
$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json)
Hash identifier: aTo7F2VJVyey3i9H6kJr6/jm9YHmxMjyNs6crA/cgpg=
Subject key identifier: 7C:A1:B9:35:C5:D7:DD:13:36:89:EE:DE:55:72:68:2D:85:37:E3:51
Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58
Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558
Certificate serial: 2A1BA0546B24BF919B66D08F0A7A74A73EB2F1CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
Manifest number: DA
Signing time: Thu 16 Apr 2026 07:31:27 +0000
Manifest this update: Thu 16 Apr 2026 07:26:27 +0000
Manifest next update: Sun 19 Apr 2026 12:14:27 +0000
Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: f2j//+xyqYEL5SyhI/wICX57/D6wunBHHj5eU+k1Loo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl
rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 12:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1b:a0:54:6b:24:bf:91:9b:66:d0:8f:0a:7a:74:a7:3e:b2:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558
Validity
Not Before: Apr 16 07:26:27 2026 GMT
Not After : Apr 19 12:14:27 2026 GMT
Subject: CN=7CA1B935C5D7DD133689EEDE5572682D8537E351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:d7:b8:52:30:59:b9:26:2d:8f:43:00:54:
f0:e4:cd:20:4e:ff:57:0d:c2:26:0e:a8:24:8d:f8:
3e:ae:46:8a:83:4f:8f:11:c2:0a:2c:a1:74:15:83:
14:21:d5:9b:56:5b:a0:fb:9f:08:a1:08:21:64:26:
47:05:7b:53:17:06:75:0c:29:3d:92:5b:3c:b0:b6:
8c:6c:5b:95:98:dc:d4:7e:32:19:1f:4c:bb:60:7b:
80:ab:16:6c:e3:a5:96:35:2a:40:70:cb:2b:a7:d5:
57:26:ff:7c:c3:92:da:ad:09:1e:15:b6:54:07:d5:
58:b7:62:9d:e4:c7:24:ff:1a:7d:30:4d:13:b6:30:
21:06:03:35:1d:8b:0b:48:d1:cf:19:55:19:86:11:
17:cc:73:f8:c2:4e:9e:fa:9d:2c:b5:e6:23:62:8d:
b6:b7:e6:b0:79:aa:25:7a:00:4a:0e:f1:ab:87:2b:
4b:29:99:49:e5:a9:d4:f7:fb:a0:6d:0e:f6:2f:15:
5d:b3:a2:ef:52:3a:f4:95:98:8b:ec:ec:99:b8:02:
98:12:da:32:ab:02:a5:8a:58:d3:2b:3b:e1:ae:15:
69:8d:27:0b:06:b7:14:4a:c5:e1:1f:49:49:59:84:
0f:32:e7:ac:9d:3c:bd:85:25:59:63:6a:85:58:21:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:B9:35:C5:D7:DD:13:36:89:EE:DE:55:72:68:2D:85:37:E3:51
X509v3 Authority Key Identifier:
keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:b3:35:83:9e:98:00:02:b8:16:a9:d1:3d:06:1e:19:96:
08:4f:33:58:35:57:91:c3:7b:a1:7f:84:b3:c0:84:97:49:c4:
e9:ca:05:58:a2:ea:bf:ad:4d:a3:1c:9e:15:1a:a7:f0:6f:e1:
f0:87:48:2c:d5:9a:ed:54:e8:4a:db:fd:ab:01:75:a1:bd:5c:
64:7c:07:5e:2c:ac:82:b2:0c:9c:0f:5e:43:de:65:af:a2:ac:
66:02:85:50:27:55:c5:1f:5e:5a:13:c2:09:2b:0b:23:eb:f3:
71:fd:ee:36:f9:2d:e1:33:2e:bd:7b:31:17:99:c3:54:22:f4:
56:39:e7:a1:44:5d:69:40:a9:25:34:eb:09:61:de:cd:c8:8c:
85:82:6b:35:c1:46:88:67:17:16:f6:4f:eb:8f:a9:a5:6b:40:
41:b3:5e:1f:a6:f7:0f:00:ae:a8:0c:e2:5c:09:c5:90:5f:2a:
16:63:f7:70:e8:2b:13:9d:62:1e:ce:97:9d:01:d7:80:f3:ca:
89:bd:58:87:42:77:07:4a:a5:ba:6c:9d:7d:ed:78:7f:d3:89:
01:03:29:ce:53:3d:f4:ec:ee:5d:a9:c6:c0:4a:b1:6f:73:ce:
09:da:45:5c:d2:98:40:0f:d4:0b:2c:e4:fa:c7:6a:7b:29:cb:
7c:84:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:27 2026 by rpki-client