
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
File: B07262415656C2D65AF1FB6B516A57353FEA8D40.mft (raw, json)
Hash identifier: OcagNLOzlvgUuDI8p5fEaFPdxo7RwHjoXIyS1HG8pdk=
Subject key identifier: C3:E3:61:39:4D:78:4B:77:48:54:45:CC:E5:B6:20:C0:EF:C1:DE:E6
Authority key identifier: B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
Certificate issuer: /CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Certificate serial: 1456C65454D0231B657257BB14F0D7497BC87EF6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
Manifest number: 71
Signing time: Fri 24 Jul 2026 10:01:43 +0000
Manifest this update: Fri 24 Jul 2026 09:56:43 +0000
Manifest next update: Sat 25 Jul 2026 11:11:43 +0000
Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: 5+QjDX8KG0DdCRMLkCdouqkAivuUBYGCvdZURD0Juiw=)
2: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: HMulnii/HDUOgXgEUkM8p+8sNcb96i7rF2Rlq6FbVIs=)
3: B07262415656C2D65AF1FB6B516A57353FEA8D40.crl (hash: 6g7MGCBEMIfREBaKA2/v8qKPc2nKiOp/6TB7OMbGRb4=)
4: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: TU34W0uej+lBgrEZ9f3pjCsz5qnJOOeLATUQpCTCETg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:56:c6:54:54:d0:23:1b:65:72:57:bb:14:f0:d7:49:7b:c8:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B07262415656C2D65AF1FB6B516A57353FEA8D40
Validity
Not Before: Jul 24 09:56:43 2026 GMT
Not After : Jul 25 11:11:43 2026 GMT
Subject: CN=C3E361394D784B77485445CCE5B620C0EFC1DEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:79:83:6f:81:13:ec:a4:3b:c4:e4:35:96:
c0:03:38:d8:e0:2c:09:1d:b7:6b:73:06:51:ba:f5:
ee:dd:c7:90:c6:f4:50:57:68:79:3b:18:51:e3:e6:
b0:ca:4f:88:77:6b:ad:71:12:17:ad:91:ba:76:84:
2e:08:5a:38:b8:fb:2e:40:46:e9:f2:0f:de:c1:d2:
d9:39:b0:1c:ba:55:45:24:61:1e:96:35:2e:35:75:
e6:2d:66:07:e0:dd:39:1d:b0:9a:5f:d1:fc:27:d8:
1e:20:f9:a7:fd:96:e7:c5:52:90:0b:54:87:1f:03:
93:b7:9b:06:5f:30:a7:67:c3:87:d9:81:5f:ea:7f:
84:12:3e:64:4a:ee:84:01:60:17:c6:a0:0f:32:38:
bf:24:34:37:5e:d5:11:60:fd:0d:7c:76:08:20:9b:
4a:30:fb:b5:f2:fa:a9:14:1a:9f:ed:25:c5:9b:aa:
bf:0a:c0:44:7d:75:00:47:4b:2d:ae:41:dc:ee:8c:
da:56:79:69:aa:4f:1a:06:b3:20:e0:80:e5:56:47:
6b:90:d2:e1:a6:57:1b:0a:5e:db:dd:b0:91:57:9f:
b2:a8:27:77:f5:a0:88:b9:87:45:8d:ed:0c:6c:ca:
7e:7b:bd:85:e2:f9:6a:89:7e:96:3e:f2:cd:dc:76:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:61:39:4D:78:4B:77:48:54:45:CC:E5:B6:20:C0:EF:C1:DE:E6
X509v3 Authority Key Identifier:
keyid:B0:72:62:41:56:56:C2:D6:5A:F1:FB:6B:51:6A:57:35:3F:EA:8D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B07262415656C2D65AF1FB6B516A57353FEA8D40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/B07262415656C2D65AF1FB6B516A57353FEA8D40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:75:3f:d1:f5:05:05:6d:04:59:db:99:56:a6:74:17:e9:ad:
b3:91:ef:c7:ab:e2:96:ed:ca:e5:e8:6f:0a:a8:4c:dd:c2:7d:
9c:4a:be:56:2f:db:7e:be:ed:d8:ae:b5:63:92:95:39:ef:d6:
e7:d5:08:37:3b:69:53:23:18:5e:d7:40:b3:cc:83:03:2b:8a:
b8:f3:43:94:ab:56:75:24:ee:70:2e:4e:3b:a8:a7:e9:4f:17:
69:aa:19:fc:1d:2f:dd:10:82:15:53:09:8d:da:79:26:eb:af:
da:73:b9:ff:21:4b:1a:78:9b:12:2f:7c:b4:6b:6d:77:79:5b:
a7:50:55:44:9f:f0:5c:3f:ea:24:cc:71:ef:29:d6:c4:85:9f:
a9:e6:80:12:90:36:ce:03:50:c2:ab:1c:9e:9e:d8:f5:0e:db:
6c:46:68:52:7a:3b:c8:3c:24:0d:48:03:e4:93:60:03:11:cd:
58:f8:f8:81:a1:08:64:19:a4:c7:28:f1:3b:ea:2a:91:06:e2:
5c:94:b8:32:9f:c1:9d:55:84:9b:a6:0e:21:70:4b:87:c3:c7:
7b:dc:e3:76:33:ba:ed:e1:20:76:f4:a1:ba:76:ac:fe:bc:46:
31:24:c6:ec:56:81:82:fd:44:d0:0d:58:7e:fa:bb:a5:b7:bc:
54:15:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:17 2026 by rpki-client