
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft
File: 7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft (raw, json)
Hash identifier: G3PD6ER2+ilS5zA0KKHZLku4PNhkvna8/XVnlSJgeR4=
Subject key identifier: 9E:2C:E9:33:3A:99:C9:6E:87:52:1A:A1:12:46:7E:A8:14:0C:B7:E9
Authority key identifier: 78:15:DB:BA:44:B8:A2:E8:3F:DE:40:C3:2B:E2:A6:E5:9D:10:A6:77
Certificate issuer: /CN=7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677
Certificate serial: 25AB7955414C374DF3650CC520D30D9E134AF6EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 16:57:33 +0000
Manifest this update: Thu 18 Jun 2026 16:52:33 +0000
Manifest next update: Fri 19 Jun 2026 19:04:33 +0000
Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: bKB1+9DVRDsboHXw+3VJPB+BasxR0bz/Ky0FIGacWWE=)
2: 7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl (hash: GXbRn9JawMWGNbwZN2OyIIJyNn2rxYsraFqWKWNb6PY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl
rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ab:79:55:41:4c:37:4d:f3:65:0c:c5:20:d3:0d:9e:13:4a:f6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677
Validity
Not Before: Jun 18 16:52:33 2026 GMT
Not After : Jun 19 19:04:33 2026 GMT
Subject: CN=9E2CE9333A99C96E87521AA112467EA8140CB7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:9c:64:9d:98:5c:3e:57:a0:0e:7f:23:36:
f6:dc:4c:70:9c:2a:57:7a:32:5c:e0:da:62:49:92:
78:07:fa:67:14:90:4d:34:fc:04:65:5b:d9:cc:37:
bc:bd:92:d2:f2:f2:ad:4b:70:15:0b:53:f3:56:2b:
fb:69:99:5e:7b:bc:60:46:6f:41:f5:f4:ad:8f:3c:
5d:aa:17:7d:7c:8a:08:f2:d9:7c:84:ac:1d:15:2c:
aa:a8:4b:fb:98:4f:aa:95:a8:48:cd:a3:4c:10:30:
44:9b:4b:02:71:14:b4:13:65:aa:95:2c:08:05:6d:
ea:66:fc:6c:4a:53:12:23:55:b4:6c:62:ad:af:88:
63:66:41:50:f4:e7:fe:b5:b5:b7:2c:b9:77:fa:6f:
80:ca:20:bb:9d:c4:68:2b:47:10:95:e9:ed:67:ad:
37:45:15:7e:90:b1:71:1e:e4:cd:03:9d:b3:97:86:
20:8a:ff:2b:27:ad:29:65:cc:4e:aa:f7:89:9c:a4:
09:4d:76:06:0d:a3:c2:63:bd:ee:4f:97:63:71:7a:
97:42:ef:ac:7d:95:22:af:fd:97:ed:3e:ba:5c:0b:
c5:6b:03:21:da:25:1a:c6:5d:b9:70:6e:59:87:25:
1c:45:2b:e8:d9:a9:67:9d:8f:0d:44:bb:5f:47:46:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:E9:33:3A:99:C9:6E:87:52:1A:A1:12:46:7E:A8:14:0C:B7:E9
X509v3 Authority Key Identifier:
keyid:78:15:DB:BA:44:B8:A2:E8:3F:DE:40:C3:2B:E2:A6:E5:9D:10:A6:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/7815DBBA44B8A2E83FDE40C32BE2A6E59D10A677.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:b8:86:c8:72:48:ec:e8:93:b6:0c:9a:46:f6:a5:47:7e:
0e:75:1b:68:bd:fc:8a:c7:c6:21:93:ce:73:1b:3b:f0:ad:71:
8d:4b:6e:a1:d1:18:4d:38:29:19:f9:7d:e5:30:2d:97:78:21:
b0:e8:59:05:21:9a:7c:82:44:e4:24:e3:6a:80:33:bc:74:5b:
4f:5d:ff:bd:69:d9:ba:40:38:a2:44:c3:b2:99:21:92:76:f8:
ea:8e:99:9e:b7:53:2b:49:a9:76:ef:33:49:44:62:3d:1a:ad:
4b:7f:94:19:b9:94:f3:df:59:a2:44:47:6e:6f:48:2e:23:bb:
6a:9d:02:69:46:fd:77:c6:04:cd:e8:5c:16:32:2e:fd:b8:f5:
8f:db:91:08:e7:20:f2:ae:52:ee:92:05:7d:b0:93:f4:5f:f5:
4a:62:c3:87:1f:d4:80:76:c2:b8:a9:48:ee:32:40:99:ee:bb:
97:74:27:8f:9e:2d:49:67:07:c0:e4:3e:f6:90:33:8f:7b:50:
c9:f8:10:0a:25:b9:46:8f:3c:dd:8b:17:a2:ba:be:b0:e4:cf:
9a:c3:ee:fb:eb:9f:9a:05:c9:93:17:66:2b:81:2e:44:e8:2c:
6f:fd:aa:e8:4f:62:2a:b3:2d:61:ff:ae:3d:5c:a8:db:b2:c6:
6b:87:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 21:11:14 2026 by rpki-client