
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
File: 7BEEB290E9254E766A7D8C3B216F0785206617EF.mft (raw, json)
Hash identifier: oLo6Tu7oSOfZmZtAMdAOE1/1Hwq0aLbbHa/vX4GLA7g=
Subject key identifier: A0:E1:F9:F4:85:08:3E:2F:28:D6:E1:6B:E7:1F:49:B0:6F:EA:11:A7
Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Certificate serial: 55D79DE57641239AB72EFA0F928637E66FF0375C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 05:18:49 +0000
Manifest this update: Sun 02 Aug 2026 05:13:49 +0000
Manifest next update: Mon 03 Aug 2026 07:49:49 +0000
Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: 3tpzoG5Hhn3R6GUMX6zsEklRDaeeeAfN54reFvu6a6c=)
2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k=)
3: 7BEEB290E9254E766A7D8C3B216F0785206617EF.crl (hash: 9De0+ujxCNnyvLB55sPMu/3Qj0146iCovDP0ybPd2AQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d7:9d:e5:76:41:23:9a:b7:2e:fa:0f:92:86:37:e6:6f:f0:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF
Validity
Not Before: Aug 2 05:13:49 2026 GMT
Not After : Aug 3 07:49:49 2026 GMT
Subject: CN=A0E1F9F485083E2F28D6E16BE71F49B06FEA11A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:8f:27:4b:8f:49:de:36:20:80:ea:b1:da:
91:66:c6:1a:0c:2e:0c:a4:a8:a0:0f:0c:b6:6b:ce:
e7:b6:61:1d:01:d6:6e:5f:ac:5d:70:00:2e:f0:db:
22:43:47:72:85:05:a9:a7:1d:9d:c4:f7:68:3d:b4:
37:4e:53:72:b2:90:60:24:53:d4:d5:bf:09:d9:82:
b4:a9:e5:9f:b8:86:b1:2e:28:3a:26:b4:95:0a:c5:
56:17:79:f1:94:9b:88:ab:f2:61:e5:ac:ba:c3:37:
3d:5e:7b:83:e6:b5:a5:fd:df:6f:ab:41:4e:e2:a3:
1b:cc:14:52:f1:e0:b2:c4:47:7b:37:18:13:da:2a:
fe:f4:50:ff:de:d2:c8:c9:7e:6c:b6:77:2a:1e:ba:
3b:cc:58:58:75:d9:00:93:d8:58:e0:41:42:9a:c7:
11:7d:64:06:1f:1d:1d:6c:0e:9e:6d:6e:c3:22:79:
f2:cd:46:30:93:d1:5e:ff:25:d9:b3:0c:1b:f9:8d:
1e:c4:2a:d3:d9:39:ba:9e:6d:31:6c:ed:db:30:d1:
35:0f:bb:cd:1e:db:bf:4b:81:5c:ba:d4:be:d7:41:
90:41:e7:50:02:b7:0f:28:69:40:16:fe:58:43:69:
73:cf:75:98:2a:9b:64:eb:ec:37:2a:a2:b7:3a:aa:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E1:F9:F4:85:08:3E:2F:28:D6:E1:6B:E7:1F:49:B0:6F:EA:11:A7
X509v3 Authority Key Identifier:
keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:64:88:74:bb:b9:0a:38:81:73:6d:23:2f:66:ca:d9:a5:fe:
fb:a9:22:e0:68:b7:f2:d0:eb:9a:d7:60:b8:cb:3c:8f:0f:07:
7c:b9:00:f2:57:2c:c4:87:28:16:14:33:8d:2a:2e:67:5b:3a:
e9:f8:fb:82:97:d6:9b:cc:f3:ce:ce:c1:b3:f6:c8:fc:8a:43:
01:c6:db:fc:e3:78:d5:d9:59:b5:15:6c:82:d9:04:7e:a1:db:
93:9b:64:ba:3e:91:be:81:3d:5a:85:e1:a4:73:a5:1b:5a:83:
25:22:bf:44:db:23:34:bc:f4:42:27:06:ac:58:8d:03:12:05:
d5:21:cb:89:fe:fb:40:e4:40:48:a1:c2:55:1c:f0:0b:8b:21:
ef:46:39:63:bc:66:a3:ec:72:73:72:4b:5e:a6:78:6f:df:b2:
e1:bc:dd:26:90:fc:c6:d3:7c:f7:e7:75:44:2d:6f:5f:67:ce:
d7:65:a6:9f:44:f0:a3:6e:7d:d2:e3:1b:c1:5c:bd:5d:34:94:
69:ec:4e:70:eb:b3:91:c0:28:40:9e:fa:68:09:05:76:35:85:
61:d3:0f:df:fb:4f:6d:39:47:c2:50:e7:a5:1f:bf:e5:ae:34:
1a:25:24:e5:09:8d:77:27:78:20:17:47:44:1f:a9:86:23:f5:
68:b3:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:37 2026 by rpki-client