
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft (raw, json)
Hash identifier: FS+3H4gf50kBS5dWXXECzSEkeaJ241kz73O8nQBuhfA=
Subject key identifier: 59:DD:3B:8F:C8:A9:B3:2B:69:98:9B:BA:1D:FD:DB:A1:FC:0E:83:6A
Authority key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
Certificate issuer: /CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Certificate serial: 30811DCF764B899AD0507E346F1E0DD9AF6A283F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 18:42:37 +0000
Manifest this update: Tue 02 Jun 2026 18:37:37 +0000
Manifest next update: Wed 03 Jun 2026 22:17:37 +0000
Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: MB43wivyVMcmejyDt+ILCLmOnQIliDhhXU3YyNcO9+8=)
2: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl (hash: dYiNuNdr03VBRs+RDArfGvi6ic39MSM14aSYjzNw9rw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 22:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:81:1d:cf:76:4b:89:9a:d0:50:7e:34:6f:1e:0d:d9:af:6a:28:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85
Validity
Not Before: Jun 2 18:37:37 2026 GMT
Not After : Jun 3 22:17:37 2026 GMT
Subject: CN=59DD3B8FC8A9B32B69989BBA1DFDDBA1FC0E836A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:10:f5:ef:84:52:9c:dd:5d:d8:1e:76:93:
72:ec:a6:71:de:e6:f7:43:6a:bb:06:31:71:4d:7e:
4f:86:31:c7:45:6d:e1:e0:7c:e5:69:4d:4f:07:72:
60:31:6e:2f:5f:45:5d:b8:09:fb:c1:de:93:3b:b3:
d7:c9:bb:73:cc:84:c7:95:01:f0:18:a7:45:1e:00:
52:ba:d5:ab:77:56:26:cb:25:c2:e3:42:53:34:6c:
06:6a:54:ce:d2:cb:ff:ce:94:91:76:9a:62:7b:d2:
69:e7:60:3e:fd:94:57:b2:d3:9f:f2:3d:87:14:59:
7d:52:19:32:b3:fd:08:74:20:5e:b0:d0:12:70:29:
e6:bd:1f:e9:a0:eb:38:b3:be:b7:57:94:cb:75:d0:
97:ef:8d:7f:e4:a5:65:f2:c9:97:dc:f1:2a:04:a4:
92:7b:6e:82:fb:77:61:62:09:ee:21:67:7f:46:9f:
bf:99:1c:9a:fd:1c:b8:bc:e9:cd:64:84:5b:a5:ce:
1e:4e:72:61:87:93:05:63:95:ee:5c:6e:1b:8a:7b:
4c:9f:2a:9b:24:96:34:62:6d:21:0b:a9:4c:59:bc:
40:a0:67:90:93:5d:91:06:ac:b7:23:13:cd:2c:f8:
b1:87:2a:a5:14:d6:26:3b:6f:8d:e6:9d:2a:f9:61:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:3B:8F:C8:A9:B3:2B:69:98:9B:BA:1D:FD:DB:A1:FC:0E:83:6A
X509v3 Authority Key Identifier:
keyid:7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4c:40:b3:e0:94:15:61:b7:83:94:00:7f:30:67:1b:b6:85:
35:d4:c4:1a:ff:c4:4b:28:c5:69:35:b8:f6:5c:e7:08:5b:f9:
51:75:17:3a:c8:b8:7a:cd:5f:6e:bd:2f:59:24:04:85:fa:bd:
c6:31:d7:ab:9a:50:df:49:aa:84:59:1a:61:db:51:37:c5:d8:
b7:64:35:46:90:8b:e0:9f:ca:02:18:21:e1:a3:16:42:18:14:
bd:0d:18:3c:f4:c7:82:13:1f:b2:be:c2:28:0f:4f:dd:e4:05:
ed:e4:af:13:7d:cc:70:11:6b:83:0f:9b:54:90:38:ff:88:69:
24:f0:eb:8d:1a:ab:cb:08:27:01:78:0b:22:f4:84:0d:96:9e:
38:df:c0:ce:78:14:89:1f:c1:c7:db:f1:3f:06:fe:58:65:3d:
1c:ca:da:cd:1a:a6:84:3b:b7:58:51:ad:ab:6f:0a:5c:35:36:
d3:55:bd:94:79:54:da:d3:17:31:5d:98:53:8e:bf:f6:78:8b:
98:fc:9a:a1:13:5c:2f:dc:9b:a8:e0:97:f9:10:a4:b2:82:7f:
db:86:a5:b1:fb:3d:6f:31:d1:eb:d0:de:02:ac:9f:33:3b:10:
f5:e2:7f:2c:78:8c:4c:40:2c:f8:5a:83:c6:32:c9:0c:c3:9a:
66:de:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:37:11 2026 by rpki-client