thu 23 Jul 2026 22:42:41 +0000
Manifest next update: Sat 25 Jul 2026 00:25:41 +0000
Files and hashes: 1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: osJeCPZtE9R9btD8iw5N1b2W8PoHsZHfReclzn2JK+k=)
2: D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl (hash: LGK1C5lXFMGunGWLHHiCQHE0PHj1p1OZMyYWz91fRHU=)
3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: XXYg212KqJilVz4UQhoA9JNZDN5djYbD/oi5ScwKYIs=)
4: 3130332e3233342e33342e302f32332d3233203d3e20313531353231.roa (hash: v4OcOT72Y+Fw3xPxNhOv5K2oe1NqroMaIJLaKP7M7LE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl
rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:08:83:15:5e:0b:de:ea:6e:7a:e9:7e:3b:ab:91:16:d6:a7:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D007B768F676B78650AA828FA3D4B1BBE28EED3A
Validity
Not Before: Jul 23 22:42:41 2026 GMT
Not After : Jul 25 00:25:41 2026 GMT
Subject: CN=C5B71AC0B694456A2E74E02D15667BE4AB93D42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:d1:20:4d:b1:e0:2c:6b:55:dd:97:e1:22:
eb:48:21:e4:59:8a:e1:da:ea:71:20:f3:9d:de:67:
2e:a7:e4:96:88:ee:67:02:75:9d:d1:aa:a1:f2:f2:
d2:28:47:ed:af:72:60:df:c7:90:a6:a3:02:a8:40:
23:6b:e2:7a:73:11:0c:06:66:a3:0b:09:df:91:d2:
86:61:61:38:d5:31:8c:ff:21:7c:0b:5c:a1:19:cb:
1f:96:07:09:fc:a7:48:9f:b3:e4:09:dd:8a:ea:55:
f0:ea:32:9a:41:d6:65:be:b9:fe:be:55:dd:ce:11:
eb:a3:d7:a2:54:00:13:1d:4b:37:39:79:4d:8a:ae:
3c:50:53:62:d1:06:89:33:74:0e:89:1d:8c:98:3b:
59:d0:ce:6d:f5:9a:75:58:e6:e6:5a:e2:f8:34:60:
c8:81:11:e8:9e:3f:52:da:73:04:1a:7e:37:0a:1d:
f4:55:fc:1d:e5:1a:76:fb:49:c3:a6:38:29:49:25:
7d:d6:dd:7b:da:63:f3:04:7c:cb:28:d2:1e:68:39:
9d:4f:c5:18:a4:cc:c0:3a:08:8b:d3:59:8e:6c:42:
b8:e5:16:a6:c6:3f:f7:21:4a:34:c4:14:18:11:b4:
a3:99:41:79:69:c8:1f:b3:9b:44:7d:22:d8:8c:70:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:1A:C0:B6:94:45:6A:2E:74:E0:2D:15:66:7B:E4:AB:93:D4:2E
X509v3 Authority Key Identifier:
keyid:D0:07:B7:68:F6:76:B7:86:50:AA:82:8F:A3:D4:B1:BB:E2:8E:ED:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D007B768F676B78650AA828FA3D4B1BBE28EED3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D007B768F676B78650AA828FA3D4B1BBE28EED3A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:51:ce:67:cb:1f:1e:34:91:a6:e1:c9:69:ab:09:49:8d:
d0:69:46:33:ca:c2:cf:3d:ee:93:0f:d1:a3:b6:f1:51:7c:94:
b7:f4:dd:f8:41:36:64:45:8a:1a:57:0d:0f:e0:5a:58:3b:b6:
aa:9b:ae:d3:c0:27:4c:33:18:1b:e3:7d:53:08:c3:8c:6e:15:
7e:05:5c:12:ce:be:6f:45:73:9b:cc:37:00:9c:4a:52:ca:a4:
92:a2:82:04:59:39:1c:21:29:3e:c7:37:2d:87:d0:bd:be:5f:
e7:8f:22:0a:75:c2:f4:ac:6d:78:9f:98:63:36:79:59:99:eb:
8f:27:26:54:45:d9:9b:06:57:f7:5f:3a:a4:32:0d:8f:fc:67:
a7:5e:28:d5:d4:11:13:67:17:96:3c:d8:8a:76:18:54:9a:20:
06:1c:41:50:f9:4b:25:0b:17:c8:1b:75:0b:b5:22:65:32:b0:
5b:01:0a:3d:98:67:0d:cf:af:23:f9:5e:73:0c:7b:35:51:b1:
0d:7d:ec:8c:3a:9a:03:d8:51:15:ee:fc:6e:b9:85:d0:59:95:
60:b7:48:85:e4:a8:43:1a:b0:68:45:77:8b:06:97:90:fd:fd:
68:61:3c:51:dd:c6:63:1a:6a:44:d3:df:50:fb:91:88:16:0a:
02:d2:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:47 2026 by rpki-client