
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier: RHwGhK1m5nQ7SVWXdZagzQ2YaBKzbh3UfA2N9IcLHWM=
Subject key identifier: 85:DB:02:2D:BB:93:B4:22:B0:02:D6:7D:24:93:86:FB:78:F5:34:6C
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial: 58A93D3475D5E0D0AB9277624E1B8CD6461014E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 23:30:39 +0000
Manifest this update: Tue 28 Jul 2026 23:25:39 +0000
Manifest next update: Thu 30 Jul 2026 02:26:39 +0000
Files and hashes: 1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: U0E/dHzRJXKgGfUes+TucRhoK40SIAdw1Z3kqmEA0pk=)
2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a9:3d:34:75:d5:e0:d0:ab:92:77:62:4e:1b:8c:d6:46:10:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Validity
Not Before: Jul 28 23:25:39 2026 GMT
Not After : Jul 30 02:26:39 2026 GMT
Subject: CN=85DB022DBB93B422B002D67D249386FB78F5346C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:0f:5a:fa:b2:9d:b5:5c:50:d1:da:14:8c:
28:62:b4:16:e6:08:89:75:38:16:5d:74:49:c0:9c:
fb:ef:78:dc:67:39:10:cc:14:5f:fe:d0:98:fa:b4:
bf:55:a2:39:65:ac:24:56:68:c7:31:12:93:ab:12:
c7:de:76:d3:67:cc:aa:42:00:f5:64:08:53:99:35:
77:b6:52:02:6f:2f:38:8a:68:72:0c:b4:1a:1f:f0:
ea:cb:bf:5c:23:ea:c6:4b:98:d0:8f:5a:be:4d:ed:
a8:ff:12:67:dc:64:b3:94:0c:03:85:55:de:1d:3c:
ca:3a:b9:29:d7:be:ff:75:05:70:19:8e:a9:40:10:
f2:7e:24:4c:f4:d4:f8:7c:86:f6:86:2f:94:8e:b2:
b4:5c:2a:a2:a3:41:87:ba:9b:ed:87:40:e6:eb:8b:
5d:95:48:96:1c:6c:cb:b9:73:19:04:1b:b1:31:2d:
bc:14:35:c7:7f:83:c2:3f:73:8a:7b:09:ed:e8:3f:
cd:ae:43:4b:e2:78:08:99:a5:ba:0a:86:7e:f0:ac:
8a:27:d0:da:51:af:c5:7d:de:31:85:bf:fa:c4:f3:
4f:d7:2a:41:2a:34:32:81:72:b4:02:67:e9:ee:71:
0c:9e:ed:3d:2c:de:59:29:21:5d:ed:a9:83:d2:f4:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:02:2D:BB:93:B4:22:B0:02:D6:7D:24:93:86:FB:78:F5:34:6C
X509v3 Authority Key Identifier:
keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:93:70:1d:df:46:e8:08:aa:f7:79:a7:db:99:d4:7f:62:b3:
3e:28:44:f9:fa:fd:41:d5:6d:3c:40:e4:b5:ab:b8:90:4a:18:
ad:73:94:10:e8:ec:5e:52:ba:18:d2:1b:fa:cf:29:f7:61:e6:
92:db:1c:21:36:3c:87:56:22:a6:b4:17:bd:d0:fb:04:c4:53:
9a:d8:77:30:d6:8c:88:1b:15:af:48:92:59:03:91:ed:a3:88:
f1:63:b4:96:97:ad:e3:d4:7c:cd:95:b1:b7:4d:af:c4:f5:27:
34:e8:b9:c3:1a:c3:33:fc:46:30:67:2e:6e:53:76:36:e8:fc:
15:db:91:91:8b:29:2b:d1:34:b1:66:39:73:50:04:02:6c:65:
85:db:54:36:11:82:f3:d6:d7:6f:9f:d6:10:62:cb:cb:dd:5a:
52:90:bb:d3:6c:6d:43:2d:e6:cb:82:08:93:02:98:1e:46:da:
db:fa:96:2a:d4:f6:51:9a:b2:20:e0:e8:0a:52:87:78:11:32:
8c:f0:a8:3e:d0:0b:aa:ba:48:2d:5d:8f:6f:42:d7:3f:75:d1:
a1:6e:40:e6:ff:55:7c:1c:5e:02:87:69:af:06:c0:1b:fb:94:
04:f6:95:c3:00:d9:d3:f5:76:9b:51:5a:80:e6:4c:58:ef:6f:
e2:5e:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:37 2026 by rpki-client