
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json)
Hash identifier: WMZXctPVfiwl4d0wb7DRG4z0ZsRysgGDRXXKMM4bXec=
Subject key identifier: 9C:F7:58:1B:74:65:5A:F1:E2:53:8A:12:8A:20:5E:03:E3:83:E0:69
Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Certificate serial: 6C907E9F7AC6FC48F0E1497CAEA425F6BF8A171D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 10:30:46 +0000
Manifest this update: Wed 17 Jun 2026 10:25:46 +0000
Manifest next update: Thu 18 Jun 2026 10:44:46 +0000
Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=)
2: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=)
3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=)
4: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: +4G3AQQ77oNNyTWADlzM5IwYXd3KBvYhCTBWoMY5/8M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:90:7e:9f:7a:c6:fc:48:f0:e1:49:7c:ae:a4:25:f6:bf:8a:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Validity
Not Before: Jun 17 10:25:46 2026 GMT
Not After : Jun 18 10:44:46 2026 GMT
Subject: CN=9CF7581B74655AF1E2538A128A205E03E383E069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:a6:37:06:19:39:6d:d9:54:25:56:5e:e2:
1f:76:3a:17:fe:d6:0f:53:88:b8:1c:ef:bb:e1:1f:
72:20:56:6f:dd:2a:54:7d:39:e1:12:ee:1b:95:38:
c3:19:d6:c6:80:e7:33:ff:c3:11:3e:b8:57:ad:88:
90:c2:d2:fc:20:27:e9:17:37:49:e0:3c:87:8a:96:
99:bc:bc:fd:23:ce:fd:50:c1:0e:e9:7a:c2:20:23:
b0:5e:09:8b:69:18:05:7f:bf:69:57:4e:e8:e7:ee:
65:36:d6:94:bb:2b:d5:3b:d2:65:c0:65:ed:47:df:
25:a1:68:19:ad:ee:3a:26:b1:d7:dd:dc:57:75:ce:
de:ab:5e:09:cd:ee:81:38:72:e1:a1:df:59:e0:1a:
21:b8:36:71:9c:ff:e8:ef:62:4d:14:e8:3a:04:b9:
80:0b:71:5f:67:7c:19:23:7c:38:96:77:b3:95:91:
4c:74:3a:b0:aa:67:a4:88:69:d5:15:52:5c:4e:de:
58:14:8a:1e:43:82:6b:f5:8f:12:6a:bc:69:90:d0:
2b:6e:c5:06:d7:8f:95:39:ff:7e:11:09:33:2e:89:
49:fd:5b:ce:7b:1a:91:05:3d:8a:19:e8:49:e7:b4:
8b:dd:5d:f6:07:c3:f4:6b:7c:cc:eb:4c:2c:64:23:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:58:1B:74:65:5A:F1:E2:53:8A:12:8A:20:5E:03:E3:83:E0:69
X509v3 Authority Key Identifier:
keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:79:3d:1e:f5:8a:f9:8f:5f:c6:19:70:2c:5d:dc:e3:24:
6b:80:e2:f3:05:d8:04:89:5f:28:97:3f:d0:e3:dc:5e:46:b0:
52:cc:b8:3e:1c:8c:a1:31:5c:d8:aa:4f:13:08:30:e6:ee:69:
1f:e8:0a:19:6f:c8:de:4c:81:3c:9f:e2:ac:83:39:4f:b3:db:
67:10:6a:20:cd:ad:61:5e:a8:81:53:e7:88:40:1c:49:51:8f:
fa:c8:be:12:a8:28:8e:d0:e9:f3:e1:64:4c:97:2e:8a:b8:73:
fc:20:0e:d0:43:b6:0f:d8:61:db:5e:9e:49:2f:45:04:1f:40:
71:10:35:71:71:b1:f2:ca:b4:e4:c9:a8:e6:9c:ad:3a:53:4c:
52:dc:08:f2:25:f7:de:2b:86:65:6c:3e:4d:17:db:d6:b9:9c:
e0:d8:70:59:a0:59:bd:b8:c6:fa:19:5f:9e:e4:23:49:17:2d:
63:46:fc:a5:ca:f0:0b:e1:28:71:7b:b0:e1:fa:71:cd:04:95:
37:2d:21:2a:e9:5d:ec:e0:9f:05:77:8b:b5:31:4e:fe:f0:3f:
f3:d4:b6:70:a1:4e:21:81:99:f3:28:e3:e4:a6:5e:ce:4f:54:
44:08:dc:9d:ba:15:c1:9c:d6:f8:0f:9a:61:18:a4:e5:b7:6f:
7c:20:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:19:28 2026 by rpki-client