
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
File: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft (raw, json)
Hash identifier: uFr4tXY1VnFEW4XPA2OS6p5yABMK5L/2dPCAkgAqRnM=
Subject key identifier: 37:14:B4:E1:42:95:EE:56:0F:09:8F:80:87:DB:83:94:7B:1C:7A:BC
Authority key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
Certificate issuer: /CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Certificate serial: 6DD6372F6A2E5AA7D3F520ED8BA6D5BF83CCBABE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
Manifest number: EE
Signing time: Tue 27 Oct 2026 15:39:49 +0000
Manifest this update: Tue 27 Oct 2026 15:34:49 +0000
Manifest next update: Wed 28 Oct 2026 17:30:49 +0000
Files and hashes: 1: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl (hash: Rg2VgRP60MgVl8umkSDEEngc0SKuOuYhqpd3KJm5b5U=)
2: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: GymIgmPh7c7AFMEkOazrLmR+HafDOGSOnyaAyUzJOWU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 11:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d6:37:2f:6a:2e:5a:a7:d3:f5:20:ed:8b:a6:d5:bf:83:cc:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C
Validity
Not Before: Oct 27 15:34:49 2026 GMT
Not After : Oct 28 17:30:49 2026 GMT
Subject: CN=3714B4E14295EE560F098F8087DB83947B1C7ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:86:d1:a5:be:61:0a:27:31:7b:f1:44:24:
9b:4c:2c:03:6c:6f:e8:02:46:5f:85:61:06:b0:ff:
95:01:66:38:eb:7b:74:c1:0e:6d:ea:7d:50:d1:3d:
68:e0:1a:06:f6:9b:aa:cd:5f:e5:cd:cc:b5:68:bb:
2a:2a:4e:df:0f:6b:fe:d2:fa:17:63:d5:32:01:af:
da:cc:c6:5a:30:d3:1c:37:cf:04:20:4d:48:f8:90:
b4:79:ca:73:39:2b:25:69:8a:ec:4b:61:af:63:1e:
a6:a1:10:3a:6b:29:30:73:38:e7:ca:d8:d8:f4:07:
5d:74:f5:c4:a4:71:14:12:2b:79:52:ce:ae:94:76:
f4:02:eb:13:30:27:a4:a6:8f:95:d5:ab:cf:93:cd:
a8:d7:af:9b:18:2c:44:6c:16:50:aa:c0:ee:4e:ac:
b0:70:23:8f:14:1d:59:87:fb:f8:9c:4c:56:49:ec:
ba:33:ca:8d:ff:68:ca:52:3c:a2:77:f6:37:ec:97:
18:4d:d6:ad:68:84:ee:31:f8:22:72:3e:19:34:24:
c0:19:4d:e0:68:fc:2f:22:9b:c7:1b:72:a3:c1:b6:
72:fe:28:fc:da:5e:ea:8a:c2:a3:86:e9:bc:d1:41:
07:4f:54:9c:7f:79:3f:bf:5d:53:e5:c4:be:b1:6a:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:B4:E1:42:95:EE:56:0F:09:8F:80:87:DB:83:94:7B:1C:7A:BC
X509v3 Authority Key Identifier:
keyid:7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:ef:19:05:d0:82:ea:c5:3d:d7:35:ed:82:c3:53:a6:e9:
25:ca:6c:9f:48:56:99:f6:3a:ea:aa:f0:e5:52:74:cb:0f:e9:
9b:5c:91:29:71:75:ac:d4:2a:e8:22:45:88:65:80:4a:10:7c:
43:06:6f:13:62:60:30:ec:3a:b5:8c:ff:2c:78:5f:65:22:06:
b6:85:20:77:60:95:c8:73:66:ad:c5:56:d6:c3:8d:16:e9:7a:
1c:97:77:39:40:ad:ba:48:87:3f:2d:b4:15:76:e6:79:9e:3c:
9f:8e:9f:9b:fd:7e:d7:e6:f5:fc:9b:90:2c:8b:ea:5a:e9:df:
95:fc:75:1a:94:5a:c9:79:07:70:ec:37:b2:cd:d3:8a:84:7b:
e4:a9:9b:32:b5:c0:e0:eb:2b:63:43:cb:cb:87:54:d0:78:55:
98:6b:84:90:79:d8:4f:b0:19:c9:11:f8:55:e3:df:1b:af:cf:
3a:ef:ed:78:bc:17:08:d9:e6:c3:79:56:f0:62:0a:b6:b7:64:
88:63:3d:2c:e3:b2:1a:f9:96:f3:71:fb:df:2a:63:bb:86:24:
b8:fb:4a:10:b9:ce:42:f6:a0:e3:76:dc:e0:02:a3:21:80:0a:
ba:4e:13:7e:2f:10:b5:b2:c6:44:3e:05:2b:57:bd:41:45:f1:
6e:84:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:43:57 2026 by rpki-client