
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json)
Hash identifier: rjCZwMFmzFOK0gh5Obrki1F9xpOPcLg9BlLQkKUoYRY=
Subject key identifier: C6:17:48:CF:39:DC:4C:C8:F2:1D:86:8F:F6:87:68:C1:49:11:7B:50
Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Certificate serial: 613FA6FCAA38D2D4C18E2DC28B6040D3DA80E0A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:54:32 +0000
Manifest this update: Tue 12 May 2026 14:49:32 +0000
Manifest next update: Wed 13 May 2026 15:02:32 +0000
Files and hashes: 1: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: MFwoOoVSw+NttSc+KgDgsJdiJJs6GX6cGOqTeKAzJmg=)
2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=)
3: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3f:a6:fc:aa:38:d2:d4:c1:8e:2d:c2:8b:60:40:d3:da:80:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Validity
Not Before: May 12 14:49:32 2026 GMT
Not After : May 13 15:02:32 2026 GMT
Subject: CN=C61748CF39DC4CC8F21D868FF68768C149117B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:08:81:0e:b4:15:d9:0a:81:9d:b8:d0:c0:
8f:1d:6d:19:49:a3:cb:84:78:3a:2e:46:7f:6f:0e:
bb:8a:fc:4c:84:87:82:cc:69:d9:50:8f:c8:49:4c:
fb:b9:62:32:c5:d5:49:55:27:75:43:ee:46:99:a7:
d0:21:72:43:5d:07:3d:27:79:e3:05:58:51:78:66:
12:b4:48:1f:ed:40:8a:b2:be:1e:3e:8d:2e:b0:d9:
c5:b9:03:be:56:4c:5b:3d:38:cb:fa:5f:c7:8f:5b:
65:4d:7d:cf:e1:b7:11:49:b2:3b:42:e6:c0:9b:bf:
72:e0:57:26:91:ee:be:0b:4d:05:6d:09:1f:31:3e:
03:9c:f0:3a:d7:81:78:b6:bf:dc:fe:f7:1c:a3:59:
af:18:9e:16:83:a5:34:2f:6d:40:c8:ed:c2:15:14:
1c:0b:d5:5a:bd:bd:cd:a7:94:52:9c:70:b8:8c:ac:
ac:f7:ce:3a:b5:60:25:6a:cc:bd:93:a0:0d:50:38:
ad:95:5d:24:22:b3:aa:fa:0c:ef:9f:69:51:98:bb:
19:59:29:ee:75:74:58:f9:e8:65:fa:0e:f4:69:99:
8b:bd:d4:d9:82:7c:72:fd:65:ff:8d:24:ce:20:a3:
c2:d2:0a:aa:45:3e:ca:91:c2:0f:9b:60:09:83:b7:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:48:CF:39:DC:4C:C8:F2:1D:86:8F:F6:87:68:C1:49:11:7B:50
X509v3 Authority Key Identifier:
keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:2e:7a:1b:9d:aa:c5:c6:7b:15:4b:40:7f:48:8a:9f:f6:
7c:42:a5:e7:ce:e5:db:63:a6:44:2e:ed:10:3d:d4:8e:94:da:
6e:c7:32:a9:86:4c:04:e3:84:bc:80:4a:b8:51:ab:5c:5e:e2:
2c:aa:3c:53:fb:b5:da:16:cb:6c:ba:9c:ca:78:00:5c:f6:94:
59:fc:23:c9:16:ac:eb:34:1b:ed:50:37:5e:89:57:64:1b:e0:
46:5b:46:07:e8:65:f5:2a:5f:42:da:99:ca:10:37:46:55:c8:
30:13:37:8b:49:c2:0e:b3:79:cd:1d:a4:00:a1:01:50:bb:8a:
a4:3e:6a:6c:0b:81:7e:de:52:3a:66:c6:16:c9:a0:c3:2f:b1:
92:d7:9f:4c:37:07:6d:c8:c3:ec:d4:2d:95:f0:a2:1e:0c:7a:
dd:38:db:20:ed:ca:ba:61:df:63:37:6a:f1:48:ed:33:bc:82:
65:86:c4:b9:a5:d3:68:c1:21:92:ae:35:c9:7b:f5:49:3e:6d:
47:a8:b4:a0:5d:38:b4:47:2f:47:98:21:b2:4c:7b:0f:27:fe:
73:95:56:45:a8:6e:73:b9:d3:db:8f:e8:85:a6:29:0f:7f:d9:
de:bd:7c:53:fc:3a:87:bf:c0:fc:11:9c:cc:29:c0:65:4c:51:
e7:38:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:15 2026 by rpki-client