
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json)
Hash identifier: 6E8R6GiWCK2E6WIQzfQqG/pUfqM6wPigQJ1DlDOrQW4=
Subject key identifier: D2:D0:18:70:FE:D3:14:71:F1:E8:41:70:8F:DC:25:78:DC:B1:75:91
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial: 14F24C1F357B3CB94213AE9C46E58652F8B1AA2D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:25:05 +0000
Manifest this update: Tue 21 Jul 2026 03:20:05 +0000
Manifest next update: Wed 22 Jul 2026 04:53:05 +0000
Files and hashes: 1: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=)
2: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: zEERO+3Rog3Fifm8a5YN7MHdwwOxKTEjozqvhifh9e0=)
3: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f2:4c:1f:35:7b:3c:b9:42:13:ae:9c:46:e5:86:52:f8:b1:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Validity
Not Before: Jul 21 03:20:05 2026 GMT
Not After : Jul 22 04:53:05 2026 GMT
Subject: CN=D2D01870FED31471F1E841708FDC2578DCB17591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:18:1f:2c:05:68:c6:59:35:0e:db:1a:ec:
f1:35:25:83:53:9e:c2:8f:59:6e:d8:4f:5f:11:cb:
77:d6:09:7c:59:85:fd:e4:25:01:96:7f:e8:14:11:
8e:e9:83:da:ac:e9:5f:51:77:db:e6:34:0a:41:24:
f7:4e:74:a8:28:7d:bf:80:0a:bd:6d:3b:63:1f:2e:
f9:27:2c:0e:44:e1:6a:92:a5:87:f6:32:49:2b:ce:
d6:60:18:b7:a2:e9:35:f2:dc:fb:9a:0c:72:22:43:
03:c4:db:b3:24:6c:17:81:59:76:08:2d:0d:07:90:
33:cb:38:99:7a:af:c0:4e:06:56:1c:6c:20:4e:3b:
e7:70:2a:2c:e3:be:43:5f:67:24:c0:d5:1a:a4:ea:
c5:95:b6:2b:e5:7d:b6:2d:93:1b:d0:50:e5:58:83:
ee:ae:ee:5a:cd:82:ea:36:21:3b:fe:ff:8a:07:a2:
7b:67:1d:c2:c7:88:51:55:37:54:33:6a:75:c5:66:
dc:7e:b8:c6:27:15:08:16:04:9d:47:db:1b:fb:fa:
5d:2f:89:07:8b:6e:1b:2a:40:f4:7f:f7:d6:2b:78:
6c:26:0e:08:21:2a:b0:46:e8:30:df:a8:e1:56:22:
d1:c8:69:9d:95:4a:39:2b:a7:33:1a:71:85:c4:16:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D0:18:70:FE:D3:14:71:F1:E8:41:70:8F:DC:25:78:DC:B1:75:91
X509v3 Authority Key Identifier:
keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:d4:e4:3b:31:ae:d7:96:59:83:68:b0:3c:5e:1f:57:45:fc:
64:c2:a7:66:ad:c4:ce:8d:48:f0:99:73:0a:56:33:54:65:72:
d2:34:72:ed:00:88:5a:9d:54:3c:c2:c6:44:d9:5c:9b:3d:4e:
d1:28:d0:0f:b6:6a:da:99:03:f8:dd:41:32:a2:54:a2:03:16:
43:3f:7a:ce:ba:16:0a:af:f1:30:28:ec:36:51:9d:07:dd:e2:
82:af:b6:54:a8:d2:38:6c:75:17:64:28:0b:f6:4e:04:88:b5:
dd:02:d5:37:8f:ef:a9:59:ef:f1:31:85:71:ee:7c:d3:5d:dc:
cd:ff:49:1b:76:ea:02:06:c2:58:e2:23:70:01:b5:b2:d9:83:
fa:97:6e:9b:fd:1f:94:d4:3e:bf:8f:b7:63:26:b4:fe:7a:be:
bd:e3:7c:d4:5c:dc:68:da:4e:e8:ac:13:04:6e:7c:b2:11:bc:
dc:03:cc:56:a5:7b:56:e3:a2:77:05:80:d7:ce:2c:9d:1a:8d:
c5:99:6b:81:1d:db:e1:35:47:4b:05:2b:f5:e1:36:0a:2b:b0:
a6:1b:75:ba:1f:88:d0:5b:14:f2:38:3f:83:de:82:3e:f2:1c:
dd:0e:9f:fa:56:f3:77:c7:21:64:e4:fd:36:64:9e:18:85:4d:
f5:f6:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:30 2026 by rpki-client