
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier: a0r2vz0J144F5PQghUkuWLwEw5dQzFReqUPNoh3WAws=
Subject key identifier: B7:FE:F8:F1:28:24:AD:C1:FD:31:C9:77:BC:EC:7C:1C:DB:8D:4B:AF
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial: 31EED07B3A340843F0E00F81710D9ED35770283C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 12:14:28 +0000
Manifest this update: Fri 24 Jul 2026 12:09:28 +0000
Manifest next update: Sat 25 Jul 2026 14:08:28 +0000
Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
2: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: 85MjPSCQ1bf98rcQhbu3V/MAIlHlnMs8nQSU1FScyPY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ee:d0:7b:3a:34:08:43:f0:e0:0f:81:71:0d:9e:d3:57:70:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Validity
Not Before: Jul 24 12:09:28 2026 GMT
Not After : Jul 25 14:08:28 2026 GMT
Subject: CN=B7FEF8F12824ADC1FD31C977BCEC7C1CDB8D4BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:93:83:0a:fc:10:0b:85:da:66:1a:3f:d5:
17:c3:94:f5:ee:0e:49:8c:f1:52:65:87:3c:be:db:
0d:d8:f1:40:44:4a:e4:5f:5b:8c:76:6a:33:e0:5f:
11:f1:5d:85:2a:de:85:59:91:07:d5:6f:d2:71:bb:
e8:2e:49:ab:9e:5b:bc:c2:90:93:62:0d:2f:f3:cb:
fc:08:0a:92:33:4e:a6:3f:17:7b:8d:ab:d8:82:15:
84:d0:1b:87:f5:8f:ef:43:3d:ba:6b:68:a8:63:6c:
fd:96:90:a1:46:cb:56:bb:e5:23:24:55:c3:d6:1e:
7a:1b:49:26:58:34:69:e6:b4:33:66:9d:0b:01:a7:
72:7e:f9:be:aa:93:07:32:d6:a8:f0:86:bd:70:69:
e0:13:92:9b:a0:c9:53:55:b2:20:d8:30:6e:1c:a8:
25:10:de:5e:97:1b:19:e2:ac:f8:da:2b:9e:c2:98:
56:78:dc:8e:cc:dd:a7:52:0b:d9:b9:99:be:9f:ff:
9e:a8:87:14:88:75:1f:ca:ca:b7:6b:1b:2e:23:16:
51:6f:00:53:9b:c5:ca:b8:ad:4e:91:c9:fa:8f:af:
05:b2:81:ef:ed:7c:b7:22:1d:c4:c1:0c:a1:c1:6c:
7d:fc:10:a6:b8:09:e2:e7:df:b1:57:cb:cc:23:c9:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:F8:F1:28:24:AD:C1:FD:31:C9:77:BC:EC:7C:1C:DB:8D:4B:AF
X509v3 Authority Key Identifier:
keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:39:fc:3f:bc:01:7f:df:6d:23:c4:52:03:d0:6b:e7:c1:
90:de:7e:0f:90:6b:c9:68:2c:40:80:10:35:80:26:3e:b3:ec:
40:43:6a:f9:65:11:8d:3d:99:da:01:23:ac:67:f4:53:5c:d4:
0c:a3:c5:c6:31:b2:53:9a:75:9b:a5:7e:bc:63:12:4e:2b:04:
67:44:45:ad:34:57:14:90:e6:16:f5:18:d5:83:38:95:9f:f8:
d7:7f:30:77:84:9f:c2:e8:56:be:3a:dc:83:93:32:fd:20:f4:
1c:a5:52:4d:24:b6:81:6b:c6:b3:99:7e:c6:19:10:72:d0:21:
dd:44:bf:68:e1:55:74:12:e2:54:1a:6c:e7:50:1d:2d:31:43:
43:5c:3e:8a:b1:35:56:f1:73:77:39:8a:3e:96:7e:f6:61:35:
6f:c3:69:76:cf:ad:8e:10:07:df:a5:d9:eb:1d:7a:22:9e:33:
f4:1e:5f:9f:db:df:d2:1a:2d:6d:15:ff:56:c5:bd:05:e9:60:
a0:a0:d0:b7:71:11:c3:df:6e:b0:a7:78:e0:2b:05:e1:33:d1:
9f:0f:a5:59:d2:11:d4:d3:44:f9:5f:ec:15:8b:8a:b6:f4:49:
72:f3:e5:43:4e:68:fa:40:fa:f1:45:c5:ed:91:ce:f7:de:c0:
a0:ff:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:12 2026 by rpki-client