
$ rpki-client -vvf rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft
File: 7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft (raw, json)
Hash identifier: QwQhfA8dePT7NOD7c1PIlTX2MCj5uiwxgU3bsv7+EYY=
Subject key identifier: C3:EC:93:FB:A0:9F:F9:17:45:40:CB:E0:C0:16:05:6F:BB:E9:AC:AB
Authority key identifier: 7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5
Certificate issuer: /CN=7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5
Certificate serial: 5260E90B7C7569D9BB0A20D40514D34DCDE83CE5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 14:23:11 +0000
Manifest this update: Fri 19 Jun 2026 14:18:11 +0000
Manifest next update: Sat 20 Jun 2026 17:29:11 +0000
Files and hashes: 1: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: ky+UMUsKKh5CljFqbxV8ILCXCq+IaYJ8oIhei4/iu5o=)
2: 7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl (hash: jc3SFkWteoX3DW2ZeqoGyHPKNgnXMcoBWsx/28Iss4o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl
rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:60:e9:0b:7c:75:69:d9:bb:0a:20:d4:05:14:d3:4d:cd:e8:3c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5
Validity
Not Before: Jun 19 14:18:11 2026 GMT
Not After : Jun 20 17:29:11 2026 GMT
Subject: CN=C3EC93FBA09FF9174540CBE0C016056FBBE9ACAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:7d:c6:57:94:5e:3d:30:49:c0:ff:bc:a3:
57:69:ad:63:17:22:6f:b5:42:d1:9c:09:8a:82:e3:
97:e9:17:f9:31:c0:ee:f1:9e:08:90:85:50:3d:27:
b1:07:19:ae:fa:85:30:92:0d:b9:98:cf:d7:cd:56:
39:e1:65:c3:12:e2:e7:e5:0c:60:ef:11:91:89:d7:
ee:80:80:b7:a7:ed:73:bb:6f:8f:e4:b0:ac:35:02:
e3:9c:73:45:59:1e:23:02:d7:93:4b:40:70:ad:17:
68:10:93:76:94:6b:81:ee:3c:f8:91:e1:70:9a:62:
dd:8a:aa:2c:c6:47:ac:c8:13:99:fe:55:4a:a2:2e:
4a:b1:b3:32:21:11:57:0d:10:6c:38:24:3b:67:4c:
a3:e6:5a:21:e9:58:15:05:af:50:11:88:fe:44:17:
e5:9b:ab:39:d4:06:6c:26:8e:3c:f2:3e:e7:5b:de:
c9:6e:8a:53:11:9d:86:01:90:a9:b0:1a:f7:e9:c0:
a1:9b:0a:52:54:a1:46:16:3c:12:e2:25:a3:f2:57:
1e:cb:57:f9:14:ff:b3:bd:db:40:b1:93:f0:10:34:
48:63:47:74:4c:a6:c6:0e:0d:ce:a5:a0:7b:c3:35:
15:60:e6:7c:f7:f1:ba:fa:6d:80:a5:d2:2e:80:91:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:93:FB:A0:9F:F9:17:45:40:CB:E0:C0:16:05:6F:BB:E9:AC:AB
X509v3 Authority Key Identifier:
keyid:7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c8:52:e1:46:18:d0:18:96:52:6c:86:c4:bd:b5:12:cb:a8:
1d:75:94:2f:0e:a2:24:71:95:b6:34:5d:1a:f6:30:11:3f:3e:
d4:0e:56:1e:53:a9:6e:95:54:81:7a:80:6e:6f:1b:30:6a:3a:
af:ad:0f:f9:1e:47:4f:7c:16:d8:6e:47:73:b6:f4:a6:d7:f9:
67:56:ef:aa:c7:11:0e:8e:4c:68:e3:68:e8:86:05:b2:0b:d4:
8a:99:58:82:29:1a:a3:8b:7d:91:f5:e3:18:23:f4:47:3c:e1:
25:2f:3f:4f:0b:a3:35:86:ea:2c:4f:89:23:1c:fa:d0:03:38:
ed:54:b9:fe:4c:c7:01:36:9c:47:87:d6:75:dc:79:d7:b7:92:
23:7e:7a:ac:1d:f8:1e:c0:d9:bb:49:32:8a:30:75:82:28:fc:
3f:2e:59:2b:cc:8c:2f:04:c3:43:ab:e7:7c:8b:23:a7:91:6d:
ac:a8:1d:4f:2f:09:80:6d:2c:21:ef:ed:6a:42:53:cd:6c:b8:
13:9a:e1:1e:40:6a:cc:86:d1:16:26:e9:49:5b:72:f3:fe:ea:
0a:2a:e1:50:89:5f:1c:27:77:e8:c6:5c:30:df:74:c9:ff:02:
9a:2d:95:cd:22:f0:c3:ca:9a:dc:23:58:95:c2:bf:6d:9d:c5:
82:8a:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:24 2026 by rpki-client