
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
File: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft (raw, json)
Hash identifier: sX0pFtg2yCw0fAjIQf9qI208bhrs0Wdq1sw5p0auJco=
Subject key identifier: E5:EB:D2:52:31:8F:26:E0:4C:A9:51:0F:AB:85:DE:3C:80:50:B1:1E
Authority key identifier: 7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A
Certificate issuer: /CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A
Certificate serial: 34EBE77435D8292197AA08BAEF3493D9299AB632
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 23:30:05 +0000
Manifest this update: Mon 20 Jul 2026 23:25:05 +0000
Manifest next update: Wed 22 Jul 2026 01:32:05 +0000
Files and hashes: 1: 7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl (hash: ITJxXNt4UH5O2+pgl1vuQnI3VmhLAPz7nWbNJ864Gts=)
2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: MUH5KpDAgVdYYC+MwQ+aBkJnISkDkljbuMC7PbGyf/c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl
rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 01:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:eb:e7:74:35:d8:29:21:97:aa:08:ba:ef:34:93:d9:29:9a:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B2D9E008CC635190865EC64FD829B33BBA1EC0A
Validity
Not Before: Jul 20 23:25:05 2026 GMT
Not After : Jul 22 01:32:05 2026 GMT
Subject: CN=E5EBD252318F26E04CA9510FAB85DE3C8050B11E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:a4:cd:51:cc:1d:21:3f:45:2c:18:50:f7:
be:b0:8a:04:d6:7e:6a:7e:92:81:c7:2a:dc:be:ff:
fe:be:60:3f:1f:d9:21:f1:80:75:c2:eb:88:15:13:
59:91:fa:4c:ca:67:81:34:a6:8e:a0:d5:72:27:29:
f5:c6:92:0e:6c:d2:40:1f:44:c4:23:95:dc:f0:45:
2a:e1:ac:dd:0e:a0:99:13:ad:76:fd:29:7e:46:38:
ef:d3:ba:0d:2b:7d:85:c8:f2:c6:d7:ac:d5:81:ab:
0a:d3:ab:ab:41:8b:4b:06:84:2f:8c:ab:82:2e:60:
82:07:13:08:86:fb:40:7e:b7:22:d5:4b:c5:fd:af:
98:aa:59:5c:96:f8:9c:5f:6d:37:94:44:57:66:f8:
1b:0b:76:b0:5c:35:fe:87:24:c1:10:db:cc:e8:28:
81:59:8e:e3:66:65:d6:c1:52:87:a3:9b:05:3b:68:
14:42:19:a2:7f:7a:21:5d:9f:fd:d8:18:f6:c3:dd:
22:d8:1e:fb:97:f5:d8:04:16:a7:c3:ac:00:55:65:
63:0d:c4:ca:a8:8b:01:57:90:6b:20:7b:77:c0:24:
c5:63:33:84:74:75:b7:3f:5a:bf:81:5a:85:76:4d:
a4:70:cd:1b:3e:f9:95:51:ee:2f:74:c6:11:f5:03:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:D2:52:31:8F:26:E0:4C:A9:51:0F:AB:85:DE:3C:80:50:B1:1E
X509v3 Authority Key Identifier:
keyid:7B:2D:9E:00:8C:C6:35:19:08:65:EC:64:FD:82:9B:33:BB:A1:EC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/7B2D9E008CC635190865EC64FD829B33BBA1EC0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7c:7b:6b:2f:c4:6f:bc:69:9a:7c:16:50:7e:d0:16:db:79:
