
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
File: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft (raw, json)
Hash identifier: XhGpEEG/0+aTxAaTxcmhYqr+nN9BIfEICzF3ON3XdPY=
Subject key identifier: 88:CB:AF:A6:5A:9D:F1:31:58:EA:60:8C:94:DE:E3:C0:16:BA:70:4A
Authority key identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
Certificate issuer: /CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Certificate serial: 1D99D7FEC20958ED7BC743E6B36BA7BDBFE02107
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 23:19:52 +0000
Manifest this update: Mon 20 Jul 2026 23:14:52 +0000
Manifest next update: Wed 22 Jul 2026 01:30:52 +0000
Files and hashes: 1: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl (hash: wp3wxRjvhAYBdJy45nUH8N5eKn4f02xVYStWy/vc5Rw=)
2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: FY38IH9sB6rTVzYUxtZnvzqXTN96oHyScnEbXRWQmXQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:99:d7:fe:c2:09:58:ed:7b:c7:43:e6:b3:6b:a7:bd:bf:e0:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD
Validity
Not Before: Jul 20 23:14:52 2026 GMT
Not After : Jul 22 01:30:52 2026 GMT
Subject: CN=88CBAFA65A9DF13158EA608C94DEE3C016BA704A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:8d:35:f1:aa:3e:bb:05:d8:46:1d:3a:ea:
9c:c9:4a:e4:7f:81:db:97:5d:70:b6:c6:03:24:55:
ac:87:03:10:43:45:84:ba:6d:f8:bd:b1:d3:3d:6d:
7c:b6:f7:71:ef:1b:72:78:62:2f:18:39:3b:65:28:
a9:3e:7e:e8:8e:30:21:95:26:7d:78:54:c3:01:32:
94:e4:a3:5a:a0:93:83:56:5a:e3:94:f5:b7:27:d4:
be:b9:ef:25:66:18:bd:5b:41:3b:7a:ac:95:91:55:
4f:2f:4d:68:a3:d4:88:18:63:ea:ca:e5:ee:19:13:
c4:16:91:55:9c:15:33:71:c1:42:5e:45:67:5e:4c:
cf:09:47:79:07:e1:57:92:b0:f6:16:42:ed:dc:70:
0e:8c:87:ce:cc:c4:7c:c1:dc:d4:56:4b:70:52:98:
fc:3b:90:78:5f:3b:40:61:8c:58:90:28:c4:7b:f2:
15:8a:7c:9f:c3:1f:49:d8:4e:f7:77:e5:5b:6d:63:
85:a7:71:8f:dc:c0:07:4e:94:6f:41:2e:bf:88:3b:
d2:9c:29:9b:fc:db:89:8c:80:2e:5d:c5:d2:e9:8c:
56:9d:76:18:7f:06:bd:5b:12:7e:83:7e:f4:e3:00:
4b:bc:e2:e4:61:70:53:4d:64:96:69:78:c5:c4:a9:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:AF:A6:5A:9D:F1:31:58:EA:60:8C:94:DE:E3:C0:16:BA:70:4A
X509v3 Authority Key Identifier:
keyid:7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c8:8b:60:e4:bd:73:06:bd:a2:a7:b1:e1:96:01:f8:ea:a3:
57:f6:b6:e3:5e:c0:f1:1f:69:02:93:a3:3b:b3:5e:c7:d9:18:
2d:8f:d6:21:34:63:20:39:3f:6c:1f:91:d5:1a:5a:ee:e1:3c:
06:2a:50:aa:da:06:2f:2a:9b:41:ae:5f:84:5c:2e:38:44:47:
b2:f7:19:83:51:b9:39:38:2a:4d:21:03:ef:b2:36:93:bd:a2:
58:ef:c0:56:be:6a:16:92:6a:32:62:67:4f:4e:e2:1e:98:38:
ba:58:b6:37:f0:0c:54:dc:7e:5e:28:95:d7:3d:4f:38:3c:7f:
9d:89:b5:0a:8a:40:f7:0b:13:fb:fe:97:23:09:79:71:c1:7c:
bb:29:25:a0:d6:4b:98:c6:e0:ac:b2:6b:e3:48:32:06:1a:89:
6e:f7:fc:e7:1f:74:3d:85:fb:f7:84:4d:68:7c:53:e9:0b:19:
b5:fd:97:1e:81:a6:3f:99:f3:ec:7e:58:81:b0:d2:fe:8b:0f:
10:40:07:d6:91:66:33:b4:c6:02:df:4b:fd:02:c1:7a:95:c5:
da:a7:82:e1:b6:75:cf:fc:1c:39:18:6e:81:87:90:7b:61:8b:
7e:20:5d:fc:89:62:aa:2a:a3:0d:4b:1f:f5:2b:8d:b3:67:d1:
59:d7:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:28 2026 by rpki-client