
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
File: C7281E70CDFFA77145134C1424E6A649EA797D8A.mft (raw, json)
Hash identifier: phhH8DAe5Zxh3p6WgWU4bTLnXGwvsbQpDSl9HhsBPV0=
Subject key identifier: 9E:9D:B3:01:D6:20:94:65:B2:7A:FF:1C:B7:47:8C:A1:94:7E:96:CE
Authority key identifier: C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
Certificate issuer: /CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Certificate serial: 15C36EAA7E062FA4E632EA67F2001F25A89487E6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 14:03:52 +0000
Manifest this update: Tue 28 Jul 2026 13:58:52 +0000
Manifest next update: Wed 29 Jul 2026 17:27:52 +0000
Files and hashes: 1: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: cXKkyqfbSB+TtcjHk1mHx/AJ1vKr+O8y/yaLaZ1+wx8=)
2: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: FH9DT+b1XWN3pV6XhdDYXcgO7tOiFoyEXNlC5hXHyTE=)
3: C7281E70CDFFA77145134C1424E6A649EA797D8A.crl (hash: L21MyXg16hBN1gLsfzg2MJ1hlyFZ+5N4iV2VIuTv9Zs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c3:6e:aa:7e:06:2f:a4:e6:32:ea:67:f2:00:1f:25:a8:94:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7281E70CDFFA77145134C1424E6A649EA797D8A
Validity
Not Before: Jul 28 13:58:52 2026 GMT
Not After : Jul 29 17:27:52 2026 GMT
Subject: CN=9E9DB301D6209465B27AFF1CB7478CA1947E96CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:ad:91:b6:1b:b5:61:3a:3a:14:f3:b4:3d:
01:ee:bd:75:c0:df:db:c1:8a:4e:3f:b6:49:b8:cd:
d8:58:2f:f1:e2:8e:4e:7f:98:6a:cd:a4:8b:00:0b:
38:45:8e:83:64:72:57:d9:7c:d5:ef:a7:d0:23:a2:
72:ee:79:39:89:b8:be:a5:cf:2a:cb:d8:4d:23:c2:
d9:88:5f:43:28:f1:cb:6f:cb:c6:9d:68:cd:14:e2:
de:4f:e0:e2:f3:ee:92:38:13:55:38:80:de:e3:99:
70:a6:5c:17:87:db:08:0b:9c:7a:e6:3d:d4:62:b9:
4e:da:42:5d:3b:54:bb:23:8c:c0:cc:24:1c:10:79:
83:14:91:df:e4:17:15:08:25:6f:b9:df:f8:34:42:
52:88:7f:c3:b2:ca:b3:e7:e8:01:65:44:f2:f1:ca:
99:a4:a2:4a:31:8f:59:64:50:45:6e:f4:05:0c:6c:
d9:23:5a:b2:32:6f:d0:19:12:af:78:d0:22:77:b4:
78:c0:81:40:53:f3:af:07:65:2c:8f:4c:17:a1:91:
2a:ae:4f:8e:e2:e8:60:87:10:52:04:42:d3:ad:c2:
34:67:63:34:27:8e:a2:3e:40:a9:fd:6e:97:82:0e:
c9:47:30:74:08:76:85:b1:5a:20:b6:aa:30:51:45:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:B3:01:D6:20:94:65:B2:7A:FF:1C:B7:47:8C:A1:94:7E:96:CE
X509v3 Authority Key Identifier:
keyid:C7:28:1E:70:CD:FF:A7:71:45:13:4C:14:24:E6:A6:49:EA:79:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7281E70CDFFA77145134C1424E6A649EA797D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/C7281E70CDFFA77145134C1424E6A649EA797D8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:16:e6:eb:d8:c1:b5:5a:92:58:f2:9f:25:61:72:a8:a3:3b:
23:2a:c1:45:19:25:25:12:a6:7f:76:bb:c0:68:7f:bd:65:da:
c1:92:19:85:2c:9e:0b:e1:89:3f:a5:31:06:47:8b:38:f6:40:
cd:72:bc:e4:3a:99:f4:ed:8b:d0:d9:c1:a7:4c:4e:11:de:26:
87:f0:76:21:d0:16:82:44:7d:9c:1f:f5:e1:3b:c4:d7:9a:d4:
19:5c:b3:e9:61:11:7e:bb:97:c8:bf:65:f6:84:45:de:de:d3:
40:8d:2f:c4:16:f0:12:31:2f:04:2e:13:bd:37:fd:e4:01:36:
7a:5f:ca:aa:6b:71:94:f4:d0:50:17:40:52:cc:83:26:36:63:
ff:45:e9:14:69:e4:bf:b7:51:73:c9:50:0a:df:32:df:d1:8c:
72:a0:13:59:b1:ea:2e:18:61:b5:41:a4:cd:47:c0:57:a0:e8:
86:00:da:07:61:fd:ba:99:10:cc:56:20:1a:d9:8a:a8:f2:d8:
b7:54:e3:3c:8f:54:d5:80:05:44:4e:9e:3b:65:4c:c7:c1:ce:
21:26:e9:35:e3:1e:fc:e8:65:1e:a4:09:25:08:5a:11:ef:b4:
b8:11:0b:ec:dc:5b:9a:0b:28:6b:1a:01:9e:0b:b2:41:de:b5:
91:5e:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:29 2026 by rpki-client