
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft (raw, json)
Hash identifier: NZ3WUKfZXdhyC73sRMS+IZsNGMHa++yI7oN6Z5ZY+hY=
Subject key identifier: F5:1C:6A:92:55:77:BB:D8:7B:A9:5A:5E:38:DA:AE:AA:16:FE:80:76
Authority key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF
Certificate issuer: /CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
Certificate serial: 50A4886770B810F3CBBBEB89FF3CA71E9912CF63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 23:12:06 +0000
Manifest this update: Tue 16 Jun 2026 23:07:06 +0000
Manifest next update: Thu 18 Jun 2026 03:05:06 +0000
Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: a+oamNLoBLA9eXtliwNmRKAm0bPZaIn2IEdVk6cOO3c=)
2: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl (hash: +gsvgvV75nLi8LQu/GHVA5rk18LtBDIgJmK3pNO1C+0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl
rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a4:88:67:70:b8:10:f3:cb:bb:eb:89:ff:3c:a7:1e:99:12:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF
Validity
Not Before: Jun 16 23:07:06 2026 GMT
Not After : Jun 18 03:05:06 2026 GMT
Subject: CN=F51C6A925577BBD87BA95A5E38DAAEAA16FE8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:37:6b:95:30:da:cf:ad:62:38:0b:86:2b:
8b:1a:42:ba:e1:be:b1:ea:a1:19:04:0f:d9:da:61:
1c:da:2d:62:eb:2b:b9:2b:57:ff:09:a6:d1:e6:4e:
70:35:2c:1c:aa:f1:b4:4e:a6:05:9e:d7:d9:2b:8f:
74:bf:a0:99:0b:bd:e5:bd:ec:54:95:3a:a5:2e:5d:
a1:5a:0f:c9:f0:71:36:6c:1f:58:28:2e:dd:fe:b4:
ef:7e:4c:8b:bc:64:63:26:52:78:52:d0:d9:66:5f:
42:bf:ee:b8:9a:01:1e:14:a0:57:a0:e7:2e:6f:2a:
26:7c:55:89:5a:3c:b8:b5:fe:a8:81:f9:27:2a:51:
cd:dc:cb:c9:42:79:7c:4e:9a:02:cf:a0:43:70:89:
f3:a9:df:ef:ec:f4:47:9a:8f:70:38:6e:0d:c4:a5:
27:b3:67:a6:1d:09:b0:3b:ba:0f:df:2b:24:2b:56:
4f:0f:db:a8:91:42:51:6f:0b:f7:fd:ee:18:3e:c8:
02:f1:b0:83:28:51:77:8d:76:d1:ee:3b:59:65:a3:
06:d5:01:cf:b5:2a:a5:b9:9f:bc:63:32:67:4c:fc:
7d:8f:2e:98:c9:9f:1b:51:b1:87:9d:3e:d6:be:1f:
dd:7f:e8:7d:c5:34:ec:88:fc:c9:f5:9d:a6:15:ee:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:6A:92:55:77:BB:D8:7B:A9:5A:5E:38:DA:AE:AA:16:FE:80:76
X509v3 Authority Key Identifier:
keyid:7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:55:c5:c3:a9:22:39:a5:1d:18:95:fb:13:12:78:19:cb:47:
4c:bc:fb:34:76:25:cf:2c:03:88:e1:8e:9e:1a:88:49:c2:25:
49:c7:bc:87:5f:e0:b3:b8:4e:d5:0f:e2:1d:5d:9b:01:ac:e4:
e6:00:ef:45:1e:6b:ba:f3:96:4f:fe:75:d2:98:7b:3a:18:31:
4a:ca:54:9b:c2:53:d0:42:19:65:c7:62:ac:81:f2:a0:2b:b6:
21:38:75:72:94:2f:36:02:dd:56:eb:a3:d9:59:fa:2d:ab:39:
9e:7e:8f:e5:da:e9:ac:c0:c1:e3:31:fd:45:b3:51:93:58:59:
21:d4:b5:ad:07:cd:d5:dd:08:ef:51:d9:d9:a7:92:53:ab:d2:
27:f6:d1:cc:16:54:8e:b3:65:cc:c7:fc:2a:43:0f:b3:9c:8f:
d7:12:7e:5c:6f:ad:04:f8:d2:04:bc:04:c6:c6:ac:74:58:75:
1a:51:71:28:98:50:11:aa:6b:de:6f:2e:29:6a:ca:70:55:5a:
e7:48:93:e3:ee:bb:6b:9f:22:a8:a6:42:f6:43:2d:86:ed:ff:
a2:43:ae:1c:95:b2:c9:ad:4c:d0:81:5d:11:04:92:e3:71:aa:
93:e4:9f:f0:36:7e:d3:84:ee:86:2b:f2:f0:cf:1f:d2:dd:f0:
24:c0:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:18 2026 by rpki-client