
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
File: 7114DCC67CA188857960AB8205FF64878ABC3A2C.mft (raw, json)
Hash identifier: ONGIPtdvL+LCbNzHk0rdpMRqiBbQI8F/GLiuTouYRGI=
Subject key identifier: 9A:8A:B2:39:22:33:4E:8A:5B:C3:63:9A:4A:0B:C8:A4:B9:5C:05:A6
Authority key identifier: 71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
Certificate issuer: /CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Certificate serial: 757773C3B2385715FA6FF63F20306C9DEEB21D04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 21:57:28 +0000
Manifest this update: Fri 19 Jun 2026 21:52:28 +0000
Manifest next update: Sat 20 Jun 2026 22:21:28 +0000
Files and hashes: 1: 7114DCC67CA188857960AB8205FF64878ABC3A2C.crl (hash: SF3rq78eE3bpOebc40Hu+G4cxaRby7Oa0Eo5pxNM0VA=)
2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: VGYEwzCU0pJcRwa77WfjBRiXp9jxpBahdWP554wfxNw=)
3: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: XXL+jrySck8YOfCgNHqgkAmnQwL01WtL6AIXMhWluBI=)
4: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: dM86g1KJjcw4ZcRJ1Gbl9gY8oFj7Vsah0QHgp5jAvIU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:77:73:c3:b2:38:57:15:fa:6f:f6:3f:20:30:6c:9d:ee:b2:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7114DCC67CA188857960AB8205FF64878ABC3A2C
Validity
Not Before: Jun 19 21:52:28 2026 GMT
Not After : Jun 20 22:21:28 2026 GMT
Subject: CN=9A8AB23922334E8A5BC3639A4A0BC8A4B95C05A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:ef:00:e3:04:9d:d3:32:08:6d:7e:17:8e:
78:73:ca:a2:c2:85:1d:70:39:7c:c1:6b:a6:cb:6d:
e5:eb:c5:2b:41:b4:14:44:0d:26:de:d2:f0:28:29:
73:06:f6:11:c5:17:8e:71:36:a9:3a:cb:b9:66:ec:
ba:e7:23:8a:08:6c:fd:04:5b:40:78:6a:5f:f0:f5:
2a:c9:f7:d3:bc:10:dc:12:2c:b6:70:1a:7d:23:fb:
61:5f:1f:d7:d5:19:6a:1f:9a:4a:73:36:82:d3:c4:
54:4f:51:fe:59:5c:e9:c0:1d:d0:f3:35:11:db:71:
5e:72:db:b5:42:fc:2e:e6:40:ef:8c:a9:a0:11:ba:
70:b0:d4:08:12:70:02:13:a7:49:ad:f9:b9:17:e6:
71:9b:3f:2e:53:db:16:75:de:77:22:b2:0d:12:09:
2f:3f:88:e0:1d:2b:8c:05:34:98:cd:45:b3:db:52:
ef:7f:ba:35:12:87:7e:8d:7d:8a:64:9e:91:6d:45:
33:2b:8c:8e:98:bf:b0:75:8c:9b:9c:74:76:e0:8a:
af:88:b8:47:54:c5:78:92:73:04:d2:be:ba:0d:97:
88:44:45:53:84:33:01:ef:59:a4:6e:ab:da:af:b5:
51:a8:67:2e:90:f9:41:05:10:ac:70:79:3e:b1:26:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:B2:39:22:33:4E:8A:5B:C3:63:9A:4A:0B:C8:A4:B9:5C:05:A6
X509v3 Authority Key Identifier:
keyid:71:14:DC:C6:7C:A1:88:85:79:60:AB:82:05:FF:64:87:8A:BC:3A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7114DCC67CA188857960AB8205FF64878ABC3A2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/7114DCC67CA188857960AB8205FF64878ABC3A2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:02:4b:5e:89:a6:6f:fd:af:db:74:4c:23:be:57:d2:eb:6c:
ba:b9:9b:62:ec:44:ce:35:1f:9b:27:d5:d7:2a:9f:ef:9e:0b:
62:d5:16:b8:7c:c4:e8:86:9f:d2:df:5b:46:87:fd:76:92:58:
41:9f:5f:4f:ca:30:5c:5e:5f:d5:56:6a:8c:7d:85:b1:98:3e:
75:93:b6:01:64:b2:fd:3b:59:7e:c7:2c:79:10:b7:ab:c1:ca:
f7:87:0a:17:2f:7b:98:52:48:af:93:a8:13:1c:8c:c9:e0:53:
d1:ba:78:a9:2d:2c:c2:2c:52:71:06:0a:a8:9d:32:a0:b2:c7:
38:2c:b1:71:82:e2:33:e6:18:fb:8b:c6:6c:2f:45:db:74:13:
0c:90:98:a1:62:87:cc:7f:d6:99:4b:31:a0:fd:9f:1b:3a:27:
08:63:30:af:f6:ad:4b:9e:cf:91:73:9b:f6:91:43:44:8b:55:
33:d4:e2:c8:c4:8a:9e:b5:f3:c2:81:57:d2:c8:ba:84:a1:7b:
96:6d:5d:74:5a:bb:3c:4e:fd:16:a9:61:4a:66:27:98:0e:52:
f9:a0:df:65:62:68:9f:3a:de:26:18:7e:2b:91:51:1e:2e:f6:
b0:c1:49:4a:ad:7c:5f:c2:48:2e:2e:31:00:57:40:d1:5c:a1:
08:9e:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:00:47 2026 by rpki-client