
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft
File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft (raw, json)
Hash identifier: cqAiSEzW53Y/BWrC/gTAmLOlCUFoCx3IWe3/YOqMiyg=
Subject key identifier: 22:FE:A4:D5:E3:CD:56:E2:32:0C:21:D3:3F:0A:4E:98:AF:E7:E2:41
Authority key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32
Certificate issuer: /CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32
Certificate serial: 43528F3685E2C39F061CDE1540B6E5E883D9E09F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 06:00:08 +0000
Manifest this update: Wed 17 Jun 2026 05:55:08 +0000
Manifest next update: Thu 18 Jun 2026 09:40:08 +0000
Files and hashes: 1: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl (hash: XnhG3IC5fzVDcUcrUU+mq23isqk7BTH2oriTi7+lx+E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl
rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:52:8f:36:85:e2:c3:9f:06:1c:de:15:40:b6:e5:e8:83:d9:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32
Validity
Not Before: Jun 17 05:55:08 2026 GMT
Not After : Jun 18 09:40:08 2026 GMT
Subject: CN=22FEA4D5E3CD56E2320C21D33F0A4E98AFE7E241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:20:0e:9d:af:ab:28:7d:04:9b:44:d9:48:
b2:95:56:b9:36:3e:84:89:7f:c4:a5:73:07:a5:47:
29:2a:39:0a:af:e9:ec:60:d7:53:8f:73:a9:3d:e5:
02:98:9d:e0:c8:b0:0d:82:90:4d:4b:e6:89:b8:c4:
57:83:33:11:26:19:74:15:04:b5:76:f9:17:36:4f:
fd:85:8f:c2:e0:65:0f:c5:be:b0:a1:69:77:8f:05:
ca:87:1a:55:6f:2f:41:b0:bc:b9:c6:f6:43:f4:73:
be:e3:b7:cd:1b:36:7a:06:1c:83:3e:d5:75:e7:d3:
39:42:1f:cc:8f:f5:df:4a:fb:1a:7a:52:71:90:fe:
39:31:17:4b:f3:58:a7:da:55:40:0e:a2:e2:eb:f7:
c9:eb:9c:a8:e2:8a:40:6e:d1:7e:6d:03:8b:4d:83:
f0:ad:c8:d2:91:62:14:2a:ce:bd:0c:98:00:7b:b4:
19:0c:81:1c:fb:90:62:84:81:97:cf:f0:8f:03:ed:
2e:0d:88:35:62:ca:42:28:5e:29:45:47:a8:7a:bb:
18:8b:81:d4:75:f2:3a:22:a2:50:1e:55:76:44:0d:
df:90:66:4f:02:82:c7:10:02:da:03:49:33:12:9c:
fd:63:27:87:67:6b:c3:5f:45:59:70:8d:36:16:85:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FE:A4:D5:E3:CD:56:E2:32:0C:21:D3:3F:0A:4E:98:AF:E7:E2:41
X509v3 Authority Key Identifier:
keyid:7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:42:30:da:a5:74:3f:2a:fe:f2:09:2c:e8:cc:ac:ff:0f:69:
a1:e7:9d:24:1a:d7:fd:f2:71:d9:47:a8:26:6f:5d:b4:2f:ff:
63:b2:32:a0:3a:cb:96:1a:be:11:ba:10:93:75:3e:ab:70:60:
af:e1:7b:1b:76:88:83:16:6f:9d:e3:a4:45:67:3e:78:f5:b0:
d9:d1:e4:25:b7:b0:68:f8:3b:97:9d:d0:f6:27:5f:f5:0b:47:
d2:ae:da:a8:ab:e8:c1:ee:28:4c:b1:aa:13:cf:13:24:fa:fb:
b6:3a:af:ca:b3:e9:36:a1:75:2a:b3:f3:87:6e:23:3f:ec:bd:
5e:6f:85:96:7a:c2:9c:42:47:26:9d:96:78:a9:d3:97:50:77:
24:b6:c2:2a:b5:9a:7e:13:a5:57:46:9e:12:af:65:53:c4:21:
b9:c9:a0:cb:62:70:90:ca:e3:49:d6:73:af:07:26:f7:bb:9b:
30:26:a6:1c:51:c1:c2:bf:96:b9:dc:48:ea:33:2d:0b:70:38:
e0:0e:91:3a:04:07:cf:9f:82:96:48:cc:48:df:da:a2:b9:e6:
05:b4:35:52:7a:4c:86:a7:2a:49:f1:f2:15:67:c7:2b:8a:b9:
0b:ac:2f:61:79:e0:5d:e4:57:7c:ed:e2:65:37:b9:59:ac:c0:
d9:5d:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:34 2026 by rpki-client