
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft
File: 7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft (raw, json)
Hash identifier: qtYy4aOj3J+tcZDP62HZxphYo0VA50B7jcqjRnEuasw=
Subject key identifier: 47:6C:17:F6:13:B9:66:71:2E:87:93:05:3F:20:AD:41:A3:29:17:A0
Authority key identifier: 7F:0F:E5:1D:58:AD:F1:A5:1A:43:2D:CB:48:A0:CA:70:C5:D3:03:77
Certificate issuer: /CN=7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377
Certificate serial: 632DD9EC26A925D31DC2CA225BB10695404F2B93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 07:01:20 +0000
Manifest this update: Wed 17 Jun 2026 06:56:20 +0000
Manifest next update: Thu 18 Jun 2026 10:11:20 +0000
Files and hashes: 1: 7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.crl (hash: OU47KSoaXTCItTrwYKdg1KGidItJrfxirfZJUxDQHmY=)
2: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 15VEyV5vwYqta5sxL2vCLL1yiCigjJr0WF9qJAONncE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.crl
rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:d9:ec:26:a9:25:d3:1d:c2:ca:22:5b:b1:06:95:40:4f:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377
Validity
Not Before: Jun 17 06:56:20 2026 GMT
Not After : Jun 18 10:11:20 2026 GMT
Subject: CN=476C17F613B966712E8793053F20AD41A32917A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:63:fc:01:79:a2:15:0d:bd:70:cb:5c:0a:
18:80:7e:c9:0c:26:a8:a8:5b:02:c7:4d:21:a2:8b:
31:bd:ed:f7:a1:da:df:52:34:ef:ea:16:2f:ea:c6:
b1:ba:05:d4:00:8a:4c:39:24:2d:91:27:d5:82:a2:
fb:3d:6c:cc:ac:35:ea:85:cb:f5:ff:d3:90:20:d5:
8e:6a:1c:66:3d:5f:16:ea:4b:81:44:6b:64:f0:50:
21:7d:af:27:a3:07:4a:d1:6e:de:55:8f:fa:93:48:
f9:a9:5a:53:16:9b:1e:64:ef:95:87:ca:01:ea:50:
f7:8c:cb:f3:60:1f:a7:27:65:b5:5a:4c:3f:9f:2f:
b4:3f:5c:92:d9:d1:6c:31:81:77:82:80:6d:cc:0e:
7a:e2:c8:84:7d:57:5e:d1:ec:6a:b3:dd:ad:14:97:
1e:a9:13:44:df:0f:fd:2c:d3:f5:43:b6:ad:d6:ca:
75:d2:30:de:b5:ef:b5:fd:e2:a4:e8:d9:9c:b5:b5:
33:a2:5f:b6:fb:0c:ca:97:f4:c1:af:0a:24:67:3b:
7e:7e:b3:ac:a8:e4:bc:f2:9c:a8:56:ab:07:78:29:
c0:b2:ea:5a:9c:10:30:b8:23:ae:c8:87:e4:bb:6f:
84:4d:26:9b:96:1e:81:6a:e9:77:35:8e:fa:7b:8a:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:17:F6:13:B9:66:71:2E:87:93:05:3F:20:AD:41:A3:29:17:A0
X509v3 Authority Key Identifier:
keyid:7F:0F:E5:1D:58:AD:F1:A5:1A:43:2D:CB:48:A0:CA:70:C5:D3:03:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fc:ae:08:51:69:f1:89:18:b1:b4:f2:36:5e:f7:84:ca:e5:
6a:ae:06:12:aa:94:12:47:0f:b4:12:1c:9b:83:47:ad:16:2c:
1b:86:e3:ca:46:f8:06:e1:ab:76:67:1a:66:c4:1e:30:61:90:
59:31:ac:7a:18:50:ca:9f:f5:3f:07:17:05:0a:30:33:d6:58:
f0:ca:08:72:ea:7b:ae:bd:40:09:3d:6f:70:b4:1a:26:67:0d:
ea:86:7b:31:17:b3:cc:bc:5e:d2:47:ce:32:81:93:e3:c5:7f:
d7:aa:3c:47:ed:12:25:46:83:1a:89:8e:d8:c2:a2:db:63:5d:
41:aa:da:28:6a:36:48:70:c6:5a:57:6a:8c:28:34:bb:4e:f1:
33:2a:ca:cd:c6:33:9d:f2:7d:76:b0:36:b4:58:04:55:e4:7f:
c3:f6:05:3f:24:25:16:8d:cd:a9:c0:6b:fb:eb:c5:d0:fc:07:
55:33:e9:e2:ef:2a:be:75:de:07:f0:2d:cf:17:67:f6:2c:02:
1a:18:8a:17:31:9c:3c:2e:ff:25:1a:08:27:83:60:46:0c:32:
28:ae:18:be:d5:dc:b9:4e:79:7a:cc:bf:e1:8c:dc:e9:d5:e9:
8e:94:04:a4:15:f7:b5:b9:77:74:ca:0f:0a:30:84:d0:d4:4b:
31:ea:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:50 2026 by rpki-client