
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft
File: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft (raw, json)
Hash identifier: z6Ovoo9MTyBK3HXXucTynr8szxHEqyyXprPKYtrRUAY=
Subject key identifier: 1F:1D:83:95:3A:03:38:42:42:DC:05:1D:45:69:42:FB:F7:1D:66:C9
Authority key identifier: 7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41
Certificate issuer: /CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941
Certificate serial: 781AB8D0201F8936E1B8260906E97EE75FC214AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 08:10:07 +0000
Manifest this update: Tue 02 Jun 2026 08:05:07 +0000
Manifest next update: Wed 03 Jun 2026 10:13:07 +0000
Files and hashes: 1: 7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl (hash: /wZeGHkjlikKDo87yw0xntQ5xiTfOv2zs9SQMZc0WnY=)
2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 9NfA+UigkaeRrDOYfR/pW+xu+btdeunFAYc1t2/cwBA=)
3: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: F4M8MHNpJyjK8JMP4omDLl+coBkk4H80wSqlzMtwEQs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl
rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1a:b8:d0:20:1f:89:36:e1:b8:26:09:06:e9:7e:e7:5f:c2:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AE9491DE111DAFB09BAC86C9777FC44A7E8D941
Validity
Not Before: Jun 2 08:05:07 2026 GMT
Not After : Jun 3 10:13:07 2026 GMT
Subject: CN=1F1D83953A03384242DC051D456942FBF71D66C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:5e:03:d1:4f:ce:50:50:94:1f:8e:25:ef:
04:f7:78:f5:84:6b:42:98:c1:38:0f:40:58:03:f0:
6b:86:d5:86:59:cd:36:bc:da:8c:f4:15:1e:4c:9f:
71:a5:9e:b6:94:f6:96:04:e9:fd:0f:e0:68:4b:0a:
37:f2:e4:0e:9c:1d:54:5b:5c:a3:28:60:a8:05:47:
39:ae:a0:bf:0b:9a:fa:35:b9:17:d9:0b:85:91:94:
e1:5e:da:f6:4a:34:67:71:42:7c:be:22:e2:5f:17:
ab:cf:ce:d6:36:d3:c2:67:5b:87:db:bb:33:9f:9f:
b7:21:8d:90:ba:03:3a:3d:31:4b:2d:ec:93:6b:80:
b3:69:03:3e:80:01:cc:95:b2:bd:1b:6a:4c:a8:8f:
b8:bf:3f:f8:73:9c:73:f4:7c:b4:01:62:f2:37:b0:
ab:bc:08:e3:76:ce:36:96:d5:83:d5:2f:c3:f3:11:
40:20:80:6c:cc:c6:7d:d9:32:af:28:14:53:8d:96:
1e:2a:35:00:9b:be:25:62:ef:c2:b2:f8:06:4f:26:
e6:3c:7d:e6:56:eb:dc:34:21:68:a6:0b:eb:ec:6d:
7b:b4:74:5e:b6:95:cc:bc:a5:7d:9e:bc:a6:af:4e:
a2:03:c2:a2:dd:90:92:23:aa:a3:ea:ec:6a:32:00:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1D:83:95:3A:03:38:42:42:DC:05:1D:45:69:42:FB:F7:1D:66:C9
X509v3 Authority Key Identifier:
keyid:7A:E9:49:1D:E1:11:DA:FB:09:BA:C8:6C:97:77:FC:44:A7:E8:D9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/7AE9491DE111DAFB09BAC86C9777FC44A7E8D941.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:40:8f:9b:56:15:34:56:1e:c4:8a:cc:12:64:82:a2:9d:2a:
dd:10:30:a8:73:6d:90:80:d3:c2:14:b0:06:e9:ef:5b:ea:69:
f9:27:d5:d6:d3:11:e4:61:a1:c3:6b:e7:ed:33:cf:a3:7e:e4:
11:6b:fc:fa:b5:ee:12:9b:f3:1c:64:b2:26:ae:42:38:d9:c1:
1d:ed:56:18:ac:91:a2:77:61:12:a9:a4:70:d6:0e:bf:da:51:
4d:de:b6:90:85:91:d5:3c:a2:a1:88:8e:dd:4c:96:f6:4f:85:
4b:d4:3e:5e:4e:7d:38:94:a2:61:53:e6:0d:af:6d:20:21:39:
c1:d5:49:32:aa:2b:6c:b2:68:63:31:e1:51:78:77:20:ca:22:
db:ce:62:41:66:ed:e4:11:ab:dd:6b:4b:65:9b:96:83:2c:4e:
d3:18:62:54:1f:6e:f9:bf:12:4c:38:d8:ff:5e:26:71:6c:fe:
59:e1:11:7d:08:e5:85:e3:a6:ce:86:f7:c4:72:0e:21:b6:37:
d6:1f:ac:62:62:1f:f9:58:28:cf:40:ad:fd:1e:0f:42:26:1d:
df:87:56:f5:8b:79:e1:7d:66:8b:71:06:d3:32:b7:7e:28:42:
3e:da:0e:b6:e2:8e:2b:e1:35:fa:8a:7a:87:a7:1f:06:c1:20:
15:89:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:05 2026 by rpki-client