
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json)
Hash identifier: 7+mMYanoZmLWV0HCIP7ZjDLX9MNClHF3HHpOlMkK1V0=
Subject key identifier: BF:4B:AD:25:53:F8:DC:6C:AC:83:17:09:5D:3D:DC:F6:FB:60:E4:CB
Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Certificate serial: 27E89A1AAD52BDA6D9A8232E70DC986467E837C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 07:28:37 +0000
Manifest this update: Fri 24 Jul 2026 07:23:37 +0000
Manifest next update: Sat 25 Jul 2026 11:11:37 +0000
Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: OJd+J6UthvUbafLscJcGB5IATF5u5XjQjQL5lJ8bLw8=)
2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e8:9a:1a:ad:52:bd:a6:d9:a8:23:2e:70:dc:98:64:67:e8:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Validity
Not Before: Jul 24 07:23:37 2026 GMT
Not After : Jul 25 11:11:37 2026 GMT
Subject: CN=BF4BAD2553F8DC6CAC8317095D3DDCF6FB60E4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:df:c6:4f:8e:40:a7:62:7f:91:5d:3e:6f:
58:81:f0:5a:7a:6f:89:55:b2:9d:e3:7b:22:f5:b5:
bc:fd:d2:94:e0:ba:91:d7:42:f1:31:78:4e:b6:ee:
8a:d2:58:83:e8:c8:a5:55:00:4c:fe:3d:75:91:ee:
85:12:44:1a:d2:43:45:76:cb:7b:6f:28:28:71:82:
6a:98:71:4e:35:4b:b9:13:dc:4d:78:85:c5:07:d2:
c7:a3:03:ec:0f:27:66:19:c1:0e:ea:13:9b:d0:b8:
50:a0:5d:e7:b7:b4:45:b4:81:90:f7:74:70:75:80:
d0:70:d8:66:01:e7:c4:e1:3b:cf:7c:cb:1d:fa:bf:
6a:0f:2f:63:ba:7c:e7:06:7f:99:00:48:e6:52:38:
63:78:cb:74:64:53:a5:59:1b:bd:9c:99:a3:82:7c:
31:22:92:28:67:a9:a4:d7:9d:19:d4:82:be:40:0b:
23:61:54:d8:70:ca:af:81:55:12:17:1f:fa:47:3f:
ab:0b:a9:a2:36:a5:ea:34:25:16:57:3f:7e:a4:95:
97:f5:6b:2b:1d:ae:d6:01:1f:f9:52:01:3a:d1:5c:
f7:c4:e0:7b:b1:71:7b:0a:2a:c4:9c:0a:46:24:c9:
e0:99:19:86:92:49:8f:c3:b5:42:04:38:8c:7b:6e:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:AD:25:53:F8:DC:6C:AC:83:17:09:5D:3D:DC:F6:FB:60:E4:CB
X509v3 Authority Key Identifier:
keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0a:ba:5c:3d:ed:e4:62:8d:33:10:aa:5e:05:7e:45:5c:b8:
3f:8c:fb:6f:a0:2d:86:df:f0:06:0e:d1:2a:54:a8:2d:26:40:
6e:dc:fc:ad:96:c1:91:14:45:d9:88:02:cc:b4:25:e7:c0:fb:
00:49:b0:c6:76:9b:04:77:fd:d3:cc:ce:bc:60:01:6c:61:7b:
c1:27:d2:0c:47:9b:7f:0b:e7:59:37:49:97:50:65:65:e4:6e:
92:9c:c1:ac:69:4d:45:27:28:5c:3d:13:e7:67:08:f3:c8:83:
b8:11:00:d0:d5:da:e3:8f:2f:31:d3:b3:75:cd:7b:f7:09:a5:
23:c9:aa:b5:cb:3f:2c:33:39:6e:58:01:dc:20:39:78:e7:0b:
4f:ec:c2:5c:9f:a0:8a:09:14:77:4a:66:17:e7:92:be:38:71:
ae:5d:ea:42:01:65:b3:e1:42:20:32:6f:dd:56:30:0e:7b:1e:
14:79:31:d1:5f:79:5b:f8:3e:10:82:6e:14:95:3a:8a:64:89:
32:8c:f4:9a:b4:a7:84:36:d0:20:1a:71:e2:d6:8f:78:59:92:
c4:88:6d:ff:51:61:ae:20:a4:d8:c0:ea:d4:ef:19:5c:a8:27:
ea:4a:38:c2:2f:ad:c1:6e:8c:5d:81:20:7e:d6:d4:98:75:fb:
af:de:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:15 2026 by rpki-client