
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
File: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft (raw, json)
Hash identifier: Yci8qf+67WoHIxgauC/2wVN6b08jxczLOjt5WlQKehc=
Subject key identifier: 5F:FB:D1:65:DF:BD:7A:FB:79:5A:7E:23:9D:3F:D6:F6:9B:8E:DF:0C
Authority key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
Certificate issuer: /CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Certificate serial: 05343226C35FB7EEAA059EBBF9A11F4A1FDC4E6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 12:20:20 +0000
Manifest this update: Tue 02 Jun 2026 12:15:20 +0000
Manifest next update: Wed 03 Jun 2026 13:24:20 +0000
Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: GymIgmPh7c7AFMEkOazrLmR+HafDOGSOnyaAyUzJOWU=)
2: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl (hash: pF8ksA9zpXkYmLm5EehqMqof/W/wOqtDZ4K5Z6uH6DY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:34:32:26:c3:5f:b7:ee:aa:05:9e:bb:f9:a1:1f:4a:1f:dc:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Validity
Not Before: Jun 2 12:15:20 2026 GMT
Not After : Jun 3 13:24:20 2026 GMT
Subject: CN=5FFBD165DFBD7AFB795A7E239D3FD6F69B8EDF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:3e:32:fe:f3:3b:2b:93:cb:71:fb:bb:d3:
5b:62:9f:41:ce:bf:b7:52:bb:51:f9:34:a1:e1:d1:
91:7f:50:96:da:ee:a3:a6:cc:d9:a0:b2:71:30:53:
6a:83:01:98:07:d7:75:6e:8a:1c:93:f6:33:fa:64:
e2:33:9e:83:d0:b6:c3:bf:01:dd:49:1d:2a:1f:ba:
a6:f6:3d:69:c3:38:09:eb:e6:ac:51:d7:16:47:92:
18:ca:9e:ae:2c:f5:77:bc:63:79:86:8d:1b:bd:53:
4c:47:30:cc:32:66:dd:ad:d5:24:2e:2b:14:0b:83:
25:4c:36:96:cd:d2:ec:db:0e:ce:51:f8:ed:58:d8:
55:7d:73:a1:62:f0:86:3c:5b:b9:77:f0:c2:ab:14:
2d:f2:ec:08:16:b1:51:b8:53:fe:31:55:22:ae:d0:
8f:f7:9a:2a:e7:23:65:88:0d:cc:3b:6a:4f:84:9b:
f7:fe:c2:29:80:af:49:02:2d:32:a9:78:94:1f:37:
d6:93:2e:ef:ad:e5:d0:99:ab:3f:eb:31:55:58:93:
ec:80:02:48:55:dd:04:89:a1:bd:a4:ad:d3:be:0c:
f6:40:72:5a:ec:ac:e9:65:ff:67:2a:a4:e5:08:5b:
23:6c:30:6c:ee:c7:6b:58:60:0c:c0:af:82:b0:27:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:D1:65:DF:BD:7A:FB:79:5A:7E:23:9D:3F:D6:F6:9B:8E:DF:0C
X509v3 Authority Key Identifier:
keyid:7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:4c:44:42:f5:11:e5:9b:43:06:62:5f:b6:28:21:0d:39:
7a:bd:3c:c0:99:09:3e:25:8a:7b:34:36:9f:58:fb:ad:a1:1c:
11:0e:61:6b:64:7d:b7:16:e7:4f:37:c6:50:9e:c6:dc:e8:95:
37:0a:c4:a4:56:8b:9f:d4:fb:c6:4b:5c:6d:99:6d:24:71:44:
5c:75:69:2b:27:bf:68:58:8f:c0:18:e3:a9:01:57:b3:8d:94:
d8:d2:50:af:c1:c9:ab:6e:eb:8d:fa:79:4b:84:8a:4c:55:41:
ca:29:7e:5f:46:4b:71:fc:b6:00:4f:dc:bf:5d:10:b3:b9:d5:
9a:ea:99:7e:20:2d:61:87:f7:9b:af:1c:28:3c:c3:04:78:45:
3d:31:a6:68:c7:24:e9:bb:5f:cc:7d:fb:39:88:db:6b:df:33:
be:e2:46:cd:83:be:f9:18:e4:e2:17:cd:ae:df:ac:f5:15:7a:
99:d7:47:a0:e3:82:b7:e0:79:7e:54:ab:33:aa:c5:03:39:e8:
b8:47:2d:0f:9b:97:74:4f:6d:44:8d:2f:a9:e6:7e:c3:32:ec:
9e:35:b4:42:46:2b:da:20:38:0c:fd:a0:c6:72:ec:06:1c:13:
06:8c:89:f3:f2:a6:34:c3:11:d8:8d:05:fa:39:46:d8:38:9a:
e8:c1:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:05:10 2026 by rpki-client