
$ rpki-client -vvf rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
File: C797413CFB24F6454A9F7473DF020BB107134EE7.mft (raw, json)
Hash identifier: bc0GHgljhpEGm+j9ZvEA4JfTjbkV611lKhobuS4SuL8=
Subject key identifier: A3:C0:2E:43:EF:E8:AA:E6:58:B3:2E:20:E5:12:90:CB:73:08:5B:B0
Authority key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7
Certificate issuer: /CN=C797413CFB24F6454A9F7473DF020BB107134EE7
Certificate serial: 1BAC7903A8B4B347357CF3C9CFEAD3BF639E08C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 15:15:25 +0000
Manifest this update: Mon 20 Jul 2026 15:10:25 +0000
Manifest next update: Tue 21 Jul 2026 15:28:25 +0000
Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: chSnFe2TA+OmeDv7yM6MlQKXcupUNd+M99kXzF+BQEw=)
2: C797413CFB24F6454A9F7473DF020BB107134EE7.crl (hash: HXApTgXja6gPvWxuavFL2ZEUDLdScT52Jos+GOyBoUw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl
rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 15:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ac:79:03:a8:b4:b3:47:35:7c:f3:c9:cf:ea:d3:bf:63:9e:08:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C797413CFB24F6454A9F7473DF020BB107134EE7
Validity
Not Before: Jul 20 15:10:25 2026 GMT
Not After : Jul 21 15:28:25 2026 GMT
Subject: CN=A3C02E43EFE8AAE658B32E20E51290CB73085BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:f4:ba:3d:1d:b6:d3:b6:11:74:cf:be:ca:
61:f5:dd:9c:48:4c:c0:da:be:3b:fb:06:c0:92:30:
f8:a0:4c:bc:4b:7f:93:65:bb:0e:47:ac:d8:15:78:
bf:81:e1:7d:9e:7f:ad:15:46:26:c3:79:17:45:66:
5f:ab:20:00:f2:f3:51:52:bd:ea:e1:5e:03:8b:8d:
3a:3e:54:e5:4d:e6:7c:bb:76:c6:65:26:71:c2:57:
c9:28:03:0e:59:4f:6b:8c:fc:33:16:31:70:4a:23:
1d:12:30:a8:b8:f7:e4:62:62:de:b6:1c:ff:48:c8:
e3:0d:77:25:c7:79:d8:c5:a8:81:e7:c2:d8:22:b9:
37:46:27:10:fa:77:f6:4e:f2:69:c3:0a:e0:ea:87:
84:73:e0:d4:74:5a:fa:e2:4d:bb:64:0c:41:d0:63:
b8:35:f8:32:0d:74:f4:51:7e:8f:e8:3c:b1:b3:7f:
3f:f2:bf:58:dc:33:b7:f6:a2:67:95:be:8d:e7:72:
1c:c9:33:a9:7c:0b:ef:7a:a9:22:30:0b:27:32:7b:
49:91:96:61:b1:f8:f9:78:ef:a3:42:74:2f:a8:77:
b6:fa:b6:e4:d3:72:d7:f2:67:0e:c8:1b:ce:57:0a:
d6:85:4f:55:52:22:ff:c5:5e:a9:e9:f0:14:84:30:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:2E:43:EF:E8:AA:E6:58:B3:2E:20:E5:12:90:CB:73:08:5B:B0
X509v3 Authority Key Identifier:
keyid:C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8d:74:9e:23:7b:c2:35:2b:5c:bb:6a:de:0f:79:56:26:71:
04:68:21:43:d8:69:fd:37:9a:41:9c:a4:52:9c:23:93:89:04:
d6:87:f0:6b:50:35:af:f5:31:4b:9a:f8:08:11:b7:a7:4e:76:
95:37:6d:13:ca:7e:8a:7a:06:8a:77:ef:7f:ac:96:61:0e:8a:
a6:75:3a:8e:d0:59:79:e2:86:78:dc:d6:6c:ca:db:63:2c:ab:
41:c6:c9:73:54:8d:ad:70:68:36:d5:64:89:5b:24:22:db:1a:
b9:b6:5e:17:9a:d2:1a:89:a0:83:14:c2:95:59:1e:33:0b:e1:
4a:fd:aa:c2:d7:b1:94:2f:09:d1:9c:26:4e:ec:70:9f:92:f5:
21:bc:0a:b8:10:17:52:6d:32:28:0b:43:b9:90:b9:cb:cd:e2:
21:fb:1a:e4:df:58:2c:fb:90:79:fa:27:2a:a5:6f:51:26:a3:
50:d5:d9:8c:e5:34:ad:4f:01:d5:67:21:51:bb:63:24:dd:cf:
01:fe:89:4b:25:d7:78:22:89:88:91:23:35:53:f9:98:a7:e4:
90:64:b6:43:59:0c:c4:95:67:52:6b:5f:bf:09:b2:7b:43:23:
65:6b:ca:16:bb:f3:2e:13:eb:16:3d:e9:3d:45:8e:c4:da:0c:
cb:86:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:33:06 2026 by rpki-client