
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json)
Hash identifier: 7sLVVBhuyM8bx8wgs7GSJ61aFGjlwTN2Ol+96rAPZRs=
Subject key identifier: 7C:A2:0A:7C:77:9F:02:C7:C6:E3:0C:BF:E3:9A:1C:79:99:64:C5:6C
Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Certificate serial: 2D83D2E1379ADCF37CE8C9872EDF25C01FAE7B78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 10:43:46 +0000
Manifest this update: Wed 29 Jul 2026 10:38:46 +0000
Manifest next update: Thu 30 Jul 2026 12:15:46 +0000
Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=)
2: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: w3G51F9Ma8vtbejXdE0/yhFYB1dYcK0AkdtPmWmmhzM=)
3: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 12:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:83:d2:e1:37:9a:dc:f3:7c:e8:c9:87:2e:df:25:c0:1f:ae:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Validity
Not Before: Jul 29 10:38:46 2026 GMT
Not After : Jul 30 12:15:46 2026 GMT
Subject: CN=7CA20A7C779F02C7C6E30CBFE39A1C799964C56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:48:e0:5c:b8:79:d8:2b:4f:17:25:05:3c:
93:d8:56:3c:9d:6d:7c:5b:1c:9f:cf:1a:56:1e:9b:
c8:20:28:55:15:1e:bd:af:ed:bb:97:60:53:e0:d0:
88:33:25:f2:bb:88:c2:be:c5:4b:06:b4:55:97:ae:
b0:22:e7:c3:4e:89:19:e6:cf:62:46:53:28:7c:70:
23:42:de:de:99:0a:59:af:51:7d:80:ca:59:9d:9e:
cf:85:a8:58:ac:70:0f:ca:79:d7:16:0f:c2:5c:eb:
92:ad:35:f0:a7:dc:54:65:32:80:3f:65:38:7e:30:
67:a6:ad:91:7f:57:91:19:af:39:be:c6:24:df:3b:
a8:a8:ff:d3:ae:a1:1b:f4:aa:ac:65:1a:09:53:c2:
01:9e:ce:c1:a4:7a:e7:63:0f:4a:9f:f2:80:72:54:
41:4f:a7:ed:28:15:40:ee:31:61:cc:46:44:f8:2f:
ad:83:39:a1:5e:e0:c5:35:4f:81:26:34:d6:9d:cb:
f2:b4:34:ce:33:ee:83:7d:13:b4:9f:8f:7b:f0:f0:
8d:cd:b1:ab:43:ee:97:c2:64:67:1d:be:f1:d4:22:
56:6f:94:db:e1:7d:cc:6d:d8:78:8f:b1:62:01:c7:
a4:83:cf:77:a3:c8:f8:ac:c0:ee:0e:6b:68:82:19:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:0A:7C:77:9F:02:C7:C6:E3:0C:BF:E3:9A:1C:79:99:64:C5:6C
X509v3 Authority Key Identifier:
keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:1b:f7:ff:9f:31:4f:db:15:65:85:76:c1:0a:42:02:6d:
f2:8d:90:c1:1e:12:e5:9f:b7:9d:8a:84:e3:85:49:93:df:7f:
78:6a:3f:7c:d7:60:c8:02:f9:97:9a:bc:b6:e6:5a:38:0d:f1:
85:f3:37:d0:c8:1e:47:10:8f:a4:fb:51:19:a9:8a:49:35:c1:
59:93:26:7e:03:72:30:ab:70:a0:fe:21:ee:58:32:92:7c:39:
39:77:a9:27:fb:a0:30:fa:e1:c8:6e:7c:45:ae:1b:58:be:10:
10:6d:b5:27:ba:1c:79:e9:2f:9d:8f:8d:58:15:ec:e6:d2:3b:
d1:1e:df:60:7c:60:c4:4d:f4:23:86:ff:44:4f:76:bf:be:08:
87:7c:b0:2f:fb:70:cc:29:e8:61:e2:93:ee:87:0f:2c:50:8c:
7d:41:ec:ce:ba:0f:9f:ea:99:d5:1b:5e:2c:fd:69:90:76:db:
e6:6b:4d:ea:c8:07:80:af:6a:d7:b0:16:d1:de:b4:be:75:3a:
8f:a8:bb:6e:84:e1:8e:4b:5f:0e:54:49:c8:17:96:b4:e8:7f:
11:0b:8a:49:b3:21:64:e5:dc:67:84:b0:4a:e9:eb:03:7e:82:
9e:e2:2d:50:6b:57:d6:da:59:82:23:06:93:9c:29:58:97:b3:
db:5c:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:57 2026 by rpki-client