
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
File: C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json)
Hash identifier: pf/w2f3njWfpkWiW9Lzyax9pRZ589DNaU6/FoyJ/jJU=
Subject key identifier: 31:7B:C3:07:97:1E:B0:27:D0:E8:40:E3:AD:0D:63:37:1D:2B:71:25
Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
Certificate issuer: /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Certificate serial: 39D38F34E15BF2172BD9FCE1823472914356CA40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 07:24:03 +0000
Manifest this update: Thu 23 Jul 2026 07:19:03 +0000
Manifest next update: Fri 24 Jul 2026 10:36:03 +0000
Files and hashes: 1: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: BDp16ZJ7xvkEhlvnJn5PFRLRYmkPn3TWolDbpp3Qh9A=)
2: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=)
3: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d3:8f:34:e1:5b:f2:17:2b:d9:fc:e1:82:34:72:91:43:56:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Validity
Not Before: Jul 23 07:19:03 2026 GMT
Not After : Jul 24 10:36:03 2026 GMT
Subject: CN=317BC307971EB027D0E840E3AD0D63371D2B7125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:e1:38:0c:bb:58:dd:8e:ee:aa:ae:92:98:
01:bc:54:09:00:48:63:fa:e7:17:be:36:58:9e:39:
96:29:a3:5b:c3:66:c4:37:4c:57:fc:56:93:b3:1a:
96:e9:33:4f:f6:37:ee:ef:02:a7:e0:9d:c8:0d:3a:
c0:39:d2:0a:c3:74:25:4b:85:89:f7:06:9f:44:d8:
69:d7:9a:c1:6c:e2:d6:c6:38:d8:42:c7:12:77:1f:
81:43:68:66:76:c4:67:aa:41:1c:20:67:3b:89:16:
8d:a4:97:da:06:d5:3d:bf:3c:ef:b4:90:71:15:95:
db:8a:e8:37:3f:58:1f:9f:3f:6e:4c:d3:ef:a8:cb:
2e:1f:38:98:6e:b3:5d:f7:9f:d2:14:d6:31:57:ca:
bf:04:6f:24:e2:d5:0c:da:93:f5:68:62:d4:80:b3:
e9:6b:24:14:55:e5:eb:44:ea:52:ee:95:1a:1e:e9:
6c:39:21:78:2a:25:0e:f4:02:d0:da:32:26:9a:1d:
ce:33:79:fa:7b:62:24:2b:93:28:c7:39:0b:a3:df:
a9:96:97:e0:6d:47:73:fa:c2:2a:12:54:15:8c:e3:
3d:a0:6e:ef:c2:8c:73:05:80:b6:83:47:bc:5d:e3:
5e:4c:83:a5:88:bc:13:ed:9f:44:29:ef:2a:25:46:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:C3:07:97:1E:B0:27:D0:E8:40:E3:AD:0D:63:37:1D:2B:71:25
X509v3 Authority Key Identifier:
keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fb:93:5e:a4:99:7d:bc:df:68:0b:4d:dd:2a:c4:2b:03:9a:
dc:dd:77:d7:89:91:db:6d:9d:c0:03:c9:77:ad:85:30:23:94:
5f:b3:03:79:0f:65:8b:03:73:9e:9d:35:6f:83:0a:ea:99:5d:
6d:14:5b:ac:9f:b2:be:19:8a:29:ff:57:cb:06:8e:ef:07:6a:
bf:b4:25:b0:64:c7:07:d9:49:ea:2f:3f:b5:ab:ef:c1:9f:87:
b6:cc:16:56:d0:0d:d5:52:ce:fc:3d:b8:e7:3a:0d:c9:44:a4:
60:e6:ea:1a:92:fd:4e:c1:02:77:83:c4:33:a7:89:b9:32:4a:
22:45:5c:ca:5f:c6:2f:db:b7:0d:b8:50:cf:0e:00:44:f1:8b:
e7:28:23:59:7e:cf:34:1b:45:1c:e6:16:29:cd:23:d6:43:34:
94:af:32:be:1b:2a:9f:ba:1f:58:33:4b:a7:da:7e:60:ff:09:
fd:b6:9e:b5:1b:9b:d1:b5:52:b1:a6:40:66:fb:ef:a2:d4:7c:
eb:9f:cf:cc:a6:46:65:81:97:d8:49:4e:dd:f3:eb:7f:9c:81:
c7:58:14:0e:3d:3c:91:7b:1c:49:9d:09:c5:cd:25:de:0f:bd:
a8:58:ca:12:59:cc:b8:b5:c2:1f:07:4c:cd:fc:ae:0d:23:ad:
57:a0:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:56 2026 by rpki-client