
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
File: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft (raw, json)
Hash identifier: VagrjTDixJnFWJ0ncfGuRvhfYbqjDG9Jp7a7OWeHeb0=
Subject key identifier: 19:EC:42:B5:34:60:D7:D8:AC:AA:B2:DE:44:45:5F:FE:9D:D2:EC:45
Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
Certificate issuer: /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Certificate serial: 41DE1A7DEAF77C8E80E0190F848047A7DB7AE866
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:36:08 +0000
Manifest this update: Sat 13 Jun 2026 13:31:08 +0000
Manifest next update: Sun 14 Jun 2026 14:25:08 +0000
Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: WWLsIusOSv+8Jaml9M27MqcNs+gTxLH2Htlcij04EDM=)
2: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl (hash: +H9OQn1FnBYTYJks1GO1UuqknoPiHCby0Q0sQyZwCtE=)
3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:de:1a:7d:ea:f7:7c:8e:80:e0:19:0f:84:80:47:a7:db:7a:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Validity
Not Before: Jun 13 13:31:08 2026 GMT
Not After : Jun 14 14:25:08 2026 GMT
Subject: CN=19EC42B53460D7D8ACAAB2DE44455FFE9DD2EC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:79:da:9b:ed:64:3d:1b:4f:54:7b:b7:34:
6a:33:af:56:32:f3:b5:a3:32:9b:10:33:67:46:db:
c8:b7:c4:4d:0c:bf:e1:67:06:03:74:50:8e:01:93:
f3:91:de:44:5e:c3:78:34:50:c9:91:dd:dc:ba:3e:
e4:46:c7:03:54:e4:15:1b:26:6c:42:5c:ab:20:4c:
b5:fe:42:e0:1f:90:e3:72:da:41:d4:02:64:21:18:
40:38:85:51:0e:27:f7:10:a1:a0:d5:c6:9d:0b:56:
22:b8:44:bd:fd:29:a7:99:db:70:d1:a3:f8:35:19:
37:d0:08:ca:9c:20:85:90:d5:5f:bd:70:2b:49:73:
71:23:96:2b:28:38:dd:55:93:4f:aa:7e:6f:7e:f8:
f4:fc:57:01:05:2e:a4:87:c3:9e:5e:43:74:f7:d3:
aa:9d:8f:c3:c1:85:63:db:c7:9c:dc:da:10:32:9b:
15:13:d3:ce:54:ba:23:48:81:e8:13:11:be:55:3c:
3b:8f:3a:14:dc:ad:51:4f:74:70:d3:5a:14:25:b6:
75:ba:02:6d:5d:5e:00:de:ab:e2:cc:4d:0d:a2:24:
2b:dd:fd:a6:3c:34:77:a3:6f:e9:da:a5:de:ab:d4:
d9:d2:bb:62:1d:fe:73:2d:2c:31:80:72:2a:1d:37:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:42:B5:34:60:D7:D8:AC:AA:B2:DE:44:45:5F:FE:9D:D2:EC:45
X509v3 Authority Key Identifier:
keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:7a:03:d3:e2:1d:07:3b:29:3b:1f:c1:f5:82:ea:ed:d3:
3b:3b:59:39:7b:88:f9:fa:21:84:05:b2:22:05:b8:ff:25:9d:
11:91:f0:25:a6:3d:79:d4:26:89:bd:3c:28:b7:8a:40:a9:5e:
6c:ba:71:0a:2f:7e:25:ba:ac:9c:26:b1:49:a4:74:68:79:3d:
13:ca:11:4b:42:52:55:df:63:d8:65:30:90:f6:2f:72:e1:d7:
ab:8c:29:c0:93:ed:e9:8b:ea:ef:f3:e4:19:24:86:f7:4d:fe:
f5:ab:62:29:41:72:98:5d:db:6d:f0:4b:55:76:58:3a:f1:95:
2f:91:4e:48:bf:7e:ba:b3:10:9d:c9:7e:24:08:c5:f8:e8:7a:
91:31:de:5b:3c:81:d3:40:90:8f:61:33:5c:33:f7:b6:6e:56:
64:8d:61:4d:ca:12:b0:8a:c5:a5:0e:a7:f7:a1:c1:28:5f:05:
d7:23:c6:d4:9a:1c:b0:69:aa:a7:af:2a:ab:36:e6:5c:ee:37:
a4:fa:ec:cb:52:30:5a:7b:d7:0d:6e:08:7e:d9:15:3e:14:c6:
b7:9f:71:cb:14:47:22:18:4f:f2:7d:53:9e:32:77:4c:65:9d:
bc:4c:d6:03:17:db:de:9c:e9:d3:dd:cf:19:5a:e2:15:74:de:
2b:a7:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:10 2026 by rpki-client