
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
File: 79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft (raw, json)
Hash identifier: 3Hj988iiCXF+zn2b9PNmSkGFeVi0ASWZhKVW7E9/yAQ=
Subject key identifier: 1A:C4:B6:45:C8:49:DD:3D:10:AD:A5:0D:A9:FD:45:F6:F6:A0:D6:4F
Authority key identifier: 79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72
Certificate issuer: /CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
Certificate serial: 36C2A5AB79DC96D03C5F02BFB267B5A09E6D81AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 16:14:45 +0000
Manifest this update: Thu 23 Jul 2026 16:09:45 +0000
Manifest next update: Fri 24 Jul 2026 17:38:45 +0000
Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: I2RP+h+ruVedIe2ZDABEWOHH2T2e3+KmQHhUPUy4u6I=)
2: 79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl (hash: /uvf1SXVGgiiKe4ZDZ7+UuBoeu7i4AQ2GHDLLUQMNfY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl
rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c2:a5:ab:79:dc:96:d0:3c:5f:02:bf:b2:67:b5:a0:9e:6d:81:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
Validity
Not Before: Jul 23 16:09:45 2026 GMT
Not After : Jul 24 17:38:45 2026 GMT
Subject: CN=1AC4B645C849DD3D10ADA50DA9FD45F6F6A0D64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:88:24:43:a5:e5:a0:f1:af:5f:59:0e:ff:
48:6d:8b:72:1d:0d:59:8c:ad:e9:55:e3:92:b4:fb:
0a:88:6f:4b:06:43:11:92:6d:fc:b2:30:e6:17:59:
14:e5:fd:26:ce:19:60:e3:17:2d:4b:c3:f3:87:f7:
16:17:f5:e8:a4:98:a2:50:b3:5c:3d:c1:42:ad:12:
74:37:0a:b7:c1:f4:b7:86:f9:d7:83:9c:ad:17:53:
f4:7f:5a:09:65:8a:3d:10:03:ea:12:22:1c:1a:af:
d5:f6:67:d9:8f:29:54:18:4c:9e:80:f3:94:8d:38:
d9:0f:f8:47:2d:f3:67:1c:ce:19:36:bf:db:0d:0f:
54:fe:68:b6:4a:14:14:d9:8f:cd:bf:d6:ba:15:ab:
38:ba:63:9c:59:b6:2e:c9:81:55:d5:eb:eb:11:9e:
10:6f:61:72:a8:65:17:d1:f7:8e:1b:6f:9a:8e:5c:
33:54:b0:3c:74:21:86:72:e4:03:4e:ba:2a:97:bd:
6b:0e:28:b9:69:f8:8d:ce:c7:7c:e9:f1:5d:22:62:
f3:2a:2d:7a:9e:db:af:dd:c3:44:eb:2e:8a:a5:be:
bc:fe:bb:da:cb:1b:cb:fd:2f:ae:c6:be:63:ed:4c:
a1:b8:2a:46:0b:50:70:62:f2:d4:6d:42:60:59:f6:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:B6:45:C8:49:DD:3D:10:AD:A5:0D:A9:FD:45:F6:F6:A0:D6:4F
X509v3 Authority Key Identifier:
keyid:79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:30:f0:24:5d:ea:d9:c6:fb:75:da:a0:1c:de:d0:24:e8:83:
ed:1d:d5:60:cc:2a:75:24:b0:dd:cb:2a:dd:0b:27:89:38:26:
04:02:34:26:e5:a9:af:0d:1a:28:c7:5f:5b:98:cd:62:60:fc:
2d:23:f5:bc:f7:eb:1c:bb:09:ba:a7:98:ed:00:65:46:a9:92:
14:f0:3a:47:1e:f7:b3:04:3a:47:2e:38:b2:9c:5f:bb:59:43:
ca:d4:7d:5b:80:be:2c:6f:7f:22:73:bb:e3:15:16:4d:c2:2f:
67:0a:37:21:bc:ad:8a:25:62:68:f3:73:9c:91:3d:f1:f5:ee:
a5:d3:27:8a:9b:6a:2e:9d:23:b6:7e:32:5b:4f:66:6a:19:98:
b2:4e:1d:70:4e:cf:03:9b:a6:fa:14:fd:78:56:b5:cf:62:11:
40:30:65:26:24:c3:8d:c8:fd:51:b1:ff:6e:2e:4a:f0:26:63:
88:4b:98:d8:ec:da:96:09:1f:ee:91:91:14:69:5f:42:05:1d:
4f:9b:0d:48:ba:d8:74:32:ac:d1:3e:d7:ab:c8:cc:ce:6d:ff:
97:d3:22:42:6a:3b:16:a3:71:3b:3e:ef:dd:64:a4:25:38:9a:
97:f0:1e:17:5b:54:64:23:ba:2e:cd:4b:ae:e9:c6:db:f2:d2:
0c:39:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:26 2026 by rpki-client