
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier: fyEqL0sqxpX0oT0k5weEOHs6dM2I91SvIuqmqKb8H+0=
Subject key identifier: BC:CB:CE:53:E2:BC:48:D5:F4:AD:3C:33:C6:22:9A:1E:23:AD:AD:5E
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial: 67A9D45CF6747F70E962C109F7D3E40518FC0C2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 14:05:46 +0000
Manifest this update: Wed 04 Nov 2026 14:00:46 +0000
Manifest next update: Thu 05 Nov 2026 14:46:46 +0000
Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
2: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: l8DdX3PNhUNo/9662YgHlVe3vpoJAi3DOQLsazINLdk=)
3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 14:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a9:d4:5c:f6:74:7f:70:e9:62:c1:09:f7:d3:e4:05:18:fc:0c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Validity
Not Before: Nov 4 14:00:46 2026 GMT
Not After : Nov 5 14:46:46 2026 GMT
Subject: CN=BCCBCE53E2BC48D5F4AD3C33C6229A1E23ADAD5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b3:77:3e:a8:01:90:5f:e2:96:5b:34:f7:f3:
bb:a9:fe:f4:24:2e:42:32:7c:19:fe:80:3f:3f:2c:
c6:7d:4a:aa:4d:73:81:23:95:d4:4c:d8:59:d1:b7:
92:42:e8:0e:e4:22:e3:8b:32:ee:55:eb:3e:27:2e:
8a:f8:6a:60:95:6b:0a:df:94:21:f6:97:4b:fb:5b:
37:6c:d5:4e:2b:48:a8:21:91:d7:1d:c3:1c:bc:74:
cb:79:76:2b:a0:f0:a1:31:4f:df:81:3a:71:38:9c:
f0:13:dd:d1:8a:a5:ee:1c:a3:06:a5:d2:f0:d3:22:
b3:0c:3f:4c:31:8c:02:ed:2f:0e:21:a4:06:46:5b:
88:1e:65:d7:5a:5c:0f:60:9d:a6:aa:1a:a7:c9:d4:
f6:b2:99:db:0e:fc:3f:93:4b:01:ac:47:d0:64:49:
2b:59:d2:16:6d:a1:bb:a1:a9:2e:bd:56:f1:7b:9b:
9f:3e:b0:9c:eb:24:68:b1:ac:f4:88:d0:fb:b7:dd:
80:6d:f0:31:95:27:64:ac:39:03:f5:38:b4:2f:01:
d8:95:e6:14:ca:7c:0d:bc:50:36:89:d0:b3:82:86:
c8:14:dd:90:e5:6d:a0:0b:6f:a9:a7:52:2f:f1:4f:
d1:71:19:a7:e7:4e:fb:6c:8b:a0:5b:58:f8:18:7b:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:CE:53:E2:BC:48:D5:F4:AD:3C:33:C6:22:9A:1E:23:AD:AD:5E
X509v3 Authority Key Identifier:
keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:3e:7e:38:07:36:89:bb:86:8b:a5:49:f3:5c:cc:7c:bb:
88:dc:dd:da:9c:7d:45:66:bc:29:e2:7c:94:52:8a:4a:72:79:
45:ad:20:06:93:bd:52:cf:42:5e:92:25:e3:bd:a9:b0:ab:e2:
4d:80:43:8b:9b:7b:f2:0c:88:2e:6c:89:e9:34:18:23:19:a9:
cc:36:7b:47:5f:2d:ad:e5:92:c4:d6:50:e6:fd:07:48:bc:07:
cf:11:3e:91:d8:b6:32:fe:2c:cc:79:3a:d1:31:3d:05:dd:75:
42:e4:73:88:f0:96:ae:f8:88:55:12:28:f5:a2:a2:b1:24:52:
83:43:7f:a0:a8:f8:44:84:10:11:e8:9b:6e:13:36:ec:83:c2:
cd:6c:74:b3:d7:36:89:c7:26:85:b8:e4:50:de:d3:8d:40:89:
51:85:a0:6b:ae:9e:d7:0b:21:a2:d9:d8:d6:14:75:c5:78:e5:
4d:d4:0c:60:35:a6:b0:7c:c5:a6:82:7b:18:ef:a4:a8:53:8d:
57:48:18:b1:f6:db:a3:73:fa:35:5e:e7:d5:e0:33:0a:b5:09:
1f:09:b7:61:39:ce:7b:e8:38:b1:c2:09:a0:5b:33:41:1f:b3:
7a:84:e6:d1:d0:6b:93:a3:67:fc:cb:92:02:ef:65:75:16:b2:
b9:74:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:04:15 2026 by rpki-client