
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json)
Hash identifier: Vy38CDXU+QT4f8t1ctkKJss/KtT77r74DAGEll3hBX0=
Subject key identifier: 6A:73:C0:0A:F2:23:04:95:DD:0B:B2:BD:CB:B9:A2:B5:D6:E1:E0:DE
Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864
Certificate serial: 29CD6FEE1207A28B4F47877B1F7002A1FA2DC53B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:00:10 +0000
Manifest this update: Wed 17 Jun 2026 05:55:10 +0000
Manifest next update: Thu 18 Jun 2026 08:06:10 +0000
Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=)
2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=)
3: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: fJcrj1WzGZHHXNgp64zOCRy7VnnqixkOe1nGrZQxRbE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cd:6f:ee:12:07:a2:8b:4f:47:87:7b:1f:70:02:a1:fa:2d:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864
Validity
Not Before: Jun 17 05:55:10 2026 GMT
Not After : Jun 18 08:06:10 2026 GMT
Subject: CN=6A73C00AF2230495DD0BB2BDCBB9A2B5D6E1E0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:17:c5:8c:9b:84:99:08:76:e7:c8:f0:0a:
68:52:61:97:2c:f7:26:b4:ca:fa:1d:c2:89:96:54:
27:f1:47:ed:ad:06:72:47:94:c3:4a:02:23:05:17:
0c:7c:ea:d7:40:95:74:5d:40:3c:eb:65:eb:4b:c1:
04:6f:eb:7f:6b:5f:c9:34:ed:ce:53:d3:5c:06:88:
e2:5a:fd:fa:79:50:2f:15:1c:3e:a1:a0:4f:b3:50:
6d:c6:d7:69:53:bf:d4:75:2e:f6:0d:ae:a6:2c:84:
f6:80:a1:00:64:ae:dc:fe:03:49:e4:c2:bd:1c:f5:
90:79:72:5e:5a:da:69:0c:67:d4:c8:a5:f1:cc:c1:
d8:08:da:ed:70:4d:67:3f:97:9f:f7:de:53:05:ba:
b4:ff:13:e2:47:80:0b:64:74:89:dd:c8:26:ce:05:
a1:66:d0:3c:2d:bf:0b:f7:87:b1:71:d3:e5:90:46:
61:03:74:69:90:a6:b6:f1:5c:f5:f2:fa:ce:50:a6:
07:a6:3a:d0:10:8a:5b:8e:74:00:f9:4a:92:5e:2e:
d9:4f:fb:61:61:2f:76:4d:15:0f:5e:c1:04:67:44:
5a:89:aa:b3:42:de:67:ee:a2:02:ec:c7:28:20:75:
ae:41:e2:2e:8a:2c:72:1e:05:b0:fd:83:d8:bc:c4:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:C0:0A:F2:23:04:95:DD:0B:B2:BD:CB:B9:A2:B5:D6:E1:E0:DE
X509v3 Authority Key Identifier:
keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:cb:73:f5:df:fa:8c:a4:45:52:11:a0:2f:89:36:35:81:
51:29:02:ab:48:77:a7:37:d9:7e:3e:5d:32:9b:27:b9:54:7a:
58:5b:df:0a:c2:33:50:1c:aa:9f:07:21:5a:9d:f8:68:c0:43:
be:f6:49:39:4f:b5:98:78:e1:64:38:8c:92:61:70:55:e4:83:
2c:c6:f2:d5:67:52:6b:f5:a4:04:84:a5:56:c6:76:9b:8b:13:
57:a8:e3:50:da:ab:17:0f:cc:80:3e:db:cd:51:77:d1:e1:af:
5d:07:9f:d7:a4:5c:e6:a6:57:c9:1b:74:d0:39:b4:35:46:48:
61:c2:2b:59:5e:df:68:e1:e4:1a:95:ac:8d:c1:88:40:bf:ea:
07:4d:ae:8d:1f:e0:00:88:be:39:e9:b8:07:70:4d:6d:8d:b6:
da:a0:79:c8:9f:a5:8c:6e:9e:0c:a7:cc:63:8c:52:df:a4:a5:
b7:ca:f0:ae:33:bd:43:c8:5b:be:db:02:49:1d:b3:eb:02:89:
cd:1c:ec:34:3a:64:2f:b8:68:03:da:b3:17:8f:6b:88:a6:9f:
f3:a0:83:21:29:bf:c6:74:6c:72:03:56:4d:6b:1a:13:dc:7e:
1e:0b:34:13:ea:55:0e:c6:0b:01:cd:7f:9d:21:11:ce:2e:e8:
3c:fb:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:50 2026 by rpki-client