
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier: nDxR5tRccUFvm2DUju87S9K4LB/wGs1B/Aku0bkAfwQ=
Subject key identifier: D2:48:13:D9:15:B3:BA:60:A2:89:CE:9A:87:32:35:BD:72:EF:39:2D
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial: 2004DEAB7ED0F9C23AB9D689384673327325F183
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:57:57 +0000
Manifest this update: Tue 12 May 2026 17:52:57 +0000
Manifest next update: Wed 13 May 2026 21:33:57 +0000
Files and hashes: 1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: xpKL8KxvcnQtnkApTXHZ7pdOq50Hx47qzwuq7A77kvQ=)
2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:04:de:ab:7e:d0:f9:c2:3a:b9:d6:89:38:46:73:32:73:25:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Validity
Not Before: May 12 17:52:57 2026 GMT
Not After : May 13 21:33:57 2026 GMT
Subject: CN=D24813D915B3BA60A289CE9A873235BD72EF392D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:84:84:6f:51:cc:ae:85:9c:98:d7:67:d1:
21:8c:bf:6d:0e:ae:92:c3:73:49:ab:8b:0c:19:a5:
40:96:5d:4f:76:7b:bb:be:6b:77:51:8a:0c:e2:5b:
ac:92:db:2c:a5:1a:04:5e:88:cd:98:ff:4c:ad:48:
6b:a9:ed:2e:75:94:c0:1d:92:4c:b9:6b:f2:a8:f8:
e9:22:1c:1c:64:66:ea:c5:99:25:44:dd:dd:6a:92:
84:bd:1b:77:96:b2:61:be:98:10:b7:c4:64:34:a9:
44:19:f6:1e:a1:8c:65:00:f0:a2:4e:68:ec:e3:bf:
5b:3d:94:9c:93:94:d0:e3:f5:a6:d6:93:d9:dc:ea:
96:4b:77:df:6d:20:ab:a8:2f:b3:96:e4:88:f4:27:
96:d6:87:a6:d6:c6:f0:c1:60:2c:a9:c2:b1:49:4a:
65:ec:8f:cf:d5:b1:be:e0:4a:bb:ff:c1:45:28:16:
8b:6c:93:fc:e3:31:d8:91:1e:9d:ab:9f:56:ac:c4:
e7:b4:9b:61:5d:12:c7:e7:66:34:bb:35:63:53:cc:
f4:43:85:69:fa:95:83:6d:8f:d3:ce:f4:dc:df:c3:
08:66:72:bb:47:74:27:45:b7:61:8a:27:a5:ba:15:
fe:74:70:65:35:2d:bd:49:c7:a6:a5:98:a1:c6:5a:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:48:13:D9:15:B3:BA:60:A2:89:CE:9A:87:32:35:BD:72:EF:39:2D
X509v3 Authority Key Identifier:
keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:56:53:72:6f:ff:31:d4:2f:26:df:01:d1:b5:a1:12:be:
e0:0e:57:db:1a:43:c8:00:bc:1e:37:d7:b3:2a:27:3a:84:66:
e5:ea:09:c6:43:ae:8f:df:f0:a4:b3:d3:4a:85:c2:50:47:1c:
64:51:71:2c:3e:80:ee:4a:0e:1e:14:3c:f5:14:7d:a9:21:2d:
97:4a:59:e0:95:3f:66:dd:0c:0d:ed:7e:5e:4a:9e:b6:74:9c:
bd:eb:19:7a:1e:0c:2c:1a:0e:74:09:b1:24:63:0e:8b:1c:a1:
6e:9a:69:f3:67:91:4a:90:cf:63:27:23:6c:d2:1d:f7:48:35:
e2:03:04:82:fe:88:a8:d7:4d:6b:62:33:8a:f2:b0:40:06:7e:
4c:1a:81:1d:d8:74:16:30:fb:1b:a6:25:9c:3a:2d:81:45:f5:
6e:29:ff:30:cf:75:99:46:7c:b2:e2:b4:2c:87:fa:6b:e9:59:
7b:da:91:8a:99:b7:77:13:f8:42:75:3b:92:da:3e:80:ae:46:
61:65:20:59:42:05:e5:e6:03:e3:96:7c:ce:b0:3f:3a:5b:60:
cf:fe:55:23:3a:fd:69:ad:e0:6d:6a:75:c7:be:ec:03:e6:b8:
ab:59:2c:64:4f:54:f9:19:8b:54:4a:5f:5e:21:0e:c1:12:ab:
23:51:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:09 2026 by rpki-client