
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft (raw, json)
Hash identifier: AntrxuEHQQr+HfxWAGmCbjzGqzEHL1+oIj0qQ/Gbb/w=
Subject key identifier: 12:3A:31:94:33:62:E7:D4:6D:DA:4E:50:A7:24:8E:3B:13:93:54:59
Authority key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
Certificate issuer: /CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Certificate serial: 5DB2BB55F4729BE4881C7EA5FF944C15329223D5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 23:06:36 +0000
Manifest this update: Wed 02 Sep 2026 23:01:36 +0000
Manifest next update: Fri 04 Sep 2026 01:33:36 +0000
Files and hashes: 1: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: NrNEWLl4Yx21veR5eL8Fv+Q89ar/aJs2ToJ3iBjGoNw=)
2: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: fcRpAOgXJGgXnuhp6dR+nLQETgHc7bHGej7K9bp+jl4=)
3: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl (hash: UobwN3PjIZgwVbH611y8Hrj+8iA3BP8m2ndnN3s1Oio=)
4: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: 5AQkhCDteB07iPZX8nhNE6+kuxwwFLMt5gQdPyMYJFE=)
5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: IEg6gudWjcF2pHWrFBF9y8avAD9xbSwWUkL4YFxTGNA=)
6: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: Gi2ONY8mEqjV4p8QVbCmIDUHi04BcqMbjuq5K46oGb0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 01:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b2:bb:55:f4:72:9b:e4:88:1c:7e:a5:ff:94:4c:15:32:92:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E
Validity
Not Before: Sep 2 23:01:36 2026 GMT
Not After : Sep 4 01:33:36 2026 GMT
Subject: CN=123A31943362E7D46DDA4E50A7248E3B13935459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:73:01:26:07:8d:ec:37:46:79:19:e4:99:
09:ce:5f:0a:85:e1:a2:a7:b7:86:e3:41:18:c1:c6:
92:8d:b8:99:89:78:d7:6d:94:3a:68:f1:66:4c:cf:
c8:c6:47:a7:b6:c2:83:0b:67:4d:f2:2f:6c:98:09:
21:40:6a:f3:9c:13:e9:92:44:b3:68:d7:52:c4:0a:
a2:28:42:15:55:e4:b9:ad:02:ac:a3:0e:e2:ef:f3:
88:a6:05:2b:c8:bd:12:8d:7a:ab:44:b5:ea:04:d0:
68:a8:ab:c0:25:7e:1d:fb:ab:e3:05:fc:a2:aa:15:
6e:09:57:37:fb:99:68:e0:73:34:58:57:0c:b5:48:
f3:0b:7f:1d:66:ec:82:b8:0a:42:15:01:fb:a6:06:
52:0e:2b:79:a1:78:2f:18:b9:98:c7:04:dc:63:95:
b1:83:60:f6:17:ce:df:79:12:74:87:1f:05:d1:b4:
5f:1e:fa:d1:b7:18:2f:db:5a:b5:ea:8c:e1:e6:cb:
d0:12:25:92:91:e1:33:da:1e:8c:0f:37:48:2a:9e:
93:c3:20:38:48:0a:3a:4f:6a:80:39:50:ac:d3:5d:
67:d6:b4:38:46:9c:6b:31:de:87:5c:9c:e0:bb:f8:
49:79:48:2f:24:c8:91:1e:dd:63:93:02:fe:c7:ea:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3A:31:94:33:62:E7:D4:6D:DA:4E:50:A7:24:8E:3B:13:93:54:59
X509v3 Authority Key Identifier:
keyid:7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b0:f8:b0:2b:79:e2:45:69:e8:44:01:27:bb:bd:5c:1e:48:
54:74:ae:16:d8:02:fd:f7:db:15:63:db:bd:df:56:13:9f:cb:
8f:06:4c:68:3f:9b:c2:d1:86:61:a7:1a:10:1a:49:65:b3:b1:
53:51:20:4d:18:41:2a:d0:3b:42:ad:22:58:d1:f9:fb:0a:bc:
5f:14:de:d3:3e:c4:73:68:a3:4a:b7:99:91:b2:33:ce:3c:9d:
23:df:76:8f:30:b6:7e:a3:09:ce:8a:e3:c5:84:c0:99:a8:b6:
a5:19:d0:a7:0f:6e:dd:a5:5d:fc:46:a3:64:5b:5a:09:98:7b:
6f:52:6f:24:5a:b3:1a:4d:3e:41:8d:12:c5:bf:fc:a6:9b:02:
cd:86:47:3f:2f:1b:44:0b:ba:14:2c:52:fd:54:e9:14:60:78:
de:a2:a8:15:08:8b:ce:1a:eb:a6:2c:37:22:82:9c:05:8b:6a:
7b:ad:31:37:90:50:7c:f8:c3:c3:90:33:fb:8b:39:d6:eb:5f:
0f:d4:66:7c:17:34:5c:1a:30:ca:cf:f1:7f:b8:73:68:3f:44:
41:fa:be:06:00:aa:0b:14:b5:c8:4b:6f:d5:4c:85:57:fd:8a:
dc:20:c8:e7:3f:57:5b:e6:fc:c1:f7:7f:d8:73:8f:6d:e0:fa:
f8:ab:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:46:02 2026 by rpki-client