
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
File: C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json)
Hash identifier: dePaj1vNh4/L/iewY8f24vAqAOSLylOOlnbKbP2gJ3k=
Subject key identifier: 69:F4:DE:49:03:E1:E3:C2:F4:57:5A:6E:E4:CD:21:7C:5A:81:88:B1
Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
Certificate issuer: /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Certificate serial: 64AA489748FC6E2768F825AF74FB28C24B3A2417
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 02:37:35 +0000
Manifest this update: Fri 24 Jul 2026 02:32:35 +0000
Manifest next update: Sat 25 Jul 2026 02:51:35 +0000
Files and hashes: 1: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=)
2: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=)
3: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: 2qTQkvRcE9a/HfJU43Gwj9oUfvVyjNS3YDXPxVmVZ/8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:aa:48:97:48:fc:6e:27:68:f8:25:af:74:fb:28:c2:4b:3a:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Validity
Not Before: Jul 24 02:32:35 2026 GMT
Not After : Jul 25 02:51:35 2026 GMT
Subject: CN=69F4DE4903E1E3C2F4575A6EE4CD217C5A8188B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:04:73:c1:a3:82:93:d5:79:4a:d2:37:2e:
c9:0e:a8:9b:ed:8b:ea:39:50:61:84:10:97:10:88:
db:53:d0:89:ee:f1:dd:1b:29:a1:69:c7:4d:a4:f1:
28:7d:0f:e0:5b:2e:15:92:b3:7c:d1:a6:49:ed:51:
58:70:81:c4:da:1e:b2:4d:d0:ba:6a:bd:90:f6:ed:
22:58:3e:f2:68:5a:40:de:fc:1a:59:92:84:27:a2:
2c:0a:e6:6c:44:a3:c0:b3:09:91:37:04:f9:b4:9d:
4a:e5:99:04:0e:7f:15:ec:a4:fc:57:47:c8:a3:af:
c9:50:ad:15:7b:2b:a6:fd:4d:62:45:4b:cd:8c:a7:
1c:02:e4:f2:7c:01:89:bc:31:e7:d2:5d:92:be:f8:
42:06:0b:92:1e:19:4a:9b:06:86:73:48:4c:2f:d7:
c0:cb:b5:08:a0:32:3a:b3:53:a5:8b:20:dc:2b:9b:
f5:07:ef:a0:02:ea:67:78:21:7f:e4:8f:56:f7:27:
4b:3b:6c:ed:b7:48:c8:22:3e:d1:58:bf:1c:91:d0:
e7:01:36:28:bf:ff:07:b3:ab:2c:f0:a9:e5:e6:7c:
c5:9c:24:83:25:a0:85:b3:8c:fc:09:7b:5d:f6:54:
4e:9a:3e:f6:51:de:ae:ae:16:40:e2:94:17:ee:c9:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:DE:49:03:E1:E3:C2:F4:57:5A:6E:E4:CD:21:7C:5A:81:88:B1
X509v3 Authority Key Identifier:
keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c0:5a:5c:ef:e1:dc:de:f5:ff:1d:d1:9f:3c:57:95:93:d5:
a8:0f:ce:8e:1b:71:09:ff:77:ff:63:e4:01:43:0e:f7:54:cf:
42:85:6d:b6:3b:55:a3:3e:a8:23:23:09:8a:2d:c3:9a:ed:0f:
02:f7:8c:93:76:ab:a1:61:e3:f7:65:2d:98:ee:91:3f:a9:ee:
f0:10:ce:5b:2e:a5:67:b8:76:0f:0d:53:fb:08:53:ab:d1:6e:
a6:8c:30:2d:e1:cc:0b:64:18:6e:a6:e2:97:b4:76:b7:81:23:
39:44:63:7e:4f:b8:4c:be:93:fb:de:ba:a0:d3:29:7f:d8:b9:
72:42:06:a1:6a:ff:ec:9d:b1:be:9e:37:44:b3:9c:4f:f6:92:
ee:93:f5:c9:5c:fe:a1:38:8f:af:fc:c1:2f:30:a2:a6:44:57:
a2:b8:17:ba:09:13:6a:f3:14:5f:95:eb:0e:7d:9b:3c:35:4f:
dc:67:3b:29:4e:b1:f9:09:aa:03:d3:85:69:84:00:9f:35:91:
e0:7f:7f:5a:82:6f:c8:f0:06:36:08:f2:9c:60:1d:f3:a2:99:
05:80:81:f6:27:d5:12:e5:0d:83:aa:d7:a6:86:cc:61:81:7d:
64:17:63:e5:50:df:8c:9d:ef:27:e7:5f:40:6f:3b:05:13:ad:
2e:05:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:33 2026 by rpki-client