
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json)
Hash identifier: LRwn573YkYdJgTgBdbYEIccDZ/QaFAbV3m+r0Cy2ANk=
Subject key identifier: 47:B8:9D:D4:B7:CE:32:C1:A4:04:CD:D0:EA:54:35:44:CB:4D:A2:97
Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Certificate serial: 1A7196249406F236ECF79A7D3E190F020B56C6A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:10:48 +0000
Manifest this update: Fri 24 Jul 2026 05:05:48 +0000
Manifest next update: Sat 25 Jul 2026 05:13:48 +0000
Files and hashes: 1: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: HWCIpUmFYNaFvPSLUGAOE7PkVBayAPPsGQ/VKYVRzxc=)
2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=)
3: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:71:96:24:94:06:f2:36:ec:f7:9a:7d:3e:19:0f:02:0b:56:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Validity
Not Before: Jul 24 05:05:48 2026 GMT
Not After : Jul 25 05:13:48 2026 GMT
Subject: CN=47B89DD4B7CE32C1A404CDD0EA543544CB4DA297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:86:3c:db:4f:b5:de:76:9b:3f:4a:eb:51:
92:45:2f:96:2f:a7:cb:79:76:28:46:d0:96:b6:89:
64:81:67:66:30:d0:32:ba:23:06:9f:d8:e4:7b:26:
c7:59:f1:70:6b:67:85:08:84:36:9b:34:9d:b7:cb:
17:f8:74:54:5a:96:9e:4c:0a:29:ca:5e:1f:ea:78:
30:a1:d6:45:77:2c:4e:58:e6:a5:69:03:67:f9:ea:
a3:a4:05:23:ad:bb:33:c0:10:d1:35:bf:4e:f4:7a:
6b:1b:4f:1b:1b:2a:29:bf:cf:49:ca:f2:37:fd:a7:
69:76:01:7a:3f:28:11:27:23:a8:86:ff:1f:c7:a6:
ae:78:9c:d4:d8:e2:51:fe:fe:b8:98:8a:7a:9c:1e:
73:fa:46:05:ed:97:5a:9a:ae:43:9e:9c:81:dc:ea:
e6:1d:56:39:91:7d:ba:e4:c7:de:27:94:ee:66:49:
bc:ea:a0:84:49:00:a5:b4:85:82:e0:d8:c5:0c:21:
ce:eb:d4:00:da:51:34:06:0b:f1:31:ec:f7:94:9b:
4f:b9:a7:ba:03:55:36:6f:c0:12:9e:7f:eb:ed:ef:
03:04:0d:cf:86:29:fb:29:a5:76:08:06:60:82:aa:
bd:af:a7:93:24:cf:c2:9d:cf:02:ba:10:38:61:46:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:9D:D4:B7:CE:32:C1:A4:04:CD:D0:EA:54:35:44:CB:4D:A2:97
X509v3 Authority Key Identifier:
keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:ed:83:af:5b:4e:e0:c9:93:5b:c8:7e:cf:d8:dc:4f:3d:
80:b3:71:0d:e3:05:5e:97:80:e0:9c:9d:9c:83:73:d6:05:c9:
1c:1e:d8:66:70:76:74:99:9d:dd:68:36:39:2e:13:67:a3:41:
5d:7a:1b:6a:02:ae:05:a6:ee:e6:19:0f:7e:fb:8f:5f:c8:39:
e4:97:3a:d8:e2:29:36:b5:94:d4:24:13:9c:52:ed:25:fc:86:
68:82:0d:e2:3b:cc:e8:cb:ed:e5:5d:b0:4a:a0:d3:ba:31:c7:
06:6e:22:72:67:6e:a8:3d:f2:9c:37:67:23:13:ed:20:7a:1e:
c4:cd:fa:bf:3b:2e:48:f6:88:95:57:c5:90:47:77:fc:0e:cb:
60:ff:74:cd:83:af:f4:a6:cf:e9:33:3a:33:d0:4b:6a:3a:fd:
4b:0d:0c:33:5b:68:da:16:c2:0d:ef:92:66:3a:7d:6b:48:6b:
24:f6:07:0b:39:32:3e:77:33:a7:01:11:64:e8:59:e6:76:97:
53:52:a7:e6:9a:44:92:e4:4b:ef:09:e5:2a:3b:8b:51:16:e5:
60:46:f0:b2:84:5c:21:d6:73:be:81:6a:0c:ab:48:25:3c:2b:
c8:92:ea:4d:de:78:9c:00:f9:6d:c1:ab:b1:41:19:e4:27:e7:
31:2c:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:16 2026 by rpki-client