
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft
File: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft (raw, json)
Hash identifier: 3tsM74KXUJM0nsU7kEiA1Lbx/I1+sYgvVp/j/ZmWzo4=
Subject key identifier: 71:90:8A:01:A5:58:C0:E7:0F:2A:BD:A6:82:2B:B1:9B:88:3F:78:7F
Authority key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01
Certificate issuer: /CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01
Certificate serial: 225EEDE6B8D0C14E4A20E24479133AE88382615F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft
Manifest number: ED
Signing time: Sun 25 Oct 2026 18:50:24 +0000
Manifest this update: Sun 25 Oct 2026 18:45:24 +0000
Manifest next update: Mon 26 Oct 2026 21:16:24 +0000
Files and hashes: 1: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl (hash: 3YSIq4YthyT6FMjUOTyESgrYxC7Vyy43/nM7Q0sGKEI=)
2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: iNJDLui3MvH+G4nBQHtpKPOOwaP9++CI/XGWFFMM0oA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl
rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5e:ed:e6:b8:d0:c1:4e:4a:20:e2:44:79:13:3a:e8:83:82:61:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01
Validity
Not Before: Oct 25 18:45:24 2026 GMT
Not After : Oct 26 21:16:24 2026 GMT
Subject: CN=71908A01A558C0E70F2ABDA6822BB19B883F787F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:fd:de:b6:ec:e1:4b:f5:fd:86:79:88:3d:
fc:49:b6:ee:fd:08:0e:4f:c0:ac:a8:01:dc:ee:f5:
97:9d:34:a0:9c:ea:42:b9:8d:3b:12:f8:b0:ed:fc:
70:ca:15:f3:82:5a:d7:ba:5a:61:74:67:e7:2f:70:
78:9f:9d:04:d1:5a:86:d7:96:87:9d:03:94:ff:49:
2d:9e:09:f2:b1:c0:36:44:c6:c9:85:63:a4:83:c7:
5e:ac:96:10:33:e5:2f:27:3b:3d:a2:72:81:f0:d6:
cb:cd:21:0c:c7:ac:8b:0d:aa:1b:14:de:db:df:6c:
69:82:ea:8c:13:12:20:21:48:05:46:e5:dc:5b:d6:
94:eb:6d:06:8f:34:57:c6:e9:63:14:43:7a:26:39:
21:ab:4e:f0:df:bb:e2:26:b6:c6:5b:3b:24:96:a7:
ea:54:43:48:11:3d:bb:71:23:24:4d:f5:0f:dc:57:
5e:43:14:7d:bc:a2:18:be:72:5a:81:83:ed:92:cb:
1d:2e:44:f9:d5:6a:e8:15:38:ef:0f:a3:e9:67:12:
52:ec:4f:70:a4:c9:28:9b:44:c8:4e:01:cf:73:33:
71:0a:6a:73:60:b5:d4:a3:c7:07:5f:a2:e0:aa:69:
e2:c6:9f:87:48:4b:aa:c2:07:b2:e3:d4:56:14:75:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:8A:01:A5:58:C0:E7:0F:2A:BD:A6:82:2B:B1:9B:88:3F:78:7F
X509v3 Authority Key Identifier:
keyid:7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:05:eb:85:34:49:fd:5a:0a:ea:44:a2:08:d7:3c:d9:5c:d1:
3e:8e:8e:13:d6:a4:2d:e3:57:3f:bf:0a:e5:57:53:f4:47:36:
23:a9:64:0a:dd:33:72:05:77:b1:d5:b9:51:25:c4:29:76:e7:
27:ce:71:e4:60:fd:08:86:94:12:28:07:b9:d4:64:43:8f:2f:
19:e1:06:09:27:be:53:ee:28:14:4d:be:82:f8:60:64:3b:bf:
3d:6f:65:20:86:cb:04:e1:d8:99:08:e2:7f:74:85:f6:d7:13:
f4:94:a2:9a:ba:02:c1:ab:b7:e2:7a:a8:99:38:ff:67:e2:d2:
1a:ac:a9:89:f4:59:b7:37:78:c2:7b:56:8e:70:27:25:41:07:
79:46:cb:0b:48:8f:9f:56:3a:01:74:30:54:3f:18:1e:f4:ba:
56:31:f1:b9:d4:83:3e:46:04:58:8b:8b:e0:b3:cb:6e:8d:0f:
ef:28:c0:11:67:09:1e:19:28:d5:75:14:43:ad:d6:cc:9c:fd:
50:9f:47:0f:5c:39:b0:a4:89:6c:6e:ad:0b:e9:7b:9c:42:83:
18:87:71:94:4c:98:ff:f9:b6:52:d3:56:97:71:d7:ec:69:a6:
fc:0a:a5:2b:e6:cf:45:69:5d:b7:e3:48:c9:b1:ef:1c:9e:bd:
1f:94:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:57 2026 by rpki-client