
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft
File: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft (raw, json)
Hash identifier: PTaqtW/aifoKv7JFk33cQ+eoDFcROHPkgQhE5L0DrJ0=
Subject key identifier: 78:CF:F5:A5:93:FF:84:76:39:17:9F:79:B5:D3:D9:1C:B8:66:FF:B5
Authority key identifier: F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A
Certificate issuer: /CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A
Certificate serial: 287A133D62743394F4243D854E7AE09875DB7BBF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 01:30:23 +0000
Manifest this update: Thu 17 Sep 2026 01:25:23 +0000
Manifest next update: Fri 18 Sep 2026 03:39:23 +0000
Files and hashes: 1: F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl (hash: KV3AF7WJmLEZO9xls54AmVgBOs0UtDa5uMFhX0hCUY8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl
rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7a:13:3d:62:74:33:94:f4:24:3d:85:4e:7a:e0:98:75:db:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A
Validity
Not Before: Sep 17 01:25:23 2026 GMT
Not After : Sep 18 03:39:23 2026 GMT
Subject: CN=78CFF5A593FF847639179F79B5D3D91CB866FFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:9c:d8:e8:f9:b4:5b:2a:36:b1:3a:9f:b8:
d3:75:ab:da:2e:2e:ea:09:f9:de:d0:91:d8:46:19:
56:e5:31:ac:f1:b4:92:a3:07:63:75:36:f8:c0:56:
28:fd:5e:28:fd:41:72:11:36:72:54:4d:00:ce:4a:
a1:4a:40:d8:65:a2:5f:08:b8:01:ac:d4:54:17:37:
de:20:12:72:e6:17:d9:df:2e:fc:e9:a8:72:67:17:
3b:17:fd:fe:3f:81:0e:22:fc:a5:4e:18:60:d6:9f:
81:82:9a:76:ad:33:5e:17:97:96:3d:c9:83:f4:f2:
09:16:a8:46:83:87:10:ae:f6:d7:f8:72:2c:eb:60:
c7:e2:c8:08:7c:cc:0f:f1:85:11:ff:5c:f7:24:06:
1a:ee:1c:f0:36:48:c9:84:5e:d3:28:df:15:9a:0a:
80:02:90:4e:7f:9c:17:27:42:68:fc:22:01:77:be:
e9:a6:4b:5b:97:c5:67:d3:a3:bd:77:b6:76:fb:3c:
ce:d6:cc:09:f7:76:5a:0c:95:02:90:de:3b:a7:2d:
d6:a7:a8:55:dd:db:f3:58:e4:15:d2:47:d9:ac:e9:
41:6b:54:d9:b4:39:d7:2d:4a:1f:1f:90:db:a3:cd:
84:d1:b0:25:14:2b:4c:ea:dd:8f:0e:89:e0:9e:94:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:F5:A5:93:FF:84:76:39:17:9F:79:B5:D3:D9:1C:B8:66:FF:B5
X509v3 Authority Key Identifier:
keyid:F7:B0:60:61:8D:48:85:A1:D7:BF:1D:A3:D2:9B:E4:64:F5:1D:CD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/F7B060618D4885A1D7BF1DA3D29BE464F51DCD0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9b:6d:d4:c7:ae:77:e9:81:27:e5:29:01:8b:54:ba:7b:90:
c5:b8:cc:1f:8b:85:93:40:39:88:d6:8f:b4:b9:e7:9e:e2:3c:
33:77:f1:74:f4:da:a5:33:7a:67:c5:92:e4:12:65:1a:2b:c2:
11:7f:35:c5:0f:cd:bc:27:79:46:22:13:99:75:e7:93:65:aa:
2e:57:96:ce:36:27:79:1d:1b:41:b2:e7:a0:b3:c6:95:3e:42:
43:c9:aa:d6:a5:f0:ea:c1:86:da:af:83:cf:54:06:ef:d6:04:
6e:27:d1:19:3d:f5:2e:c3:80:ab:0f:36:63:41:5b:87:ea:bf:
c8:f6:00:cb:40:b9:1e:39:94:85:82:6a:20:24:51:d0:ff:e6:
89:07:43:c1:32:2a:73:56:3c:76:24:37:8b:fe:7a:ce:00:dc:
32:37:8a:fa:e1:de:d1:e1:60:38:36:bc:39:35:82:33:8d:c4:
f0:76:56:75:d0:a7:f0:e2:19:93:69:ee:c3:94:5b:a0:78:5a:
b4:9a:da:15:27:fd:94:86:00:30:64:1b:63:52:c9:16:f6:5d:
5f:63:56:c3:38:b4:58:ac:6b:e0:75:b7:b0:a0:53:7b:57:61:
2d:72:cc:4a:69:44:a3:84:da:1a:a4:a4:a4:ad:9e:0a:25:23:
4b:8c:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:17:40 2026 by rpki-client