
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.mft (raw, json)
Hash identifier: w0duiAEjMsnIhBTEsi1lP3pa6anvOOwI8Am9TQbS0RI=
Subject key identifier: 05:6F:7C:12:0C:F6:AF:C6:68:E3:35:07:05:C5:B8:09:BC:BA:A9:B5
Authority key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
Certificate issuer: /CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Certificate serial: 19B9D39A905F110D1A2B2D9EDF15B2EE2FB4EF6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 23:00:25 +0000
Manifest this update: Sun 20 Sep 2026 22:55:25 +0000
Manifest next update: Tue 22 Sep 2026 02:37:25 +0000
Files and hashes: 1: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: pq7hgN0BYFvcOO4RibbiV4dskaN65Tn7+tm7b4Zi5ss=)
2: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: dMDlV7U3rxrCZhn5tU+/e2gI+6rTenrp0BfONLsgL+w=)
3: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: CU2pRJlByvKfQ/yJYZHsXqoQU8W2lpUHREOgbnxSIXI=)
4: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: QEaWwU/gLTd1+vXquoUrxupuBnvtpr2z+pW3ka5j1QM=)
5: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ycDYVFKlKUcCLkCPbyJWINzJ+1wnaqTl8G/ven1iST0=)
6: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: +5SwlM0I3old/JoBe0NfTcGocHsW0SZgVouHkTzMlXY=)
7: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: xJh5WIaBaJDKe0gD95hGnS6h/QKLhblXUfBYm2CvOr8=)
8: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: sBqWwZZoNRCD+983cJNfmzhu/jryMMyC7TtCEQsfwzo=)
9: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tzOGo3sV/ZVReIoJFZdjUkPKBEoC+agfuEqkfoWV+Ls=)
10: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: Cy4evdxsXDlUgI456OCJSgkPxKW0rsUBqO0gVv2Oj9E=)
11: 7A8D4233922872A894E30E54D6874BEB416AD1DF.crl (hash: sRBak3liLMKqnkzVtmeMR9iDGao91Cpfu6eS2wl+p+g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 02:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b9:d3:9a:90:5f:11:0d:1a:2b:2d:9e:df:15:b2:ee:2f:b4:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF
Validity
Not Before: Sep 20 22:55:25 2026 GMT
Not After : Sep 22 02:37:25 2026 GMT
Subject: CN=056F7C120CF6AFC668E3350705C5B809BCBAA9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:2c:ba:fc:d0:b0:df:14:0d:07:b3:b9:48:
9e:3d:e8:9f:4a:4f:43:34:28:e1:ba:05:b0:a9:11:
60:03:30:cf:02:c9:41:16:ce:a0:30:28:47:ae:21:
75:a6:b5:bc:dc:3a:36:27:e5:c0:51:bb:1c:cd:96:
8f:94:3e:77:87:f7:ea:be:f9:f6:9d:7c:8c:d5:81:
25:55:3a:4a:16:b9:46:a6:15:37:bd:c6:c3:3e:23:
c4:8e:56:fc:5a:84:7b:ab:4b:cc:4a:be:56:ad:a0:
bd:25:71:da:77:b8:47:3b:80:1d:cf:1f:a1:5d:bb:
8d:45:3e:3c:a1:9e:1e:a2:6d:5e:ee:4d:7e:28:fc:
58:25:ef:96:f4:22:11:12:77:0a:66:90:be:b6:a2:
05:c6:ca:3a:58:87:52:8b:6a:b6:3a:38:5d:20:cf:
cb:bd:06:73:7e:36:e3:38:da:8e:27:ff:7e:cb:a2:
30:97:fd:b3:71:4e:00:cc:11:fb:b5:80:01:66:d8:
ef:df:1c:db:29:ac:48:8d:ad:37:1b:98:7c:b9:cf:
