
$ rpki-client -vvf rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
File: 7B9D20A52D1839E0A747B27E30961527317BE820.mft (raw, json)
Hash identifier: c+JE9EUCAs6NGD1beppHnKgRKu3JpiGU78t53r27lRU=
Subject key identifier: 78:F5:C3:4D:37:20:98:D3:A7:60:66:DF:2F:AA:41:14:4D:FE:4C:70
Authority key identifier: 7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
Certificate issuer: /CN=7B9D20A52D1839E0A747B27E30961527317BE820
Certificate serial: 633443C3B31D229FC2B2CEF81748FFD9A192890A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 06:26:46 +0000
Manifest this update: Sat 13 Jun 2026 06:21:46 +0000
Manifest next update: Sun 14 Jun 2026 09:23:46 +0000
Files and hashes: 1: 7B9D20A52D1839E0A747B27E30961527317BE820.crl (hash: zQNd3SVBGFrd32Pfxo8SVKlzUoIUHfQP0fjz5mqQHco=)
2: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (hash: HIvBExvjcNL80TSt3Rk5JG3F8xg1VqZTRljgmRS5hK0=)
3: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (hash: d5BUk2IHCQz5cnQEHRFcfPlv6TvCXosv3ryqex1uhzo=)
4: 3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (hash: IMBAva6ocuxkrwvvR0kfzc9aYWdmyeGotwSFXr/8fyM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:34:43:c3:b3:1d:22:9f:c2:b2:ce:f8:17:48:ff:d9:a1:92:89:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B9D20A52D1839E0A747B27E30961527317BE820
Validity
Not Before: Jun 13 06:21:46 2026 GMT
Not After : Jun 14 09:23:46 2026 GMT
Subject: CN=78F5C34D372098D3A76066DF2FAA41144DFE4C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:ee:05:cb:9c:11:b9:58:24:db:8a:35:14:
e9:5d:5d:fa:d2:a3:73:bd:0a:6b:f3:d7:c4:be:8d:
65:28:72:df:10:5e:17:58:25:fa:0e:4b:31:2e:84:
7c:ce:af:66:e4:6d:c1:9f:d2:95:68:69:1b:11:cc:
62:2b:61:5a:f4:cd:93:a4:77:51:5d:b9:7d:c2:d0:
68:9f:74:24:90:66:e6:47:6d:0a:3b:c6:38:0d:e6:
67:93:fb:26:8b:16:06:c9:a3:ff:35:34:5a:00:65:
2e:3d:ae:5e:8c:ac:dd:03:9a:0b:3c:ee:75:3d:4b:
ed:c2:33:4e:61:0f:77:80:93:11:d2:79:43:2e:88:
a6:07:d2:18:a0:de:bb:5a:5d:98:89:3b:ee:8f:cc:
01:b8:1b:4c:69:7d:3f:c7:3a:9d:85:ca:80:1c:e3:
02:73:58:3c:63:2e:44:7a:01:4b:3d:52:92:a4:be:
8e:36:64:a3:15:22:2b:04:1a:73:02:19:76:f0:0b:
da:02:74:82:00:34:4b:ff:40:f5:18:30:65:2c:47:
d5:97:29:15:69:1a:2c:6a:71:00:97:56:e5:01:82:
11:9b:84:89:fb:d3:f2:a5:f8:46:a3:a4:93:ea:06:
b3:01:27:ea:4f:a5:45:b2:1d:1c:fb:7a:77:ea:70:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F5:C3:4D:37:20:98:D3:A7:60:66:DF:2F:AA:41:14:4D:FE:4C:70
X509v3 Authority Key Identifier:
keyid:7B:9D:20:A5:2D:18:39:E0:A7:47:B2:7E:30:96:15:27:31:7B:E8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B9D20A52D1839E0A747B27E30961527317BE820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/7B9D20A52D1839E0A747B27E30961527317BE820.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:64:c0:3c:c2:dc:04:9e:13:f3:a9:29:af:cd:cb:0d:f7:
9e:5c:f6:3a:e2:ef:27:21:24:e2:30:c0:36:43:ee:73:86:65:
1a:14:2d:5d:8b:29:67:5e:07:ef:40:2b:60:e7:71:98:35:2d:
08:ac:7c:f2:6c:40:8a:de:39:56:9b:a8:16:2a:b1:ef:0b:03:
94:5d:22:a8:3d:71:2f:87:57:b5:c1:76:b4:7a:e5:61:96:ca:
51:3e:eb:0c:8f:0c:d1:5d:53:c6:ae:41:92:55:82:46:80:56:
e4:42:41:8c:c0:5e:6b:82:32:bf:bf:04:59:3f:5b:55:c0:f2:
af:f1:37:11:e6:a9:82:d3:9c:80:9e:cf:88:b6:91:58:3c:e3:
df:08:a7:d9:57:47:a0:8a:19:66:f6:48:ca:c7:59:9f:94:0f:
64:d6:a9:f0:b2:9e:87:e8:e9:95:bb:18:7e:40:1e:b8:e2:22:
ae:36:18:5a:d1:7a:63:88:73:79:f5:c4:c8:fd:5b:b8:33:2e:
0e:0c:ae:b2:73:88:1e:a2:18:a7:29:96:cf:2f:e9:83:4c:4c:
f9:ac:cb:f9:3f:e3:cb:ad:ad:9d:85:ac:aa:da:d4:cb:c3:32:
b3:7a:0c:e8:2f:13:e6:1d:64:43:9b:f2:0e:5b:76:72:75:5b:
34:3e:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:01 2026 by rpki-client