
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier: rDMO5z5cXOmNFqpEqbw/QiI/9oBYVlw551U8+mIGSf0=
Subject key identifier: 75:2F:FD:45:36:E4:67:D1:34:01:62:64:F5:82:1E:89:66:2E:EB:F4
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial: 47E30C48DFE5BB144AF0C63DF9242E55A289D2B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 16:37:16 +0000
Manifest this update: Tue 28 Jul 2026 16:32:16 +0000
Manifest next update: Wed 29 Jul 2026 19:57:16 +0000
Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
3: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: qOHo2fEySIVoKz75WbSIqBYDLa1WIZlRaqI9Eed3D1U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e3:0c:48:df:e5:bb:14:4a:f0:c6:3d:f9:24:2e:55:a2:89:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Validity
Not Before: Jul 28 16:32:16 2026 GMT
Not After : Jul 29 19:57:16 2026 GMT
Subject: CN=752FFD4536E467D134016264F5821E89662EEBF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:0c:b7:86:0e:c0:18:2f:39:62:c1:2e:7b:
d2:70:bf:11:59:3d:24:9d:6c:a3:2a:a9:d1:ae:52:
b8:b4:de:2c:90:09:73:7c:01:9f:57:fc:3c:f9:5d:
bb:fb:82:66:e8:76:d9:85:22:b4:4e:6d:f4:4e:2e:
ba:24:4c:f4:b8:af:e9:55:34:27:66:a9:dd:77:62:
1f:6f:c5:1b:11:eb:65:3c:bc:a1:fc:2f:42:5e:ae:
c9:78:1d:d1:16:20:c6:df:61:58:92:75:83:70:84:
67:95:ee:cd:b6:c7:f1:ab:37:c1:e1:04:4a:78:63:
18:66:cb:cc:d2:5c:01:02:e1:4a:eb:fe:59:2a:57:
c3:6c:49:8c:ae:02:82:74:0e:23:be:80:bc:3e:b5:
42:30:4e:03:29:b3:29:38:bc:bb:a9:01:c7:1e:3c:
2c:0e:f4:38:4a:24:14:87:45:17:35:91:ca:ef:f3:
5f:48:8d:a9:82:9f:b1:1d:0f:c7:c8:0b:f5:58:a0:
aa:95:9f:dd:fc:f6:d2:47:e4:93:77:67:3a:ea:ac:
b1:0e:06:16:9e:94:a2:f2:a0:be:00:eb:4d:20:88:
00:33:be:a3:3c:77:f8:4a:45:91:74:ba:c0:d2:fd:
51:46:de:00:3d:91:67:e6:87:74:a2:b6:f1:2a:1b:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:FD:45:36:E4:67:D1:34:01:62:64:F5:82:1E:89:66:2E:EB:F4
X509v3 Authority Key Identifier:
keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:82:af:05:23:1b:b7:2b:a6:aa:8f:fd:8b:7a:0e:94:1c:
f9:b9:66:ef:f6:a0:62:b5:0a:f3:18:90:3c:ed:0a:e7:a9:8d:
21:32:c4:cd:61:ee:f5:b4:c8:7d:ae:96:4f:18:6c:4d:6c:af:
2f:92:ef:2c:3d:7b:ab:17:86:2f:2d:11:f7:08:69:72:06:e3:
96:2a:4c:23:df:8d:76:e0:d4:08:fc:b4:6b:db:08:76:4d:30:
f8:08:8c:5a:bc:2b:57:79:9c:a8:04:30:e4:af:6d:49:75:39:
5b:9e:c7:8a:f4:91:9f:59:90:01:33:b1:0a:85:2a:38:1f:f9:
95:0f:6c:c4:69:84:2e:07:62:a6:5a:9a:d4:86:2a:4e:1a:ee:
b3:05:ad:05:64:04:b8:67:f1:6f:03:28:54:28:9b:16:1a:82:
4c:ca:a4:f6:54:81:d9:4e:fa:ea:71:73:67:a0:c8:1b:a9:e5:
23:18:e7:be:ab:74:0b:ac:31:48:fa:b9:0f:45:4b:c7:fd:ea:
db:5a:c7:1e:e5:87:d1:bb:a9:b6:91:b8:ef:94:e6:2c:b8:fa:
21:f1:fc:5e:f0:59:54:c7:37:51:83:8b:d0:ba:6a:1a:1d:d3:
79:7d:55:9d:53:40:e1:c8:48:a8:22:06:9b:d2:26:9f:8c:06:
46:4e:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:29 2026 by rpki-client