
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json)
Hash identifier: nzFTYvWzIdSL0mK6dDnDvyFUJXphXO/LmznrZTCO74M=
Subject key identifier: 25:25:DC:7E:1B:F3:00:51:33:CD:AB:21:F3:4F:DD:09:81:08:D7:7C
Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF
Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
Certificate serial: 7FA74687654A1BC9432649B547AF3FDE86A6D9DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 07:40:42 +0000
Manifest this update: Wed 23 Sep 2026 07:35:42 +0000
Manifest next update: Thu 24 Sep 2026 10:51:42 +0000
Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=)
2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: C7z00c5QQDTg8tCB59mbQmG4XiWeaC32W9IUJf5YLRg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl
rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 10:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a7:46:87:65:4a:1b:c9:43:26:49:b5:47:af:3f:de:86:a6:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
Validity
Not Before: Sep 23 07:35:42 2026 GMT
Not After : Sep 24 10:51:42 2026 GMT
Subject: CN=2525DC7E1BF3005133CDAB21F34FDD098108D77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:4b:0f:25:1f:54:a0:e4:85:c9:40:94:f1:
6e:d0:3a:a0:fb:42:0b:88:0a:38:fe:40:89:b5:94:
43:ae:f4:2d:61:27:25:55:57:4e:a1:0f:5d:f2:0f:
32:2e:48:8e:a6:e2:37:04:c0:2b:ea:54:24:0f:b5:
23:02:60:87:af:ef:3a:b8:5a:12:ef:56:eb:6b:14:
8b:d6:64:f4:78:f6:0f:f8:66:ff:e1:81:51:74:f6:
a0:eb:42:6b:b9:4b:0a:89:df:ce:63:d3:8f:91:c1:
d1:c1:43:ab:b4:be:8d:7b:f2:d1:92:8c:4f:ca:55:
c3:3c:84:9b:95:f4:8b:ba:12:ca:ce:ba:68:c1:aa:
8f:59:03:d9:e5:72:9e:f2:55:b0:d1:a4:bc:77:7b:
2b:b1:da:03:14:01:48:ed:f8:06:aa:88:6e:36:32:
84:48:c0:1f:5b:1c:7a:54:79:48:a5:b2:5a:26:76:
d2:53:c5:4e:ea:9d:7b:43:36:8d:e7:8e:62:a0:d4:
83:c8:99:27:68:77:b1:72:13:58:54:3b:5f:63:a6:
76:23:92:1b:cd:af:db:4b:c1:14:9b:ff:76:ef:dd:
0c:5d:7a:6c:c4:56:e4:4f:3d:2a:69:6e:60:b3:f0:
ae:f6:fe:c8:29:f0:17:3b:b0:11:f8:82:b4:cf:07:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:DC:7E:1B:F3:00:51:33:CD:AB:21:F3:4F:DD:09:81:08:D7:7C
X509v3 Authority Key Identifier:
keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:2a:65:b1:ae:4f:ba:d4:0f:a3:0e:9c:d2:bc:61:0d:9c:
c8:6a:f2:77:1f:09:32:75:10:7e:0a:a1:08:e5:ab:fe:fc:3e:
aa:b9:59:a6:62:75:f8:97:36:8e:df:c2:e5:c9:5e:2c:a8:b4:
9c:c2:19:47:e1:cf:1b:16:c6:e6:83:a2:47:a8:dd:b6:d5:eb:
61:7a:12:f3:dd:67:9a:ca:73:bd:35:a6:0d:34:e0:4a:00:01:
b1:07:72:56:61:2f:7d:78:4e:26:47:b1:d8:96:e9:96:87:2a:
38:69:38:7a:4b:b9:67:76:25:64:ec:41:e9:67:a2:36:fb:1d:
5b:ba:34:47:e8:04:97:0c:2d:03:e6:30:a8:88:7d:63:c4:fa:
36:ea:87:f4:7f:03:31:5c:6e:79:9c:93:ce:8d:bb:4b:4f:6d:
4e:3d:bb:aa:fe:5b:70:32:57:69:7a:b2:29:99:d1:88:5a:ec:
60:53:ee:38:79:f8:53:58:51:9d:8b:2d:0e:16:ef:a3:ad:e1:
5f:2a:d9:0c:46:f7:a3:96:0f:21:e8:d9:1d:5b:36:47:12:4a:
98:08:53:15:72:4b:7f:4a:25:62:86:69:a6:ea:68:55:c9:6e:
6a:a9:aa:29:fc:77:e5:46:8e:ef:5b:83:cf:39:23:f8:64:cf:
7f:f9:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:19 2026 by rpki-client