
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
File: 7F6A7DA96EFF248F18836BABFDA129185606504D.mft (raw, json)
Hash identifier: X9KRdasn0wkQpC/5VW8Eh0n0dBoMk3jdoRPylFBqsPM=
Subject key identifier: 86:25:AF:38:5C:68:89:BD:11:A3:91:B7:12:69:81:9D:1F:C3:42:8F
Authority key identifier: 7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
Certificate issuer: /CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Certificate serial: 73DDD3D372F1B7A8329DF0952AFC562B27AC0FAC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 23:30:59 +0000
Manifest this update: Sun 20 Sep 2026 23:25:59 +0000
Manifest next update: Tue 22 Sep 2026 01:25:59 +0000
Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: dkL3RYxUqFK92RNM9WTwGTBFmcpnH2zcxM4bqSEuW3M=)
2: 7F6A7DA96EFF248F18836BABFDA129185606504D.crl (hash: 0uup8XhUKK1z79TCkM1DUoigFdxofg7z8W/WtCs8Eec=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 01:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dd:d3:d3:72:f1:b7:a8:32:9d:f0:95:2a:fc:56:2b:27:ac:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6A7DA96EFF248F18836BABFDA129185606504D
Validity
Not Before: Sep 20 23:25:59 2026 GMT
Not After : Sep 22 01:25:59 2026 GMT
Subject: CN=8625AF385C6889BD11A391B71269819D1FC3428F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:3e:51:0a:55:17:63:9a:c7:d9:34:1c:de:
c1:6f:50:26:15:e0:d4:71:e2:10:45:05:7d:85:68:
2b:28:2c:1f:72:36:bb:6d:fc:9c:bf:d9:39:92:87:
f3:cc:f6:3a:39:b5:33:c7:3b:fc:a7:09:53:42:a1:
8d:16:a9:25:41:07:79:57:6d:19:18:36:53:2c:01:
dd:22:fe:f3:00:60:ab:ad:fe:6b:2c:91:49:17:5d:
f8:38:07:16:f7:31:8a:3b:67:e4:cc:ca:99:3a:2b:
81:c5:3d:fa:4c:d9:12:11:96:58:7f:9d:3b:12:c8:
0b:ef:db:cd:9b:77:a5:a4:b5:65:9c:29:86:82:ba:
ff:41:4d:7a:52:16:67:cb:c7:2f:71:9a:6d:36:88:
58:bb:59:66:0b:d4:f3:c7:88:2d:bd:c9:06:81:a1:
ff:7e:cd:75:c9:56:34:ba:dc:3f:f0:26:1d:0b:26:
a7:82:7b:78:1f:f3:0a:82:98:03:bc:b6:f2:d7:bc:
dd:cc:00:6f:35:70:9e:cc:74:65:e7:9b:30:38:31:
46:51:2a:ba:5a:54:08:30:a5:e8:d9:db:56:62:95:
f4:63:ea:35:d4:58:27:11:19:18:5a:92:d3:b6:b0:
b7:1e:cf:ab:c0:f2:40:ff:7a:4c:68:57:9e:5f:f6:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:AF:38:5C:68:89:BD:11:A3:91:B7:12:69:81:9D:1F:C3:42:8F
X509v3 Authority Key Identifier:
keyid:7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:83:b3:40:ee:a5:8d:c2:9f:ec:97:b6:07:70:68:b9:c7:f8:
c1:ba:29:b5:23:7a:a8:bc:83:9a:cd:8b:00:1e:a8:2a:02:a9:
39:ff:8a:23:3e:49:02:88:2e:20:74:d0:8a:e3:ef:24:3b:21:
af:42:55:29:7f:80:4c:b3:59:fb:86:c0:b9:5e:f9:1a:e9:22:
e2:ea:55:66:e5:d5:20:af:0e:eb:f5:fc:ad:c1:e0:38:95:ea:
0e:8c:f7:d6:d9:98:59:4e:29:f4:80:b4:6a:a5:32:6d:fa:8a:
58:c7:da:90:db:83:56:20:73:5b:22:8a:be:53:6c:c4:bc:39:
d1:d2:e5:0e:98:b3:34:2b:59:07:3f:f5:a4:16:bd:77:91:4c:
45:af:21:f5:e9:86:41:ea:e6:46:b2:22:16:25:fd:f7:ec:95:
62:77:7f:c5:20:5d:07:ae:d6:59:81:07:a0:ce:42:f1:fe:59:
48:cd:47:1f:4d:86:72:22:a0:7c:5e:15:38:4a:b0:40:ab:cf:
23:cf:ed:27:cb:c5:d4:a3:97:64:e5:07:d6:9e:35:9f:fa:51:
fe:8a:c8:37:63:87:dc:be:0a:0a:67:4e:5a:2d:15:f7:43:48:
40:46:04:78:ce:bb:c0:78:2d:f4:4f:74:2f:21:87:e8:e8:21:
d9:1a:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:30 2026 by rpki-client