eb:70:59:54:c1:00:f5:e6:1b:ee:cc:5b:c2:ca:6e:
30:00:fd:7e:56:15:f9:d1:74:19:d3:00:30:e2:ba:
01:23:32:57:de:69:63:9f:df:36:0d:d3:4f:34:d0:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:7C:12:0C:F6:AF:C6:68:E3:35:07:05:C5:B8:09:BC:BA:A9:B5
X509v3 Authority Key Identifier:
keyid:7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:fb:62:34:69:7c:72:94:d2:cf:7a:74:42:c5:8b:11:1c:
67:15:47:9e:b9:f2:9b:c6:47:48:a4:ea:6c:8b:ab:30:00:c5:
57:a8:0b:94:48:ba:e0:4b:c9:fe:cc:bc:61:89:ee:2a:72:a0:
06:69:60:ab:de:84:30:1d:5f:e0:7b:fe:a8:e0:af:f8:08:45:
09:4e:5f:0d:26:4f:c8:3c:7f:b9:86:00:03:66:60:58:2c:0f:
b7:22:89:c6:43:0a:65:bf:58:ad:82:fb:84:87:c0:ce:b9:f4:
45:35:94:50:56:e3:16:16:21:ed:19:52:7e:4e:7d:7f:66:e3:
e5:79:d4:38:1e:6b:a3:ba:ab:a4:ff:94:12:61:0e:26:98:43:
4f:1f:11:a7:72:ef:73:30:ea:f0:5f:e1:2e:21:b2:e9:00:89:
00:5f:70:63:34:f7:3d:64:e0:96:c6:1d:4f:88:0e:2b:e4:d7:
ee:09:0b:b3:8e:26:74:40:ec:99:7b:06:c2:25:51:10:54:76:
58:8b:46:bc:da:70:78:25:55:a9:41:54:2e:2e:18:a7:43:5e:
8b:dc:02:ef:9b:41:9c:47:a9:73:c7:69:5e:2b:5d:a8:eb:1b:
ad:b4:05:ab:e1:59:a0:a7:3d:72:fe:a4:c8:39:29:8a:3a:66:
11:aa:95:b2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGbnTmpBfEQ0aKy2e3xWy7i+0724wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0
MTZBRDFERjAeFw0yNjA5MjAyMjU1MjVaFw0yNjA5MjIwMjM3MjVaMDMxMTAvBgNV
BAMTKDA1NkY3QzEyMENGNkFGQzY2OEUzMzUwNzA1QzVCODA5QkNCQUE5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeyy6/NCw3xQNB7O5SJ496J9K
T0M0KOG6BbCpEWADMM8CyUEWzqAwKEeuIXWmtbzcOjYn5cBRuxzNlo+UPneH9+q+
+fadfIzVgSVVOkoWuUamFTe9xsM+I8SOVvxahHurS8xKvlatoL0lcdp3uEc7gB3P
H6Fdu41FPjyhnh6ibV7uTX4o/Fgl75b0IhESdwpmkL62ogXGyjpYh1KLarY6OF0g
z8u9BnN+NuM42o4n/37LojCX/bNxTgDMEfu1gAFm2O/fHNsprEiNrTcbmHy5z+tw
WVTBAPXmG+7MW8LKbjAA/X5WFfnRdBnTADDiugEjMlfeaWOf3zYN00800OwhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBW98Egz2r8Zo4zUHBcW4Cby6qbUwHwYDVR0j
BBgwFoAUeo1CM5IocqiU4w5U1odL60Fq0d8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmJmNzFjOTEtMTYyNC00ZmMwLThjNjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5
MjI4NzJBODk0RTMwRTU0RDY4NzRCRUI0MTZBRDFERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QThENDIzMzkyMjg3MkE4OTRFMzBFNTRENjg3NEJFQjQxNkFE
MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj
NjMtMmVmYWZkNDZmYmMxLzAvN0E4RDQyMzM5MjI4NzJBODk0RTMwRTU0RDY4NzRC
RUI0MTZBRDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD+X+2I0aXxylNLPenRCxYsRHGcVR5658pvG
R0ik6myLqzAAxVeoC5RIuuBLyf7MvGGJ7ipyoAZpYKvehDAdX+B7/qjgr/gIRQlO
Xw0mT8g8f7mGAANmYFgsD7ciicZDCmW/WK2C+4SHwM659EU1lFBW4xYWIe0ZUn5O
fX9m4+V51Dgea6O6q6T/lBJhDiaYQ08fEady73Mw6vBf4S4hsukAiQBfcGM09z1k
4JbGHU+IDivk1+4JC7OOJnRA7Jl7BsIlURBUdliLRrzacHglValBVC4uGKdDXovc
Au+bQZxHqXPHaV4rXajrG620BavhWaCnPXL+pMg5KYo6ZhGqlbI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:43 2026 by rpki-client