
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft (raw, json)
Hash identifier: m9QyGTIYgdebJPbdi83s0lEP/fhGpvNh3am225+9kwI=
Subject key identifier: C6:E0:0F:0D:AF:FB:6A:92:9E:0C:91:B8:5B:65:E6:97:D5:C5:28:94
Authority key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8
Certificate issuer: /CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8
Certificate serial: 7FC4B9D2B4F7CB74637742ADAEBEDBC920934169
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 01:46:24 +0000
Manifest this update: Fri 24 Jul 2026 01:41:24 +0000
Manifest next update: Sat 25 Jul 2026 03:54:24 +0000
Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: ljFouV7ZlSbTbdDcS0zoJf3jqUeKDHqtCtUhcsruCg4=)
2: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl (hash: MZUnWV7jSZuI872R5uVWrSBdHq9OwmKpVj5hw/Dcfks=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl
rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c4:b9:d2:b4:f7:cb:74:63:77:42:ad:ae:be:db:c9:20:93:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8
Validity
Not Before: Jul 24 01:41:24 2026 GMT
Not After : Jul 25 03:54:24 2026 GMT
Subject: CN=C6E00F0DAFFB6A929E0C91B85B65E697D5C52894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:bf:ef:f9:dd:19:58:60:46:9d:22:99:49:
2d:ce:62:b5:ae:d4:a3:a3:2a:b7:d3:da:60:9c:80:
6f:f0:bd:da:5b:e6:ef:14:7c:33:f7:2b:6a:da:6d:
72:10:17:b9:a3:a9:a0:bc:78:14:9e:6a:ed:56:93:
7c:23:96:c2:c1:17:e2:53:e0:02:d5:2e:a4:8c:b2:
c5:ab:7c:e3:fe:7b:37:4d:5f:4c:87:c1:82:91:84:
57:26:ea:30:16:3a:fd:80:d6:57:8a:3f:f5:5c:79:
a2:d8:b1:22:f2:be:8c:94:6a:05:3c:33:c2:4f:c6:
f2:9a:fe:d0:15:c0:80:05:41:76:66:9b:99:de:9e:
f7:b6:31:41:ac:45:df:68:03:f8:2f:1a:11:7d:ae:
74:3e:41:79:c9:f7:43:cd:08:eb:ca:33:8b:77:c0:
cf:31:c3:46:0b:37:d7:1a:1a:13:ce:95:ee:6a:04:
e6:cb:98:3c:f0:99:29:b7:32:fb:e8:74:03:c2:23:
86:c4:12:64:d4:de:ca:6b:20:1a:26:e0:4d:21:01:
bc:76:10:96:36:f8:a6:59:fd:40:23:7b:66:5e:12:
1f:80:d3:0d:17:d9:1b:45:5a:cc:41:4f:13:ea:85:
74:01:a5:ce:4f:33:1f:cd:7a:16:d7:e2:d8:a9:d4:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:0F:0D:AF:FB:6A:92:9E:0C:91:B8:5B:65:E6:97:D5:C5:28:94
X509v3 Authority Key Identifier:
keyid:B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ee:0b:30:ef:07:09:10:7b:b5:2e:f8:b8:d7:1a:6b:f3:fc:
99:19:57:47:1c:f3:8f:83:da:18:28:07:41:6a:d2:d8:4c:15:
9f:3a:98:85:4b:51:74:3f:a0:c4:51:97:fa:be:fd:cc:94:68:
5d:2b:fa:28:12:47:c8:fa:a5:53:73:f4:fb:63:9c:95:2a:50:
38:0b:19:2a:b1:58:c5:f8:4f:dd:eb:2f:9e:51:59:36:d1:40:
2a:65:90:89:7c:c2:fc:52:43:93:3b:2b:87:cc:ad:cc:a5:d3:
9e:61:3b:7f:9b:4a:92:c8:7b:71:d1:38:bc:8c:83:e0:c1:02:
f7:03:7e:d7:46:7f:c6:ba:17:66:be:be:d8:dd:ab:fd:00:58:
94:45:9e:28:61:97:ee:69:5f:47:f1:03:e9:aa:8d:c5:0c:cc:
16:1c:24:92:2d:b0:c9:4f:04:9f:b2:c4:cc:a6:25:6e:95:2c:
44:48:c8:ad:a1:f8:55:bb:e6:62:b1:96:19:01:4e:82:c3:27:
93:b2:6e:86:7c:7b:13:e8:fa:9a:22:55:05:77:66:30:97:ca:
5e:38:1d:67:2e:41:aa:01:00:a8:44:46:8e:b4:e3:89:5f:80:
39:a3:c0:27:42:e5:a7:17:f6:9d:23:50:8e:32:0a:ba:e2:17:
53:75:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:04 2026 by rpki-client