
$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json)
Hash identifier: RoGGBp4OnnSNS1dodSgqdXzLpw/f/LwMScOzIbKm72E=
Subject key identifier: 5B:F3:8D:D1:01:2F:0D:9E:61:93:91:FE:9C:B1:63:AD:AE:5B:E1:FC
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial: 3948A18FE42801068790EDE0F4F342B15A6E8D51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
Manifest number: 02E1
Signing time: Sat 18 Apr 2026 16:11:00 +0000
Manifest this update: Sat 18 Apr 2026 16:06:00 +0000
Manifest next update: Wed 22 Apr 2026 01:52:00 +0000
Files and hashes: 1: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: T2ZFcvK+YXPqZJ4pduLHItVZwbJSy4U/vbj+MMKlfUc=)
2: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=)
3: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: Ub1gaXrsr3jYwznRfiJ7hcJdmUDiG8zu3ELlFNODX3w=)
4: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 20:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:48:a1:8f:e4:28:01:06:87:90:ed:e0:f4:f3:42:b1:5a:6e:8d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Validity
Not Before: Apr 18 16:06:00 2026 GMT
Not After : Apr 22 01:52:00 2026 GMT
Subject: CN=5BF38DD1012F0D9E619391FE9CB163ADAE5BE1FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:cc:6c:60:8c:e6:e0:d3:9b:1c:a0:51:98:
3a:c3:cb:d4:84:60:f3:dd:34:ff:87:65:c1:55:10:
f5:c9:ae:60:42:76:ed:a5:c9:9a:98:76:88:d9:49:
7b:25:f0:8c:be:8b:70:80:d9:f9:25:ad:e4:cb:57:
31:5e:46:d6:04:18:e5:a6:52:ea:05:ec:7c:c9:b2:
c4:25:9a:72:cc:47:2e:49:a3:81:a4:a6:c7:ee:6c:
0e:d1:04:44:27:af:d3:7f:87:e8:21:ca:fe:55:62:
7d:0d:91:fd:a4:84:78:86:b2:b2:b7:ab:64:7b:33:
2a:b6:46:d1:2d:60:a9:27:1e:3d:cf:a8:b5:a4:b3:
e5:b6:e3:59:e0:f3:aa:0b:43:07:db:cd:0e:ca:3b:
1c:07:65:aa:3c:a5:57:e8:31:58:8b:df:ea:f5:25:
ed:5f:6f:d1:86:0f:6a:ab:e8:39:b6:0c:9f:9b:71:
61:76:74:28:80:a1:3b:be:be:19:3c:48:b9:c8:65:
50:60:73:ec:41:a9:8b:32:56:89:e2:a8:a4:21:3d:
49:b8:98:62:93:67:0c:a5:57:70:b3:6f:60:b8:92:
c9:8d:fb:60:3f:5f:e3:c6:e0:4a:0b:13:e5:7f:c5:
0c:f0:65:2a:74:cb:f9:0d:ef:09:43:eb:91:0f:90:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F3:8D:D1:01:2F:0D:9E:61:93:91:FE:9C:B1:63:AD:AE:5B:E1:FC
X509v3 Authority Key Identifier:
keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:76:7c:b5:ed:5d:7c:ae:b9:45:1b:96:8b:c7:41:60:58:
49:6f:a5:b9:17:f2:98:88:ef:d1:2d:78:79:a0:47:79:fa:09:
f7:c8:7e:94:cc:56:9d:a5:84:c3:8b:aa:c2:49:0b:b5:15:14:
05:51:5d:82:24:52:b8:16:83:35:03:e2:88:26:a3:1e:62:7e:
ee:de:b6:94:97:84:cf:62:5c:24:a0:2b:24:d4:90:49:37:1a:
54:1b:d2:df:7f:cf:a0:45:e4:4b:ec:d8:43:0d:dc:83:3a:aa:
3f:af:4a:c0:ba:37:15:b4:64:5b:7c:39:7b:a1:58:f7:cf:97:
5c:42:d1:ac:53:51:d2:f7:0d:d1:18:10:8b:06:9c:ec:50:07:
43:ee:79:69:c3:c4:06:18:2e:3d:e9:5a:9b:d7:05:f6:55:04:
76:ba:d6:2a:1b:38:ff:64:b1:25:ce:b2:22:1f:3f:34:11:f7:
e2:12:8c:ad:e3:1e:b0:aa:80:9a:f8:75:5a:a9:3b:91:f9:70:
a8:07:d9:dd:48:99:d6:08:9b:b8:ef:3a:17:aa:e2:e9:e5:65:
15:d0:3b:37:5b:bb:af:40:ae:d6:a1:84:65:17:ac:c3:4c:94:
b3:2b:90:b8:27:f4:6d:97:43:60:61:5e:fc:57:b4:22:82:48:
c0:c9:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:48 2026 by rpki-client