
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
File: 7A276C25D89ED838797A7CF49DB2E3D67648B379.mft (raw, json)
Hash identifier: l/LsnD+8SDeb7l4VzJZAJazyawAMqLfwge2g2BMZAog=
Subject key identifier: 27:63:40:9A:CA:8A:EF:A0:C9:76:07:25:6A:7C:BC:C8:3C:71:86:D0
Authority key identifier: 7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
Certificate issuer: /CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Certificate serial: 4684D41A6F47F584FE291DEB1C04853A01189C0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 02:52:03 +0000
Manifest this update: Thu 17 Sep 2026 02:47:03 +0000
Manifest next update: Fri 18 Sep 2026 03:03:03 +0000
Files and hashes: 1: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: JuA2uBSmsLijQSphyrUgKMuE0E0xw1DLO7TmsEYyzKs=)
2: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: iWcahQGRrsnCIAhYQ8rHjq7ZMGsSFJ+cbAcqLYsj9no=)
3: 7A276C25D89ED838797A7CF49DB2E3D67648B379.crl (hash: +/zMO9fc7G/iUXaufBUP+8rUQgYkvuFA2QoSK2PtaJ4=)
4: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: wDzwvh0/RUfwdplNcUVZOVvbgp+6g5HZt6NGYXuuI5Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:d4:1a:6f:47:f5:84:fe:29:1d:eb:1c:04:85:3a:01:18:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A276C25D89ED838797A7CF49DB2E3D67648B379
Validity
Not Before: Sep 17 02:47:03 2026 GMT
Not After : Sep 18 03:03:03 2026 GMT
Subject: CN=2763409ACA8AEFA0C97607256A7CBCC83C7186D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:61:c1:57:5b:0a:d6:39:54:1a:0f:25:90:
71:66:56:93:25:cb:28:a7:71:77:e4:6b:e0:b9:71:
97:98:8f:d8:07:7c:56:8c:10:5f:6d:40:f5:f3:07:
d4:90:ac:0e:31:db:5d:65:51:cc:c9:42:69:7a:25:
56:78:ff:1c:7c:c1:09:78:e8:d0:4b:af:f4:84:01:
ee:e3:59:80:96:38:02:8a:e2:33:ff:aa:27:b2:9f:
31:a6:b1:b4:22:dd:45:b5:dc:d4:e8:2c:29:ce:be:
68:64:e5:d4:16:28:cd:e4:f3:77:39:db:37:dd:e5:
09:1f:31:8f:19:a5:f3:a4:9a:0c:7f:55:f6:48:dd:
60:21:35:87:9e:0f:93:d7:53:33:57:8c:54:f7:cf:
7d:3e:64:0f:37:50:91:d8:e6:e9:f0:e2:9b:59:a3:
be:a3:7c:c0:85:16:ce:6d:95:e0:58:00:a8:0c:2f:
ad:7d:ba:ec:8a:0b:e1:4a:9f:db:99:88:22:df:6d:
01:22:2e:1c:65:02:23:c7:17:b4:8d:bf:84:6c:d1:
37:82:ab:3d:7b:aa:ac:54:90:38:55:4b:9a:10:6a:
3b:aa:bc:4d:df:19:29:c9:dc:a6:dd:c7:fa:9d:5d:
f7:0d:2e:75:32:6e:6a:e8:ef:e6:e8:04:66:3d:f2:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:40:9A:CA:8A:EF:A0:C9:76:07:25:6A:7C:BC:C8:3C:71:86:D0
X509v3 Authority Key Identifier:
keyid:7A:27:6C:25:D8:9E:D8:38:79:7A:7C:F4:9D:B2:E3:D6:76:48:B3:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A276C25D89ED838797A7CF49DB2E3D67648B379.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/7A276C25D89ED838797A7CF49DB2E3D67648B379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:ba:0a:e9:1d:67:f8:6b:59:11:69:e5:ab:ee:61:7c:3c:
ad:1f:84:bb:e7:49:78:96:3d:88:a2:94:8d:73:60:1a:7d:8e:
d2:ef:30:14:98:f7:50:2d:e1:ca:84:0c:b3:bf:97:85:07:03:
9d:84:e9:9c:3a:2e:39:fc:90:57:de:47:35:d0:cd:c9:cd:29:
16:89:24:2a:f1:dc:20:c9:7e:52:7e:a0:e3:af:8b:29:f3:ad:
51:da:67:94:d7:f7:a5:df:a7:21:d1:96:8b:a4:4b:07:4f:33:
f3:81:d6:b4:e4:b9:9a:af:0e:a3:96:a8:91:ca:ee:0c:ae:eb:
16:af:86:b9:ef:bb:b2:08:e4:34:f6:2b:58:5c:f1:f0:5e:6e:
65:3c:80:f5:56:35:6c:ca:80:d8:ba:d3:e1:df:1f:d5:af:d0:
c2:5e:d9:47:1e:d9:d1:59:dc:7d:ee:ad:a7:e8:95:99:21:32:
5d:8d:54:06:cc:78:e5:7e:ba:23:82:35:4c:2f:57:68:91:f2:
a6:42:f0:e4:6a:79:c6:18:19:ce:8c:c5:69:e1:59:80:94:80:
95:b3:7e:f8:01:16:87:00:a0:4a:02:4e:04:e8:5f:b7:c4:5d:
0f:d8:d8:09:96:4b:49:33:2d:21:5d:cb:cf:72:df:80:b5:31:
61:12:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:20 2026 by rpki-client