
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.mft (raw, json)
Hash identifier: uIyEWBpnG+bh0LRJDkSucJBKbch9ulAXrhT7sR5v4Go=
Subject key identifier: D9:CE:08:9E:23:45:88:F7:91:80:3E:8F:2E:F9:65:5C:0E:34:9D:42
Authority key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
Certificate issuer: /CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Certificate serial: 558AE08F99AEF3C161CB514410961DFEA870411A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 12:16:55 +0000
Manifest this update: Sun 25 Oct 2026 12:11:55 +0000
Manifest next update: Mon 26 Oct 2026 14:43:55 +0000
Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: JAIdekl6qx6Yav3DLzW5vQbW9XO1mtiJq5doPkJbVhQ=)
2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: 81IWbLsi74joj24luAk9XXdkDSmApQhMyYOQhkwPoaQ=)
3: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: a/D2rVaWkVN5pmkQwkGcUtFXfVxfJlNH614eeRJToo8=)
4: 7C6942D9E39D2E0708854282CB6A37230729EB7C.crl (hash: XhgwZTiGIc9uIZmOoJBqR8KzxsqgBtPnertwuaQlpOo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8a:e0:8f:99:ae:f3:c1:61:cb:51:44:10:96:1d:fe:a8:70:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C
Validity
Not Before: Oct 25 12:11:55 2026 GMT
Not After : Oct 26 14:43:55 2026 GMT
Subject: CN=D9CE089E234588F791803E8F2EF9655C0E349D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:96:d0:91:fa:1f:a4:46:e8:c7:46:25:ba:
c2:c7:25:1d:38:bc:45:6c:74:7b:2e:77:ca:4d:f9:
f8:55:a7:67:86:63:5e:e9:33:00:2b:fb:7d:34:6d:
f8:4e:9a:45:0f:e2:26:49:59:fe:ea:8c:61:d8:0d:
fd:ff:6d:5c:74:95:3b:32:9d:b8:3b:1a:6b:e8:c6:
aa:9f:52:2c:61:8a:96:fb:7e:94:6b:8d:60:69:82:
c4:f6:bd:53:2f:38:9f:b1:99:57:82:32:09:c9:10:
e1:bb:13:df:91:72:50:98:08:b8:a5:87:97:ca:9a:
a5:ea:14:58:d3:2d:f1:cf:04:f0:4f:aa:75:a1:d8:
df:75:24:16:0d:50:64:ac:d1:d4:57:e4:07:19:f2:
31:62:c6:c5:6e:7b:33:ca:7f:5c:c6:99:f2:02:cd:
44:a2:20:82:41:b9:2d:99:b7:53:f6:ec:62:31:8d:
4b:6c:1a:55:d2:8a:fb:9a:c0:a1:86:2a:fc:13:11:
95:6c:59:bf:5d:85:1a:a5:ce:70:84:60:46:44:9e:
b7:0d:bb:06:3b:da:77:ac:d8:a7:41:de:cd:bc:fa:
4e:9b:7d:46:54:99:de:38:e8:56:70:f1:cb:7b:c2:
8f:83:90:48:77:db:8d:6c:2d:00:78:67:31:21:0a:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CE:08:9E:23:45:88:F7:91:80:3E:8F:2E:F9:65:5C:0E:34:9D:42
X509v3 Authority Key Identifier:
keyid:7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ea:ce:32:82:e8:cc:0c:9e:27:73:ba:dd:9a:d6:e8:83:ed:
b1:d9:b4:b9:69:b6:08:de:38:9a:57:66:5d:d5:32:5a:aa:bc:
16:b3:76:4c:d3:30:3a:a0:6c:3f:6c:56:82:04:6a:95:f6:0b:
4e:17:55:35:a0:ca:cb:f0:5c:36:0f:0b:90:42:4a:ad:21:5a:
6e:0c:ca:c6:a6:b2:f4:7b:f8:7e:ab:a4:09:cf:a4:67:fb:6d:
d2:af:36:ac:2f:fa:5b:5b:a3:9c:0a:1c:9a:60:e4:f8:0b:12:
43:63:e0:fa:0f:15:b9:dc:b3:60:ec:37:0f:ca:de:b1:17:56:
70:17:52:b3:02:c5:00:05:0a:ac:96:b5:5f:d9:a7:78:97:63:
90:a2:c1:12:50:0f:f5:94:13:4d:91:24:71:47:7c:d2:ac:bf:
12:57:05:39:a0:94:b7:da:81:e3:27:eb:77:27:d6:e0:fe:b0:
e9:98:c1:a7:75:85:18:25:87:cc:7e:f6:74:d1:84:48:9a:a1:
57:13:ad:42:a8:a4:c7:f0:2e:1b:8a:04:43:4c:0c:20:3d:11:
3c:93:0c:c8:b2:9c:82:18:34:72:a4:93:ca:9e:7b:43:1a:c1:
fa:5e:fe:11:d7:0c:7d:a1:4e:40:0e:92:f9:49:cf:ac:6f:f3:
a9:2b:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:11:48 2026 by rpki-client