
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
File: 7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json)
Hash identifier: +YRGZ+UunX3NcEYaeUxDJ1BA309iwQqd1FBFYC1ZJlA=
Subject key identifier: C4:44:6C:C8:DC:38:AF:3E:41:19:59:80:D1:05:62:A0:90:D8:CC:DF
Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
Certificate issuer: /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Certificate serial: 774A0C039A63F540A54D94B7BA1CF53FADB8F11D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:32:46 +0000
Manifest this update: Tue 21 Jul 2026 01:27:46 +0000
Manifest next update: Wed 22 Jul 2026 03:58:46 +0000
Files and hashes: 1: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=)
2: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: fE+paUHCQrsNbXsU7AQ86R5mwxu2yXz4vFu2+Dg+1Ew=)
3: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=)
4: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4a:0c:03:9a:63:f5:40:a5:4d:94:b7:ba:1c:f5:3f:ad:b8:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Validity
Not Before: Jul 21 01:27:46 2026 GMT
Not After : Jul 22 03:58:46 2026 GMT
Subject: CN=C4446CC8DC38AF3E41195980D10562A090D8CCDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:39:5f:88:3d:f2:a8:24:ee:d6:d5:27:3d:
3f:45:de:69:e7:ae:c6:08:5d:82:e4:50:bc:79:b9:
af:da:17:5d:af:93:7b:cc:c4:1d:f9:8f:7d:dd:5b:
5f:b7:24:46:c8:2f:e3:0a:96:89:f2:4e:38:cf:68:
d4:dc:39:98:12:ae:c0:94:be:cc:f5:e3:ee:2c:f4:
80:cb:f6:2e:ca:bd:7f:6b:38:9e:e7:e4:c5:f2:ee:
a3:01:64:3d:fa:d5:ed:3e:58:d2:34:f6:e0:0c:34:
7f:c0:72:49:cf:3f:75:7b:ca:01:0a:7f:db:bc:1f:
5c:b8:00:2f:2a:ed:91:80:02:67:89:a3:fa:46:8f:
29:4e:22:a1:9e:88:ef:af:41:16:5f:e0:87:ea:1a:
97:fa:99:76:a0:73:e1:72:2a:1c:04:13:68:99:95:
73:5f:2d:9c:93:12:53:e1:97:bb:4c:0c:6b:d3:9b:
a8:23:c0:3f:2c:39:8f:99:b6:a9:a4:43:91:8d:5a:
a8:8a:12:4e:91:e6:28:a3:ed:78:79:4a:2f:9d:4c:
04:73:68:80:82:a9:25:46:e2:7c:d4:24:c1:ee:63:
e5:4a:ae:c9:42:44:a2:ee:55:ef:7d:11:21:1b:3c:
3c:0c:32:1d:b5:ae:19:0f:a8:82:46:11:2c:d1:a3:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:6C:C8:DC:38:AF:3E:41:19:59:80:D1:05:62:A0:90:D8:CC:DF
X509v3 Authority Key Identifier:
keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:e4:03:9c:59:1e:7f:ce:6d:84:5b:b6:86:be:40:5a:86:
c4:f6:9c:8b:51:bc:1f:3b:4b:33:c9:20:74:41:75:9c:bd:c6:
0b:e4:ba:be:f6:b0:b5:64:90:01:20:61:f8:0c:82:3e:b3:1d:
7b:b0:52:ac:60:2c:19:5f:c5:8a:0a:84:52:99:96:48:60:28:
c1:92:47:a4:df:6b:ff:0c:2b:91:87:7c:d8:d3:b7:b9:13:60:
06:99:00:d7:90:9c:91:bd:f4:19:b7:13:b9:1b:d9:a9:d9:a0:
a4:bb:90:bc:be:4a:23:8b:b6:39:01:76:3f:a5:66:85:51:3e:
53:a7:86:b4:c4:6b:f6:fb:26:e9:79:c5:a2:d0:6d:e3:9a:d0:
c0:d9:84:93:8c:9c:95:ed:52:4d:5c:06:62:20:a5:4b:45:c8:
66:2a:8d:2c:49:c3:e8:3a:c7:f1:e1:6c:5f:cd:7a:e4:fe:19:
be:61:8e:e4:f1:4f:08:c0:61:22:db:cf:df:90:d0:c7:a3:5b:
f8:86:33:85:57:5b:a2:e9:e2:b0:5c:7d:ed:d4:a8:76:d1:ff:
ad:a2:d5:a3:20:ae:57:6c:c5:60:bb:a5:fc:6f:fa:ea:af:91:
59:e3:8f:57:b2:f8:4a:a1:8d:19:9f:d5:0a:4f:73:a9:a5:12:
c4:55:62:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd0oMA5pj9UClTZS3uhz1P6248R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3
NjQ4QjM3OTAeFw0yNjA3MjEwMTI3NDZaFw0yNjA3MjIwMzU4NDZaMDMxMTAvBgNV
BAMTKEM0NDQ2Q0M4REMzOEFGM0U0MTE5NTk4MEQxMDU2MkEwOTBEOENDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyDlfiD3yqCTu1tUnPT9F3mnn
rsYIXYLkULx5ua/aF12vk3vMxB35j33dW1+3JEbIL+MKlonyTjjPaNTcOZgSrsCU
vsz14+4s9IDL9i7KvX9rOJ7n5MXy7qMBZD361e0+WNI09uAMNH/AcknPP3V7ygEK
f9u8H1y4AC8q7ZGAAmeJo/pGjylOIqGeiO+vQRZf4IfqGpf6mXagc+FyKhwEE2iZ
lXNfLZyTElPhl7tMDGvTm6gjwD8sOY+ZtqmkQ5GNWqiKEk6R5iij7Xh5Si+dTARz
aICCqSVG4nzUJMHuY+VKrslCRKLuVe99ESEbPDwMMh21rhkPqIJGESzRo66pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxERsyNw4rz5BGVmA0QVioJDYzN8wHwYDVR0j
BBgwFoAUeidsJdie2Dh5enz0nbLj1nZIs3kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWFlMmViZGUtNjMxMS00ODhhLTgyYjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVE
ODlFRDgzODc5N0E3Q0Y0OURCMkUzRDY3NjQ4QjM3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83QTI3NkMyNUQ4OUVEODM4Nzk3QTdDRjQ5REIyRTNENjc2NDhC
Mzc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy
YjctOWQ0YzA1NTMwOTg3LzAvN0EyNzZDMjVEODlFRDgzODc5N0E3Q0Y0OURCMkUz
RDY3NjQ4QjM3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH5M5AOcWR5/zm2EW7aGvkBahsT2nItRvB87
SzPJIHRBdZy9xgvkur72sLVkkAEgYfgMgj6zHXuwUqxgLBlfxYoKhFKZlkhgKMGS
R6Tfa/8MK5GHfNjTt7kTYAaZANeQnJG99Bm3E7kb2anZoKS7kLy+SiOLtjkBdj+l
ZoVRPlOnhrTEa/b7Jul5xaLQbeOa0MDZhJOMnJXtUk1cBmIgpUtFyGYqjSxJw+g6
x/HhbF/NeuT+Gb5hjuTxTwjAYSLbz9+Q0MejW/iGM4VXW6Lp4rBcfe3UqHbR/62i
1aMgrldsxWC7pfxv+uqvkVnjj1ey+EqhjRmf1QpPc6mlEsRVYiI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:40:51 2026 by rpki-client