
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json)
Hash identifier: qd2yJ6BHEcT9TKcb4J8sleSRmU91IUm4RFMpy0vUT50=
Subject key identifier: 55:1E:5B:1B:82:8B:F0:E8:0C:3C:26:ED:6F:EC:0A:4F:AA:8C:EF:87
Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Certificate serial: 4A6997E0431EA0C9E562F908AAA4B059BB6B47E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:48:43 +0000
Manifest this update: Wed 17 Jun 2026 04:43:43 +0000
Manifest next update: Thu 18 Jun 2026 06:23:43 +0000
Files and hashes: 1: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: ew3zmEXXbVlfackzYsHz7Nt231uCNWH1wtWjtkmhgXY=)
2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:69:97:e0:43:1e:a0:c9:e5:62:f9:08:aa:a4:b0:59:bb:6b:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Validity
Not Before: Jun 17 04:43:43 2026 GMT
Not After : Jun 18 06:23:43 2026 GMT
Subject: CN=551E5B1B828BF0E80C3C26ED6FEC0A4FAA8CEF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:6d:c5:f2:a2:c2:44:c6:fa:aa:7f:61:23:
d5:f6:00:6a:22:5c:47:22:f9:21:3e:8c:a0:01:09:
04:0a:7b:2c:e9:41:ae:22:05:d3:01:2f:fc:13:92:
1e:c3:91:a5:60:e2:0d:d0:4c:40:75:56:67:51:88:
ac:95:e4:6d:39:8e:36:d3:fd:31:62:60:f4:d0:76:
e1:6b:1e:ac:71:78:cc:68:a5:58:5c:3b:b7:59:ca:
78:27:32:91:e5:45:5d:ea:15:8f:6b:55:c7:05:2b:
61:0c:31:0b:aa:cb:d6:9b:83:8f:6a:41:64:1e:51:
29:69:52:6d:18:75:b9:e3:b9:5f:0d:5b:98:fd:ff:
a4:13:10:d6:fa:d0:e9:f3:65:8e:a0:e4:12:bc:79:
32:fd:3f:df:35:45:d1:f0:d1:af:b4:44:f1:a0:1b:
8e:66:ac:97:6b:cb:15:0d:78:71:e8:bf:4c:f4:10:
af:0e:30:ed:3f:1c:ff:fe:7d:b8:0f:11:6a:6e:78:
7a:29:92:a4:81:05:1b:25:fd:4e:ce:ce:61:82:4d:
27:bd:d9:2d:7b:ea:a3:a7:9c:d1:24:53:1b:3c:0e:
7a:f9:d2:e0:19:29:63:ba:27:b8:1c:08:7f:4e:e8:
59:66:a5:c4:d8:52:f8:cb:cc:69:af:6d:cd:51:59:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:5B:1B:82:8B:F0:E8:0C:3C:26:ED:6F:EC:0A:4F:AA:8C:EF:87
X509v3 Authority Key Identifier:
keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:24:b2:c3:c9:fc:85:f1:d2:d3:1c:1d:92:54:56:ee:3c:24:
83:96:0c:97:bd:e5:52:41:ee:43:d0:6b:71:04:00:9d:f0:92:
5d:90:9e:c6:a7:cc:52:9b:ec:19:16:56:3e:e1:9a:68:80:a8:
96:ad:8c:88:e0:cc:c3:a1:ce:d9:62:7b:4d:73:90:ee:6b:f2:
4b:a6:4f:99:74:f9:72:29:07:d6:3d:2b:85:7a:1a:59:01:1d:
f3:4a:a3:4c:67:ba:e6:67:79:04:42:b0:31:2e:05:cb:11:0e:
5f:b9:7d:c3:f1:58:f3:d1:9d:72:86:4e:f2:3a:78:20:85:72:
b0:d5:cf:0c:1f:56:4b:e6:4d:b6:b9:b3:4d:71:d0:3d:58:3a:
25:d5:b5:7e:01:8d:c7:44:88:0f:f2:c4:fe:61:26:5e:d1:b8:
49:e0:9e:4c:5d:4e:46:8e:fd:76:38:99:14:98:cf:d8:d0:f4:
b7:df:15:58:ae:a4:2c:b6:f6:bf:19:51:97:0c:1b:d8:87:5c:
90:8f:cf:f1:39:e9:04:0e:05:6b:01:02:8f:a7:aa:9e:6d:cd:
ff:4e:8f:94:78:7e:9b:5e:a9:10:0a:83:6c:01:61:fa:27:e3:
bf:cf:8a:a7:e5:56:80:e3:10:f2:30:3f:30:4a:d6:be:8e:b2:
f8:b9:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:10 2026 by rpki-client