eb:9f:8f:ec:4e:82:40:2d:de:27:92:e4:0d:f4:e3:25:6b:ef:
08:be:9a:c1:53:a2:eb:d0:0d:ed:67:9d:7f:bc:62:45:1c:ad:
ef:c8:32:83:8c:1a:d1:02:fa:00:c1:44:a2:4d:41:af:aa:f7:
98:a6:35:fd:39:e6:f9:31:f4:2e:51:b3:25:10:66:95:b1:54:
01:1f:3c:f2:02:e5:95:c0:65:a6:a4:27:58:a3:9f:d9:be:75:
04:ac:1c:a1:59:95:df:68:b1:97:19:cb:95:35:7a:d3:eb:c9:
3d:57:2c:ee:ec:31:fb:36:71:b0:cd:bf:8d:06:9a:ca:95:83:
71:5f:7e:30:31:43:98:c4:ec:48:a4:95:eb:2a:f3:4e:97:d8:
4c:6d:9b:8c:20:dd:4c:c8:54:57:e1:61:05:1e:2d:f3:aa:70:
d9:72:44:1e:f9:5f:e1:99:82:1d:ed:a1:62:8a:c1:9d:86:bb:
7b:e3:f1:6b:a5:ec:04:e1:a4:6c:19:17:ff:c0:39:45:6d:6a:
07:c1:ef:02:31:7e:88:6c:8a:87:21:75:9a:0c:a4:b9:22:bf:
9e:0c:3a:c0:79:2e:29:38:d8:33:1d:71:0f:b2:a6:83:87:37:
16:d4:29:c0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNOvndDXYKSGXqgi67zST2SmatjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNC
QkExRUMwQTAeFw0yNjA3MjAyMzI1MDVaFw0yNjA3MjIwMTMyMDVaMDMxMTAvBgNV
BAMTKEU1RUJEMjUyMzE4RjI2RTA0Q0E5NTEwRkFCODVERTNDODA1MEIxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwaTNUcwdIT9FLBhQ976wigTW
fmp+koHHKty+//6+YD8f2SHxgHXC64gVE1mR+kzKZ4E0po6g1XInKfXGkg5s0kAf
RMQjldzwRSrhrN0OoJkTrXb9KX5GOO/Tug0rfYXI8sbXrNWBqwrTq6tBi0sGhC+M
q4IuYIIHEwiG+0B+tyLVS8X9r5iqWVyW+JxfbTeURFdm+BsLdrBcNf6HJMEQ28zo
KIFZjuNmZdbBUoejmwU7aBRCGaJ/eiFdn/3YGPbD3SLYHvuX9dgEFqfDrABVZWMN
xMqoiwFXkGsge3fAJMVjM4R0dbc/Wr+BWoV2TaRwzRs++ZVR7i90xhH1A7ljAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5evSUjGPJuBMqVEPq4XePIBQsR4wHwYDVR0j
BBgwFoAUey2eAIzGNRkIZexk/YKbM7uh7AowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDU0NGU5NTEtM2QwOC00NThhLWE0NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4
Q0M2MzUxOTA4NjVFQzY0RkQ4MjlCMzNCQkExRUMwQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QjJEOUUwMDhDQzYzNTE5MDg2NUVDNjRGRDgyOUIzM0JCQTFF
QzBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0
NGEtNTI5ZDM4N2QyNmIxLzAvN0IyRDlFMDA4Q0M2MzUxOTA4NjVFQzY0RkQ4MjlC
MzNCQkExRUMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAF8e2svxG+8aZp8FlB+0Bbbeeufj+xOgkAt
3ieS5A304yVr7wi+msFTouvQDe1nnX+8YkUcre/IMoOMGtEC+gDBRKJNQa+q95im
Nf055vkx9C5RsyUQZpWxVAEfPPIC5ZXAZaakJ1ijn9m+dQSsHKFZld9osZcZy5U1
etPryT1XLO7sMfs2cbDNv40GmsqVg3FffjAxQ5jE7Eiklesq806X2Extm4wg3UzI
VFfhYQUeLfOqcNlyRB75X+GZgh3toWKKwZ2Gu3vj8Wul7AThpGwZF//AOUVtagfB
7wIxfohsiochdZoMpLkiv54MOsB5Lik42DMdcQ+ypoOHNxbUKcA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:12 2026 by rpki-client