
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json)
Hash identifier: eFn23F/GF6GGxBw3f1jSvuOPUW+Lvrd+fL2nNMcCSVw=
Subject key identifier: E8:DB:5B:20:36:C6:2B:C9:18:5E:0C:A3:75:3C:74:A1:48:37:67:0F
Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Certificate serial: 0180433A496678B6CA771CA0017C55C10719785D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 01:23:01 +0000
Manifest this update: Mon 20 Jul 2026 01:18:01 +0000
Manifest next update: Tue 21 Jul 2026 02:28:01 +0000
Files and hashes: 1: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=)
2: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: aasdvr1GMJe1JT83BN764/TOwUtSVVfuwj6LOFkd7f8=)
3: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=)
4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 02:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:80:43:3a:49:66:78:b6:ca:77:1c:a0:01:7c:55:c1:07:19:78:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Validity
Not Before: Jul 20 01:18:01 2026 GMT
Not After : Jul 21 02:28:01 2026 GMT
Subject: CN=E8DB5B2036C62BC9185E0CA3753C74A14837670F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:e3:a5:8e:61:6c:3f:33:ca:b2:27:70:de:
94:0d:41:58:00:ee:a5:5d:c6:36:ca:6f:50:6f:79:
be:68:72:cb:3e:54:71:7f:33:fe:02:59:28:4e:8e:
e2:b6:43:66:da:d8:2c:e4:d6:fc:b7:1c:6d:17:d9:
99:c6:ef:d7:eb:1b:c2:47:32:0a:fc:57:da:c7:94:
28:cb:52:57:d1:7a:5a:92:fb:21:c4:fd:93:6c:00:
f1:19:4b:e8:4a:85:79:3d:dc:2d:b9:14:be:dd:21:
34:f4:3c:3d:a6:95:c0:2f:11:7d:a1:52:e4:95:34:
79:28:70:65:3a:53:d8:aa:24:c4:e0:70:e9:07:11:
ad:62:62:1d:fc:03:ef:f9:a5:0e:be:d6:4a:1e:b3:
55:85:ab:62:21:56:b5:be:b4:47:37:2b:c8:7a:30:
2a:45:dd:24:14:c5:5c:00:86:05:a7:31:83:71:a4:
fe:cf:c2:f5:5b:da:f6:36:51:f0:4e:c2:f2:a6:ab:
20:8f:11:38:64:7a:56:f1:4b:05:9c:cf:4a:26:3b:
e1:51:4d:09:1f:35:69:26:4b:3b:2b:63:6b:e4:65:
a9:54:a0:90:bf:76:5a:22:4a:fa:30:28:5f:67:de:
44:a2:e6:e8:32:36:50:77:24:00:20:89:fc:f0:d5:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:5B:20:36:C6:2B:C9:18:5E:0C:A3:75:3C:74:A1:48:37:67:0F
X509v3 Authority Key Identifier:
keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:24:1a:49:10:22:de:7e:4d:41:8c:8a:07:23:7a:9b:2b:4d:
f8:ef:8a:33:45:54:26:e5:dd:29:2b:ee:28:a2:03:95:0a:75:
c2:b7:eb:64:b4:2c:c0:08:b9:91:5a:1f:ac:ee:e9:26:6f:d5:
6f:24:1e:a6:f6:53:34:d5:aa:16:5f:d3:77:23:85:57:f3:03:
fb:e5:23:fb:29:7f:fc:7e:7e:38:16:07:7b:c1:cc:14:6a:9c:
2f:db:51:08:ec:f4:5e:98:8c:99:4a:f3:7e:bb:26:da:5a:b4:
da:86:76:a1:16:72:54:50:ac:e5:a0:85:1d:e0:51:14:16:80:
9e:91:44:52:d1:96:23:b5:de:4e:f5:4a:8b:b3:4d:cc:30:d3:
11:16:0f:b1:5c:b8:a5:bc:68:1d:54:0d:f3:73:a6:e7:71:27:
dd:ab:75:53:05:64:9f:f7:e4:e2:4c:ff:f2:d7:6b:22:6c:5c:
6a:ef:be:6d:3d:3e:40:db:1b:73:15:c3:d0:f0:9a:3e:46:e1:
52:1a:ac:41:51:0b:d0:36:9d:e5:a6:32:b4:95:59:3d:b5:4d:
ad:5a:3b:0e:2c:e0:fe:ea:e2:bb:ea:f0:e6:e9:01:7c:90:01:
db:e4:6a:b3:f9:2c:46:31:50:02:72:bc:64:2b:7e:c3:53:8f:
1d:58:dd:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAYBDOklmeLbKdxygAXxVwQcZeF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMx
NjJFNTY1RjAeFw0yNjA3MjAwMTE4MDFaFw0yNjA3MjEwMjI4MDFaMDMxMTAvBgNV
BAMTKEU4REI1QjIwMzZDNjJCQzkxODVFMENBMzc1M0M3NEExNDgzNzY3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPVOOljmFsPzPKsidw3pQNQVgA
7qVdxjbKb1Bveb5ocss+VHF/M/4CWShOjuK2Q2ba2Czk1vy3HG0X2ZnG79frG8JH
Mgr8V9rHlCjLUlfRelqS+yHE/ZNsAPEZS+hKhXk93C25FL7dITT0PD2mlcAvEX2h
UuSVNHkocGU6U9iqJMTgcOkHEa1iYh38A+/5pQ6+1koes1WFq2IhVrW+tEc3K8h6
MCpF3SQUxVwAhgWnMYNxpP7PwvVb2vY2UfBOwvKmqyCPEThkelbxSwWcz0omO+FR
TQkfNWkmSzsrY2vkZalUoJC/dloiSvowKF9n3kSi5ugyNlB3JAAgifzw1XIZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6NtbIDbGK8kYXgyjdTx0oUg3Zw8wHwYDVR0j
BBgwFoAUesxXujBCsAeqFhM1KnP/0xYuVl8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjBhODIwYjQtODJlZi00NDEyLWJlMmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEz
MDQyQjAwN0FBMTYxMzM1MkE3M0ZGRDMxNjJFNTY1Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QUNDNTdCQTMwNDJCMDA3QUExNjEzMzUyQTczRkZEMzE2MkU1
NjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl
MmUtNWQ2OTE0YmQ0ODQ0LzAvN0FDQzU3QkEzMDQyQjAwN0FBMTYxMzM1MkE3M0ZG
RDMxNjJFNTY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKwkGkkQIt5+TUGMigcjepsrTfjvijNFVCbl
3Skr7iiiA5UKdcK362S0LMAIuZFaH6zu6SZv1W8kHqb2UzTVqhZf03cjhVfzA/vl
I/spf/x+fjgWB3vBzBRqnC/bUQjs9F6YjJlK8367JtpatNqGdqEWclRQrOWghR3g
URQWgJ6RRFLRliO13k71SouzTcww0xEWD7FcuKW8aB1UDfNzpudxJ92rdVMFZJ/3
5OJM//LXayJsXGrvvm09PkDbG3MVw9Dwmj5G4VIarEFRC9A2neWmMrSVWT21Ta1a
Ow4s4P7q4rvq8ObpAXyQAdvkarP5LEYxUAJyvGQrfsNTjx1Y3e4=
-----END CERTIFICATE-----
Generated at Mon Jul 20 04:27:20 2026 by rpki-client