
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
File: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft (raw, json)
Hash identifier: LbnOOEZiAJrNVO+sCw4oPNzGFe42lHsZsASvALRc5es=
Subject key identifier: 01:E6:AF:AC:1B:A6:3C:1A:53:66:4B:1E:A2:97:19:E0:A7:F2:E1:87
Authority key identifier: 7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
Certificate issuer: /CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Certificate serial: 2D883F344092010FF058CC7CD666C50535773CBE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
Manifest number: B6
Signing time: Wed 16 Sep 2026 22:52:10 +0000
Manifest this update: Wed 16 Sep 2026 22:47:10 +0000
Manifest next update: Fri 18 Sep 2026 00:43:10 +0000
Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: WWLsIusOSv+8Jaml9M27MqcNs+gTxLH2Htlcij04EDM=)
2: 7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl (hash: +qyufOWFFOYulL7onKvJUaIjHuct8EIHp/z2EibL0c4=)
3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: KuY5wEri7u4war8JSwekkctUjVu/WQ12XivwVmrP91A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:88:3f:34:40:92:01:0f:f0:58:cc:7c:d6:66:c5:05:35:77:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2
Validity
Not Before: Sep 16 22:47:10 2026 GMT
Not After : Sep 18 00:43:10 2026 GMT
Subject: CN=01E6AFAC1BA63C1A53664B1EA29719E0A7F2E187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:90:56:57:82:48:b3:8d:b0:9c:ea:e8:a0:
d1:6f:6e:9a:24:2f:1c:c2:5d:64:75:3c:78:d5:36:
bf:08:54:3d:ba:98:ed:cb:e7:0d:e7:6c:35:c6:67:
ce:e9:80:05:d4:69:f3:a2:f7:f9:8a:46:23:b6:68:
ab:49:79:fc:96:6e:e9:36:cd:25:46:e3:3c:c7:89:
e7:4c:87:43:bd:aa:4a:6a:c1:a8:ad:97:c1:9c:ca:
d3:f0:fe:36:b7:17:5e:8a:52:61:fc:34:fc:98:98:
41:5d:ce:51:df:5d:5c:85:43:2b:18:04:2a:f6:c3:
61:32:70:57:e4:e6:97:5b:2a:ef:d8:cb:9b:ff:d7:
78:67:db:a2:6f:dc:12:dc:30:70:13:37:38:bc:b9:
63:fb:ac:e7:18:86:79:01:1b:73:56:f1:1d:72:9e:
ee:44:c6:3f:76:f7:72:e3:74:ec:09:e3:b4:4c:4b:
99:66:08:65:04:77:c8:7f:e9:7c:b9:81:87:f6:db:
de:af:35:94:9b:40:a8:d1:ce:3d:8d:67:55:eb:68:
85:5c:4d:1b:54:01:58:37:7f:cd:9b:8c:3a:b6:40:
cc:b8:75:4e:ff:b2:44:08:53:7b:bb:b0:89:bc:63:
0d:44:f7:cb:ce:ac:8e:2e:48:0f:5c:20:75:67:93:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:AF:AC:1B:A6:3C:1A:53:66:4B:1E:A2:97:19:E0:A7:F2:E1:87
X509v3 Authority Key Identifier:
keyid:7C:58:06:FF:2C:62:AF:2C:C9:65:E8:88:A4:5E:C4:BA:4F:BF:26:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/7C5806FF2C62AF2CC965E888A45EC4BA4FBF26C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:40:05:82:14:64:7e:18:8b:45:3e:88:b1:56:a6:a4:cb:5a:
c0:ba:8f:14:c4:93:60:b3:e3:b5:92:ef:10:67:61:ab:8d:05:
60:bc:89:fc:7b:d7:e0:03:68:15:15:9b:fc:61:12:8b:2e:55:
51:30:42:bb:17:10:2a:af:db:44:8c:48:96:7e:3d:f8:95:83:
74:a4:30:88:af:30:91:38:c5:7a:ae:aa:7c:10:2e:61:19:1d:
28:90:63:13:37:40:07:80:dd:55:29:24:9d:d0:b5:0f:f0:5b:
1f:84:73:d3:f5:46:56:02:e4:8f:71:79:03:94:29:d0:43:57:
ee:2c:b3:be:fc:9a:c6:66:fd:92:b1:2d:62:47:4e:8f:19:ec:
a0:59:41:fc:f4:b5:9d:55:3b:05:90:eb:32:cc:a4:56:07:e9:
80:91:aa:d9:c3:56:f4:aa:01:d8:57:75:61:3c:36:82:20:0a:
92:a3:41:aa:7c:ef:07:ed:46:6f:06:fb:cf:05:b5:cd:04:7f:
5b:bc:86:ea:0d:95:a6:71:28:dd:58:48:67:43:0b:ac:6c:60:
f6:51:a4:b2:a2:7f:02:e6:06:1f:01:cd:c1:c8:1b:70:55:cb:
6b:d7:d9:72:4c:40:32:cb:c6:14:58:a6:34:3e:75:f0:c7:60:
45:03:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:19:43 2026 by rpki-client