
$ rpki-client -vvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
File: 7445E0A188A89312C5454C032583053AC7510B2E.mft (raw, json)
Hash identifier: y2WZ0lEv7NY5gQbdPBJst0VgB4uZXeci0/ZQL5KX2fI=
Subject key identifier: CC:3F:22:3A:FD:54:B1:33:A0:87:1C:69:04:B8:DD:58:0B:8D:30:D2
Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
Certificate issuer: /CN=7445E0A188A89312C5454C032583053AC7510B2E
Certificate serial: 1193475D06A76DAB5EB3BAE44F93A8BE563678C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 20:31:37 +0000
Manifest this update: Mon 20 Jul 2026 20:26:37 +0000
Manifest next update: Tue 21 Jul 2026 21:31:37 +0000
Files and hashes: 1: 7445E0A188A89312C5454C032583053AC7510B2E.crl (hash: XQ/D7JEvJndlTwUfF+JNhOQ7Mr1rrCwqWGSfEc5U0NM=)
2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:93:47:5d:06:a7:6d:ab:5e:b3:ba:e4:4f:93:a8:be:56:36:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E
Validity
Not Before: Jul 20 20:26:37 2026 GMT
Not After : Jul 21 21:31:37 2026 GMT
Subject: CN=CC3F223AFD54B133A0871C6904B8DD580B8D30D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:30:48:fc:5a:1b:5d:fe:32:14:f3:63:ea:
ba:e8:9e:a0:a9:33:5c:2f:43:4e:2b:a3:96:38:f9:
97:73:a1:58:3c:e4:44:27:cc:47:2a:e0:1b:58:ea:
50:96:52:37:ac:1f:4b:5a:2d:b4:f4:0d:38:ed:36:
74:ac:1c:1a:a5:28:9e:39:fc:3d:ec:6e:54:6b:49:
06:26:5c:1e:19:53:57:74:b1:28:40:0e:27:42:1d:
62:5a:52:8d:de:2a:f1:7c:bf:2f:52:4c:94:45:0f:
1c:c2:12:7e:8d:d4:a8:a7:0d:40:36:2e:ed:8a:2b:
aa:8f:66:4f:02:f2:72:0f:7c:13:7d:1c:7c:ab:1a:
3d:b8:ed:9b:35:ac:ff:93:d7:e5:da:28:04:1e:00:
bb:6d:92:ac:05:c7:ba:a6:d6:b7:dd:23:83:c7:15:
dd:30:f7:21:8d:99:fe:f7:c0:b6:90:ed:d7:c5:d7:
69:3f:96:ed:47:95:0a:a1:12:ef:c0:fe:83:cb:46:
30:2a:45:44:d5:c2:9e:76:a0:4e:e4:05:c8:a0:be:
04:ae:39:30:a1:06:5d:05:8c:45:37:f8:19:30:c8:
bc:94:09:95:8f:61:c1:92:59:4e:4f:78:5b:cd:3b:
d2:f2:4d:e9:aa:a7:ab:6b:3d:b4:b4:f3:1d:5e:3f:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:22:3A:FD:54:B1:33:A0:87:1C:69:04:B8:DD:58:0B:8D:30:D2
X509v3 Authority Key Identifier:
keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:34:98:86:69:7e:91:22:32:58:c8:c2:17:62:c5:c6:a2:e8:
00:0c:71:b0:78:ff:5d:f0:f0:82:c5:57:9c:69:f5:48:f4:64:
4b:e1:8a:d6:22:00:02:21:6a:9b:f0:c1:c7:22:7a:3e:4c:0a:
c0:71:19:c4:a8:1d:a7:5c:1d:09:30:60:70:e2:40:c7:a0:27:
92:dd:b8:23:d4:15:3a:9b:87:08:4a:41:3c:4b:6a:1b:79:78:
d3:59:c3:88:14:00:e5:ef:5e:98:c6:9f:8d:07:5a:70:a4:86:
54:b5:e2:de:80:17:b4:b3:bf:6d:62:b5:f0:9b:1b:ac:33:8a:
7e:d1:5d:8e:62:28:68:a4:33:55:a1:4c:43:a8:9f:cf:9d:dd:
6c:5c:e0:f0:f5:57:a2:be:33:ee:b5:73:4b:42:2a:48:01:4b:
fc:81:2b:71:41:5d:e6:c4:9b:c7:3a:f2:b4:30:22:df:b1:6a:
36:7c:a9:13:67:40:0d:fc:79:c4:c1:77:10:40:ca:0c:20:b2:
95:d8:1e:94:ed:b7:fa:d2:fb:d3:14:e3:16:d1:67:f1:a9:1a:
07:f9:b6:b8:65:7d:45:ce:8d:8c:41:65:69:e9:ea:bc:d1:47:
c1:fa:37:52:ed:99:5c:eb:53:87:05:83:93:e0:71:c9:ff:87:
2e:9f:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:39 2026 by rpki-client