
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
File: 7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json)
Hash identifier: nNaoWIpSgeWZt7thDT3WHC5gifJZpCkTBklE0YSOjHQ=
Subject key identifier: 0A:4D:CA:02:D0:4C:FA:5C:E6:7D:20:EA:E6:66:CC:E7:A5:86:42:29
Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
Certificate issuer: /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Certificate serial: 7006ED47F49275DAC38FD99B818288787AF2046C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
Manifest number: BD
Signing time: Sat 19 Sep 2026 23:41:32 +0000
Manifest this update: Sat 19 Sep 2026 23:36:32 +0000
Manifest next update: Mon 21 Sep 2026 02:24:32 +0000
Files and hashes: 1: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=)
2: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: wTMvBNGFor5C1hu1K5bchPbvOW6dLJze68mXRym58rY=)
3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=)
4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 02:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:06:ed:47:f4:92:75:da:c3:8f:d9:9b:81:82:88:78:7a:f2:04:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Validity
Not Before: Sep 19 23:36:32 2026 GMT
Not After : Sep 21 02:24:32 2026 GMT
Subject: CN=0A4DCA02D04CFA5CE67D20EAE666CCE7A5864229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:94:ac:27:47:af:f1:d0:a9:08:00:09:ca:
08:b3:56:9d:f4:41:59:e4:88:80:0b:47:2b:13:2a:
b5:7e:9f:ee:6c:4f:a2:ee:f4:53:66:1e:86:f2:31:
b4:19:7a:48:d3:92:1a:1b:a1:9b:6c:f9:f5:cd:81:
be:ef:b1:f3:7b:10:fd:ab:b6:6e:d7:4d:a6:78:46:
94:b5:1d:d8:e7:48:c1:44:c5:fc:06:27:57:c8:23:
5e:4a:29:49:62:0f:d5:8c:7a:40:81:43:07:87:78:
b4:b2:f9:ee:7a:a4:77:c4:c2:e9:ea:2a:fc:15:61:
42:27:ad:a4:e4:ff:43:7c:7f:9d:10:77:c5:1b:a1:
4a:87:ae:2d:35:d8:61:21:70:66:3e:18:d7:60:81:
0f:8f:09:f1:d6:e6:f2:4e:da:8b:2f:b5:68:15:05:
ae:ee:96:0a:e1:0d:bf:af:9b:9d:c2:06:92:87:9a:
c2:0a:65:4e:98:a9:3d:02:8a:da:f3:27:c5:59:15:
5a:f2:d0:a1:97:c5:3f:31:d9:a8:b1:f1:3b:2e:d9:
ba:d2:fd:a1:a7:7e:d0:9c:23:5c:4c:ef:b8:b4:7e:
05:46:c8:4e:a2:72:e0:ca:11:c9:d9:b8:f4:72:26:
01:7b:95:4a:48:3e:09:03:7f:b8:f5:02:73:fe:51:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:CA:02:D0:4C:FA:5C:E6:7D:20:EA:E6:66:CC:E7:A5:86:42:29
X509v3 Authority Key Identifier:
keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c2:91:d0:0d:11:4f:70:38:50:64:af:1a:04:d6:69:cd:25:
ad:a8:a0:30:cc:d8:c3:34:19:6b:66:18:ce:4c:c5:2f:b6:7a:
36:c8:4a:70:de:7a:e1:66:6a:48:9f:66:88:49:c1:46:53:03:
6b:4d:a5:8c:bf:c9:2e:40:53:95:f3:94:85:84:d8:d7:a7:8b:
a4:18:3d:4a:51:25:1e:ba:b2:c9:c7:11:25:ab:6a:53:5f:c0:
09:02:b3:fe:d6:64:ae:87:b3:7c:07:08:54:b4:df:4b:d6:7b:
4b:61:8f:a1:1d:c7:8a:42:e8:d1:cb:b7:41:72:6c:4e:f2:3d:
ea:cf:4c:84:b8:b2:db:37:e5:57:60:ba:1d:a0:20:67:e5:64:
5b:35:7e:17:9d:08:5d:3f:4f:3b:a5:eb:88:c9:d3:37:df:e0:
93:19:60:4e:dd:7f:9a:c1:7f:47:5f:78:72:96:2f:cd:32:6a:
c1:da:43:6e:fa:25:d9:44:06:fd:59:1d:79:da:0a:4c:7f:19:
72:db:b3:78:bd:fb:44:bb:2c:ee:07:35:67:b1:8d:52:b5:d7:
c5:41:6b:31:e1:7c:49:9f:d7:7d:a3:fa:24:cc:57:78:a6:0e:
b8:0d:f3:79:d1:e9:93:f4:8d:05:e5:33:b9:f2:2e:a0:e9:bc:
12:a1:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:08 2026 by rpki-client