
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft (raw, json)
Hash identifier: TFn3GDvxC0ld2P4yhlBP0eV/q2t7mPUv6Udf3g2EfU4=
Subject key identifier: 11:57:ED:94:8D:A4:5D:C7:05:6E:00:94:95:7D:2D:18:6D:33:80:38
Authority key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
Certificate issuer: /CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Certificate serial: 7F65B430D93D599F7E5B5231AB76B320BC09B3A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 04:46:51 +0000
Manifest this update: Wed 29 Jul 2026 04:41:51 +0000
Manifest next update: Thu 30 Jul 2026 05:59:51 +0000
Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: rmdjm7QqoJ2GS17azzOS2oUqFKYvi6CMQRKzm3faQVA=)
2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: dibahg/ZGqEkwi1huDaO1AQr5xbgMUcTUuKbdZGTir8=)
3: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl (hash: PKcle297KBYeRbsEegS5iEW1+B7gx+dZnlBPz6FQB5E=)
4: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: GSlw3zzCCuqCV+/TWCeBscNvFDaa+2WNBQy+mh6Ibro=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:65:b4:30:d9:3d:59:9f:7e:5b:52:31:ab:76:b3:20:bc:09:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4
Validity
Not Before: Jul 29 04:41:51 2026 GMT
Not After : Jul 30 05:59:51 2026 GMT
Subject: CN=1157ED948DA45DC7056E0094957D2D186D338038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:24:20:a6:81:e1:eb:cc:8f:ac:7b:c1:47:
58:4b:b7:0c:47:8e:4d:54:9d:c0:46:21:04:53:d9:
bb:96:aa:af:ae:2b:e1:64:f6:35:fa:43:92:e4:72:
52:cb:4a:eb:09:21:25:97:95:78:82:92:71:55:4d:
42:d3:00:7b:5b:f2:63:00:dc:af:76:56:d5:f0:70:
c1:64:b4:b3:f7:da:c5:9a:bb:37:3c:5d:ca:c5:ff:
62:2e:0f:ad:79:3b:ed:84:2f:8f:30:bc:55:fc:d0:
00:57:43:08:03:45:5a:9f:0b:49:52:ae:0e:a6:71:
81:ed:f1:cf:ea:47:f1:4f:6b:8a:63:d9:94:f6:81:
07:ac:b5:71:11:2a:7d:47:ad:3b:54:45:60:b1:b4:
b6:13:01:f7:26:ae:88:a1:5e:81:65:44:ac:ba:45:
29:57:c2:03:c4:ec:9b:4b:01:8b:e2:9c:46:1a:eb:
90:0c:32:fb:3d:f5:d7:1d:2a:c6:ff:11:18:10:4c:
56:eb:b6:ac:f0:7a:b5:cb:d0:9b:67:75:7e:82:55:
05:a2:c6:0a:f0:5b:67:26:20:ea:05:b1:a3:6e:85:
ae:dd:1b:86:88:96:b1:e5:6a:8e:02:b1:bb:4b:be:
e1:be:0e:16:72:34:e5:98:6c:e4:f1:ce:2f:dd:c8:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:ED:94:8D:A4:5D:C7:05:6E:00:94:95:7D:2D:18:6D:33:80:38
X509v3 Authority Key Identifier:
keyid:ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:68:2f:aa:bd:a4:42:d7:54:7b:f1:f1:55:c2:d7:63:91:d0:
29:cb:e9:05:9a:c0:df:ab:af:9f:e9:ab:f5:7e:70:f5:02:d3:
ba:51:5d:ef:38:85:1c:92:f5:44:52:30:56:a7:91:e8:53:5a:
73:98:c6:8f:9a:d8:18:92:75:86:8b:c3:ef:73:a6:9f:88:ee:
ee:93:73:4b:8a:57:4e:19:e2:02:65:6f:c4:97:89:0c:2d:5e:
06:6a:84:3a:a2:9b:82:47:00:66:8a:13:d9:2d:47:9f:fc:84:
d5:b8:55:49:12:bf:0a:61:2d:a2:47:6a:6d:9b:8b:9e:e1:ba:
b2:3c:c5:d5:db:f9:cb:ed:3a:67:84:24:45:41:d2:0a:37:f3:
06:c3:5f:cf:a6:0c:7a:04:5d:9d:1c:46:00:52:ed:f6:9b:29:
e6:e9:b2:13:11:1e:30:7a:47:51:aa:90:09:83:36:f1:b4:ba:
c4:1f:5e:54:3c:ea:87:a4:1d:5f:9c:57:76:54:de:27:44:54:
8f:4c:f0:0a:9c:6a:9b:17:1f:a8:82:ca:30:5e:a0:74:dd:54:
79:23:41:d4:f9:c4:f2:00:18:49:4a:96:e5:ed:85:70:a2:ce:
83:fc:7a:07:35:c5:23:8c:dc:13:b8:8d:6f:cd:8b:1c:ca:ac:
89:15:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:24 2026 by rpki-client