
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json)
Hash identifier: NJydSYsZBi9E1uu7bPKfL+gY8v7/slijV7ox6QFV3ec=
Subject key identifier: ED:5D:05:1A:0D:57:0B:31:67:CC:45:74:F1:3E:1B:63:1E:7C:53:40
Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Certificate serial: 6B916A2562F9CBED5F2BCDEDDE4833171DD2ACD5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 05:12:17 +0000
Manifest this update: Wed 29 Jul 2026 05:07:17 +0000
Manifest next update: Thu 30 Jul 2026 05:59:17 +0000
Files and hashes: 1: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=)
2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=)
3: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: +1qJnMwdB42JGUoysWFp5sRt58ycPVAA9R3Dfq2OS44=)
4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:91:6a:25:62:f9:cb:ed:5f:2b:cd:ed:de:48:33:17:1d:d2:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Validity
Not Before: Jul 29 05:07:17 2026 GMT
Not After : Jul 30 05:59:17 2026 GMT
Subject: CN=ED5D051A0D570B3167CC4574F13E1B631E7C5340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:e4:f4:fb:01:cb:20:09:a1:0d:d9:74:e9:
40:55:d8:4b:21:77:f4:b4:65:68:77:41:56:e7:40:
21:e6:7f:df:8d:17:ee:82:28:f8:10:1a:75:cc:11:
2a:a8:c7:f2:67:0e:13:44:4c:b5:fc:d3:a3:62:06:
3f:1d:44:69:8d:2a:50:88:d1:63:55:a8:68:c6:68:
bd:2e:bf:c4:94:ff:42:94:85:cf:d6:12:df:f0:aa:
e7:08:ce:70:ca:6f:c2:c2:87:8a:b0:15:7f:15:31:
22:29:a8:c8:7b:2a:54:ac:f4:a2:24:3d:e3:5f:38:
12:a3:e3:00:13:e7:ca:01:6d:46:f7:80:2c:7a:5e:
e9:e1:71:c9:2c:92:51:15:7f:19:ea:8a:fd:81:7b:
fd:72:8f:0a:2a:29:55:0c:de:4e:05:c2:d6:2c:6e:
51:da:2c:aa:c3:1d:6c:5a:60:85:de:97:df:bd:aa:
42:ed:67:2b:c0:8c:7c:5b:e8:e3:4b:9e:06:73:e9:
9c:4e:68:88:33:fa:1d:d8:36:dd:2a:a6:44:52:84:
1a:95:11:83:63:d7:44:e8:8b:48:3f:6d:75:cd:31:
a2:58:65:f6:6c:25:03:21:14:d1:86:bb:f6:d1:af:
a8:c1:b4:fe:5c:cc:53:29:2b:e5:09:d0:db:19:3b:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:05:1A:0D:57:0B:31:67:CC:45:74:F1:3E:1B:63:1E:7C:53:40
X509v3 Authority Key Identifier:
keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:dc:3b:5d:82:3b:c8:b4:35:f8:50:6c:a5:d7:65:33:7f:
21:01:ae:cb:19:e8:41:2b:b9:98:67:11:fb:48:cb:a5:b0:f7:
ed:f1:a6:35:76:6c:a0:88:e2:18:f4:24:f6:62:ca:8f:f9:43:
85:d8:c0:f3:18:5e:2b:f0:5a:ec:a8:29:16:8c:36:c9:21:15:
58:30:c4:6c:3b:da:89:a5:42:e9:49:67:c0:2e:ae:5b:99:ff:
6a:f3:4e:24:94:a9:92:d2:93:74:42:af:5f:d2:39:87:93:3b:
40:f3:96:34:ed:da:fb:e8:be:ce:d7:f6:31:a2:2e:0a:33:53:
80:50:9c:d5:85:8f:30:5f:f9:7d:b5:99:82:dc:f9:ef:04:3a:
f4:4d:4e:de:43:1e:1a:d1:e9:9d:ae:25:93:4c:4d:ba:00:88:
03:95:6c:24:2a:1d:5c:1f:68:5f:90:37:51:83:85:79:ca:d3:
cb:8b:fb:ef:44:f0:8b:1e:2f:d5:2d:eb:b0:4b:ca:46:8b:e1:
b3:a7:27:9a:6f:93:95:25:af:4c:31:f6:47:65:a3:48:be:d9:
0c:10:dd:70:74:fd:34:cb:ac:a9:ed:de:aa:ee:b0:df:7c:ab:
bb:a2:0a:4a:9b:9a:04:5a:a1:49:be:2a:aa:32:a1:fa:63:c2:
25:e7:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:25 2026 by rpki-client