
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft
File: A7B168CE466AE74446B650CF824618958D3868FC.mft (raw, json)
Hash identifier: KGAgzkEqE972G0F+jDUw/SkDAK1/yHMFEgnvkduCMM4=
Subject key identifier: B2:7B:5B:74:2F:DD:F3:07:08:98:E0:8D:F5:74:DF:E8:0C:8D:A7:09
Authority key identifier: A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC
Certificate issuer: /CN=A7B168CE466AE74446B650CF824618958D3868FC
Certificate serial: 1F6670E527513693C6930230B98A97E513EA3A34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:31:39 +0000
Manifest this update: Mon 20 Jul 2026 20:26:39 +0000
Manifest next update: Tue 21 Jul 2026 22:14:39 +0000
Files and hashes: 1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: urKuF7qIfembxoDL1G+OM4hGHzA+dqqgmvFYbfpX2IQ=)
2: A7B168CE466AE74446B650CF824618958D3868FC.crl (hash: 8b+JKGRW07EkZksUCZ2SRzsjxqSwgTaOuLINGZD0Wpo=)
3: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: kCAtVDp2awFC3xbza6XlA3+xlFRuKEHRN2FrGan864A=)
4: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: A6gvhW7lfvQRxs5cFOMF6l/Sth1dI8OrQvYNut71iwg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl
rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:66:70:e5:27:51:36:93:c6:93:02:30:b9:8a:97:e5:13:ea:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7B168CE466AE74446B650CF824618958D3868FC
Validity
Not Before: Jul 20 20:26:39 2026 GMT
Not After : Jul 21 22:14:39 2026 GMT
Subject: CN=B27B5B742FDDF3070898E08DF574DFE80C8DA709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:59:88:25:0b:af:c2:b3:b6:5c:b2:f2:1c:
ea:c2:1b:c7:ff:cd:1d:d2:b6:3d:03:92:7a:ff:d3:
fc:1b:90:60:4d:8d:1f:87:ae:39:d1:65:63:77:61:
f5:89:8c:8a:61:e9:c7:ea:6d:86:d6:08:ed:e8:88:
11:f8:2a:36:f6:a0:fa:d8:c8:fb:f4:6c:0f:87:6f:
8d:cf:a5:09:d0:4f:57:59:b7:1e:f1:53:fa:80:e3:
25:20:76:14:86:e4:6d:b6:b8:d7:42:15:a4:a9:25:
2e:ca:fa:c9:6b:d2:80:f1:48:34:63:08:df:14:f7:
85:89:51:74:1c:d4:1a:2b:b6:6e:d5:0b:ec:05:f9:
62:75:5f:bc:a1:9f:e6:e2:58:fa:05:43:6b:3e:1d:
57:2e:7a:1e:d2:33:42:bc:fe:31:e4:7f:a2:55:d3:
15:b2:99:93:6f:32:03:35:b0:b8:dc:10:9c:e4:57:
e8:2e:bf:42:dd:b0:e5:06:fc:4b:01:aa:ba:f7:12:
3b:de:d2:07:af:7b:18:38:bb:69:10:e4:4d:4b:89:
c7:2a:e8:de:e0:88:a5:6c:56:6e:d5:dd:f6:be:e2:
9f:33:f0:d3:b0:62:03:56:17:c9:82:89:57:7f:2f:
d8:ad:32:1d:be:ad:32:55:05:1c:25:47:e5:04:e7:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:5B:74:2F:DD:F3:07:08:98:E0:8D:F5:74:DF:E8:0C:8D:A7:09
X509v3 Authority Key Identifier:
keyid:A7:B1:68:CE:46:6A:E7:44:46:B6:50:CF:82:46:18:95:8D:38:68:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7B168CE466AE74446B650CF824618958D3868FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/A7B168CE466AE74446B650CF824618958D3868FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:04:11:2d:cd:c0:06:92:d1:1a:e4:17:00:b8:b0:d9:52:
a9:2e:ea:b9:15:4f:5e:5c:de:f6:3c:a2:53:f6:32:3c:eb:45:
ae:fd:74:de:38:d1:5d:7e:47:82:96:70:a6:ea:a2:7c:69:6b:
b5:d2:92:a8:56:57:3e:14:16:57:8e:e8:db:0b:f5:98:7e:cf:
db:62:6b:95:fc:80:fa:55:54:3b:57:fb:bf:00:1d:ed:4e:d1:
51:46:fc:a3:b3:91:06:81:a7:47:ec:71:e6:b6:b8:87:43:72:
ce:0c:f0:3c:5e:a9:68:ef:ad:2c:e7:be:ac:47:27:b5:0e:fa:
83:03:fe:6d:ef:3a:17:33:11:df:32:ed:c3:a5:f7:ea:a3:c3:
5d:63:f6:9d:d0:1f:e5:85:0d:3e:fa:62:92:31:12:71:1c:5d:
43:ff:4c:3f:2d:64:86:d1:24:c6:a5:68:f8:82:5e:b0:15:2c:
d7:45:59:6c:67:aa:5d:3d:ed:5a:be:96:fb:99:de:bc:97:c8:
b1:86:cc:46:2f:05:e5:99:ff:6d:07:2c:ce:84:fc:11:0d:8e:
d8:dd:ca:8e:24:c9:87:a7:f8:1e:ec:59:d3:1e:11:aa:c8:d3:
c9:2b:fa:72:48:ab:4a:37:20:c5:98:14:7e:90:ca:3c:0e:5a:
77:0b:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:30:33 2026 by rpki-client