
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft
File: 7844F23C52D754615D0DCCF2190967C1B89CF85F.mft (raw, json)
Hash identifier: U6/J+ypLrPt5O2xNZSR6UPnBe89mcf+fZUZ7tpeLbNg=
Subject key identifier: EC:4B:B0:4A:C5:CF:CC:A7:88:ED:16:42:F2:07:E7:4A:BB:D6:1B:EA
Authority key identifier: 78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F
Certificate issuer: /CN=7844F23C52D754615D0DCCF2190967C1B89CF85F
Certificate serial: 679763A99AB2B50733ABF5339A5408439F19E711
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft
Manifest number: 60
Signing time: Sun 12 Jul 2026 16:45:12 +0000
Manifest this update: Sun 12 Jul 2026 16:40:12 +0000
Manifest next update: Mon 13 Jul 2026 18:06:12 +0000
Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: MkT+sF+nybNeeysnued54G0xsj6WfMLE7g6ep+2x6vw=)
2: 7844F23C52D754615D0DCCF2190967C1B89CF85F.crl (hash: kGarwsNlh5MpCX22N8YEmIV2+PgirCB0UR/Y0+lizjY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl
rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 18:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:97:63:a9:9a:b2:b5:07:33:ab:f5:33:9a:54:08:43:9f:19:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7844F23C52D754615D0DCCF2190967C1B89CF85F
Validity
Not Before: Jul 12 16:40:12 2026 GMT
Not After : Jul 13 18:06:12 2026 GMT
Subject: CN=EC4BB04AC5CFCCA788ED1642F207E74ABBD61BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:42:81:76:be:13:21:2a:34:d5:b1:a1:ba:
af:82:e1:90:85:94:32:50:6e:8e:f8:4f:bd:76:89:
f5:d2:16:1c:2e:54:00:53:ac:c8:0b:ab:f3:a3:aa:
10:4c:b3:2f:31:e8:7a:6a:ca:42:09:06:cf:50:0e:
83:4a:52:4c:48:cd:76:40:7c:86:43:4a:8d:1f:12:
16:25:ec:7c:b0:f0:6a:23:7a:2e:b7:01:73:8c:a2:
86:3b:23:3d:b1:45:6d:85:b4:70:0d:74:dd:e1:e4:
0e:2b:39:bf:46:8f:5d:05:a8:25:e6:be:69:d7:69:
1b:bc:29:c2:eb:a4:da:1b:8f:7f:40:06:f6:9f:29:
1d:10:83:67:ac:2f:00:04:b2:e3:a5:c2:fd:0a:44:
5a:84:7e:d6:e8:b3:26:5b:35:17:ac:22:77:1e:b0:
6f:43:3b:39:90:49:ef:f6:5e:6f:01:d1:77:ad:0f:
82:e8:25:ba:e1:25:44:f1:96:08:cf:ff:ff:4d:99:
43:44:63:96:a7:4e:1d:b9:29:0f:56:86:1d:67:88:
e2:af:cc:1f:d5:ab:4b:4c:36:b5:72:5f:fb:97:fa:
01:ce:7d:e1:7d:c8:b5:61:63:76:ae:53:b5:15:94:
c9:11:7d:a2:ef:e2:3e:6e:30:d8:71:01:3f:e5:13:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:B0:4A:C5:CF:CC:A7:88:ED:16:42:F2:07:E7:4A:BB:D6:1B:EA
X509v3 Authority Key Identifier:
keyid:78:44:F2:3C:52:D7:54:61:5D:0D:CC:F2:19:09:67:C1:B8:9C:F8:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7844F23C52D754615D0DCCF2190967C1B89CF85F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/7844F23C52D754615D0DCCF2190967C1B89CF85F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b4:58:92:de:1d:76:72:3d:30:7b:bc:06:c4:ff:f3:ee:9c:
8d:e0:fd:1a:19:8f:d0:04:6d:ef:00:a1:af:0f:24:83:f8:6c:
4a:e2:ac:96:98:2f:a8:2b:bf:50:c9:e3:a3:1a:4d:dc:43:f6:
c4:40:9e:e5:77:0c:33:4d:fc:28:39:a6:0f:78:e0:66:dd:ce:
2a:db:63:05:be:54:79:16:56:64:7f:3e:33:1a:f9:21:d9:0d:
55:2a:b4:9e:96:42:ee:6d:e4:a4:ca:60:5b:b0:73:5a:49:a8:
79:f9:e0:68:19:e1:7e:02:78:85:8f:93:84:87:c2:de:9e:7a:
5c:85:75:03:62:b5:5b:42:5d:97:29:4d:0b:19:dc:23:ad:79:
ec:62:c5:3d:60:87:15:2b:59:82:c6:77:e9:a3:3a:60:6f:5d:
69:3d:9c:f0:3f:2d:a3:66:3d:7c:fe:18:cc:e9:9f:22:08:bb:
f2:b0:d2:2a:7f:59:97:c0:63:1d:07:8a:ea:62:a0:65:87:b2:
16:db:7a:2a:a8:ce:8d:6b:56:48:17:14:5f:78:32:1a:32:c1:
be:3e:b5:40:a2:df:6d:33:53:39:3e:7d:16:89:5a:b2:fb:30:
ef:49:b5:7e:a7:5a:17:87:d9:6b:04:6c:52:8d:df:f0:21:da:
d5:08:68:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:14 2026 by rpki-client