
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
File: C7B88124E27943001DCBEF12B94411DF803E6864.mft (raw, json)
Hash identifier: hunOGi8i6gAdx5teT6C9Kjt1PaN070k+3HcEjDjIApk=
Subject key identifier: D0:9F:06:4D:24:73:A7:43:BE:F3:38:01:5D:91:28:68:35:A7:9C:84
Authority key identifier: C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
Certificate issuer: /CN=C7B88124E27943001DCBEF12B94411DF803E6864
Certificate serial: 2E244D63BCC82E3AB3AFDEF1C2DCB9989C87D115
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:59:32 +0000
Manifest this update: Tue 21 Jul 2026 02:54:32 +0000
Manifest next update: Wed 22 Jul 2026 03:07:32 +0000
Files and hashes: 1: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: nkkFu7O3K8B/AyuvsEsau+DSlTgImFo/RgKno+4L8tw=)
2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: VbZP5AlQJHoYGRcuhEjAa8Ztq6z5yJJSceEmBD6UPnQ=)
3: C7B88124E27943001DCBEF12B94411DF803E6864.crl (hash: uZCd2GTAo2R+sywrLsVaMzZk1gZ6S7db3aldYY/dNXQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:24:4d:63:bc:c8:2e:3a:b3:af:de:f1:c2:dc:b9:98:9c:87:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7B88124E27943001DCBEF12B94411DF803E6864
Validity
Not Before: Jul 21 02:54:32 2026 GMT
Not After : Jul 22 03:07:32 2026 GMT
Subject: CN=D09F064D2473A743BEF338015D91286835A79C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:1d:5f:76:7b:9f:69:3a:b2:c7:f9:62:c7:
39:e8:42:e1:50:5e:6a:f5:10:dd:ae:43:3d:70:42:
de:bd:18:f7:d2:47:9a:04:34:23:1f:59:1b:9d:76:
74:c9:56:de:41:97:a5:73:85:53:84:ea:fc:75:c9:
d5:e8:4e:49:98:72:d3:88:e5:b9:3d:c4:f7:55:b1:
89:ce:54:c0:89:7c:ed:8a:0c:0d:4e:7a:90:39:65:
91:7a:57:29:be:cb:f2:06:f5:9c:db:66:dd:62:7d:
f2:82:51:34:e3:5e:86:10:2e:8d:66:09:1c:c1:c4:
6e:d6:f7:55:f3:9c:94:e1:7d:e9:0a:b0:92:08:e4:
ec:f8:2d:49:f8:d9:b9:68:76:4a:f8:d1:93:b5:21:
69:96:94:49:56:93:28:6b:12:b6:0a:cc:22:60:8b:
f0:38:5e:a7:e1:b9:14:89:f9:f1:30:e2:ed:e6:84:
01:97:5a:b2:25:8b:98:45:4b:5b:c6:e6:ed:78:f4:
c2:4e:fd:45:e9:ed:8f:5a:77:a8:89:b2:91:27:78:
f7:75:df:c1:23:d2:e2:c4:fd:58:f3:da:bf:dc:02:
34:d0:98:eb:ef:18:a4:28:8f:76:3b:c1:32:d9:6d:
da:4a:36:e7:5f:cd:a0:72:a5:31:d0:a5:f2:f5:b1:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:06:4D:24:73:A7:43:BE:F3:38:01:5D:91:28:68:35:A7:9C:84
X509v3 Authority Key Identifier:
keyid:C7:B8:81:24:E2:79:43:00:1D:CB:EF:12:B9:44:11:DF:80:3E:68:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C7B88124E27943001DCBEF12B94411DF803E6864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/C7B88124E27943001DCBEF12B94411DF803E6864.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ab:ad:9c:22:ba:8d:71:d6:9a:49:0f:94:96:1c:f5:ec:1f:
f6:93:52:19:7a:ca:a1:7c:96:2c:f4:65:96:1b:f5:88:df:9e:
03:9e:ad:2d:f2:71:99:54:1b:b9:54:7c:5b:6e:d6:6d:d7:4a:
f7:42:00:52:e4:cc:0a:e3:ea:59:e7:e5:1b:bc:4d:9d:e6:0a:
ca:03:a8:8a:d1:c5:ae:c5:77:5f:92:4e:dd:9f:4a:96:77:a8:
f1:45:f5:9c:db:85:e7:50:1a:64:bc:cd:42:78:a3:e6:30:17:
2e:b4:d9:b9:17:0c:d5:87:78:c6:da:a4:1e:93:a8:23:15:5d:
ac:f9:17:9e:67:2a:02:96:9f:99:45:98:67:45:01:16:c2:2f:
9f:41:ea:55:e8:72:b9:58:f6:89:92:ea:d5:2b:57:ae:cb:df:
d7:44:3f:6d:0a:1b:13:e9:0e:08:8b:96:fb:21:93:7b:e7:8b:
94:dc:f0:d0:16:f1:b2:71:25:6a:2e:15:97:1c:6b:82:66:f6:
0d:ae:1c:8d:0a:c7:e0:48:99:bd:8d:fa:6c:9d:99:57:fc:1d:
d3:94:23:f7:74:8d:e1:bd:a4:cd:0b:8f:88:d3:99:3f:7e:e8:
48:d5:db:14:98:d5:e5:dd:37:fb:67:d9:dc:2c:3f:19:b7:d2:
e9:b4:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:31:02 2026 by rpki-client