
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
File: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft (raw, json)
Hash identifier: HiEr8K72DvL60tTkBcQONnxQV6kZssblK1ABUxxothM=
Subject key identifier: 8F:27:88:CC:07:81:B7:15:97:76:36:84:C3:98:4B:A5:9B:84:0B:9D
Authority key identifier: EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3
Certificate issuer: /CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3
Certificate serial: 7ED23321E86D34409963F2381FD1C4DDBE3D56EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 07:21:35 +0000
Manifest this update: Sun 02 Aug 2026 07:16:35 +0000
Manifest next update: Mon 03 Aug 2026 08:56:35 +0000
Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: eXa5aSDdrCtqvVMG17UDbY8fW0WBNN3GZ2WD5zRuz9o=)
2: ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl (hash: b8Q+GrCobR0n0+qFsH39OxtGfoThEEr21xoWgLiJBB0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl
rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d2:33:21:e8:6d:34:40:99:63:f2:38:1f:d1:c4:dd:be:3d:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECC7A02E2A154757E3DB5DE72B90DA466F430EE3
Validity
Not Before: Aug 2 07:16:35 2026 GMT
Not After : Aug 3 08:56:35 2026 GMT
Subject: CN=8F2788CC0781B71597763684C3984BA59B840B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b8:93:aa:a8:00:8d:e2:66:81:a0:c5:04:
d3:54:94:d7:a8:24:23:50:4b:39:9e:0b:1d:14:0e:
fd:40:97:b5:bc:ac:0a:d7:11:34:eb:fc:c0:ba:c0:
f2:95:ed:ad:fa:c4:ab:9c:49:f1:9f:8b:e0:34:f7:
d8:f9:a2:d4:e5:5a:41:ff:b7:56:60:a7:c9:a3:e7:
41:9b:64:fb:df:fd:5c:02:5a:62:e6:5a:0c:4c:70:
00:eb:ec:15:ee:b3:69:c1:d8:95:f1:f6:fa:6d:26:
4f:89:25:42:af:20:85:d1:e9:03:8f:7d:e6:ca:cc:
df:20:8d:37:db:10:da:f1:39:73:e8:69:e5:f1:1b:
d3:03:5b:3f:79:6e:8f:85:57:54:d2:cb:91:ba:cc:
34:e1:cc:53:0f:6e:24:e2:2b:7a:99:46:93:c4:7c:
e6:7e:74:55:14:07:42:27:a9:26:68:bd:12:7a:f3:
c1:2d:4f:31:82:90:ff:54:45:b8:7c:c5:16:c1:8e:
09:bc:d6:97:0a:2d:01:8d:8c:b1:4a:f2:0f:dd:89:
3f:7c:a3:43:c1:bf:11:e5:de:b3:0e:3d:4b:f1:41:
2a:9f:3f:fb:03:13:66:42:bd:f6:60:54:77:a4:b3:
10:45:7c:ae:58:60:7c:21:1a:74:e8:22:ac:99:49:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:27:88:CC:07:81:B7:15:97:76:36:84:C3:98:4B:A5:9B:84:0B:9D
X509v3 Authority Key Identifier:
keyid:EC:C7:A0:2E:2A:15:47:57:E3:DB:5D:E7:2B:90:DA:46:6F:43:0E:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/ECC7A02E2A154757E3DB5DE72B90DA466F430EE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d5:ae:ed:97:24:3d:9c:e4:bb:13:f5:a5:aa:82:db:46:8c:
4e:ef:2b:6f:7f:06:53:f3:e0:8b:81:8f:92:b0:f2:0c:3b:2f:
53:bb:97:2b:1c:4b:41:fe:35:9e:3b:d1:07:6a:5a:ae:3c:53:
39:59:82:bb:ae:c5:a6:ab:ca:3c:4d:00:f1:78:87:dd:fd:b6:
6f:d4:e0:e7:94:81:74:c4:23:8b:d7:8e:fd:51:c3:c1:b7:ae:
da:66:84:97:b0:a5:0d:98:7f:bd:cb:db:f7:05:8c:4e:bc:4e:
7b:80:62:f7:f1:1d:21:42:4d:98:01:22:a2:2e:09:03:d6:93:
30:28:ce:db:d4:30:85:db:07:c9:b9:e6:a7:37:98:d9:15:64:
9d:41:40:20:c6:1e:17:1b:26:07:c0:3e:f4:66:63:e6:12:4f:
cc:a5:99:6f:cc:97:18:18:c5:dc:7e:f1:6a:d6:2e:97:17:f8:
3a:13:9c:81:6b:eb:a5:c7:37:ec:b9:d6:d1:15:3c:5d:4e:c4:
91:10:4d:a9:14:f9:8a:00:df:b5:03:12:30:a1:7b:ec:2e:45:
48:57:fb:63:08:8d:f5:17:18:26:db:35:15:76:22:90:bb:7d:
7e:65:13:25:50:aa:5c:8e:e7:84:fe:3f:8d:46:29:a5:c3:ee:
9f:67:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:37 2026 by rpki-client