
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json)
Hash identifier: b/m4Qo0BjS+R/oYUbeSg55MT1y+Iq0C/x+Y/bD6LOYg=
Subject key identifier: 95:B6:99:E2:54:6C:B6:E8:1E:FF:AE:B9:F7:41:27:88:1D:85:B4:D6
Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Certificate serial: 432A39EAE2D7187F63B61A0BF5E612676AF9322F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 10:15:04 +0000
Manifest this update: Sun 02 Aug 2026 10:10:04 +0000
Manifest next update: Mon 03 Aug 2026 10:50:04 +0000
Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: 4He45cKxcXfcjw1U2KrXo1DtbjvtPUBltWMMRfppNAs=)
2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2a:39:ea:e2:d7:18:7f:63:b6:1a:0b:f5:e6:12:67:6a:f9:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Validity
Not Before: Aug 2 10:10:04 2026 GMT
Not After : Aug 3 10:50:04 2026 GMT
Subject: CN=95B699E2546CB6E81EFFAEB9F74127881D85B4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:54:bc:2b:74:7e:d7:ae:51:0e:a4:f9:8e:
ab:39:6d:15:d7:97:35:a9:ca:9e:cf:62:ac:85:93:
f4:66:cf:ba:b6:78:a9:01:39:a5:b0:0c:4a:b1:d9:
74:28:fb:59:3f:11:8c:e1:37:13:95:c7:91:39:8c:
d6:be:a7:6f:dd:d7:38:bc:59:0a:b5:27:87:2f:fd:
78:73:ea:50:fa:71:56:96:9d:0d:82:b6:98:75:c2:
1a:a8:cb:42:e3:fe:0a:c1:85:a8:88:d7:7c:84:d1:
8c:dd:e7:20:df:ce:66:84:85:20:30:5a:98:1f:4d:
98:58:67:52:76:9f:80:2d:20:28:a5:36:ff:12:86:
72:56:c2:ff:c7:37:49:c8:ba:9b:8e:a0:73:4d:0b:
e1:f0:56:07:91:fe:e1:da:90:2f:18:11:bf:ad:8d:
ad:ed:d6:a9:77:9f:55:98:22:fc:15:7c:59:74:67:
c8:a7:34:ff:5c:c0:0d:7f:f9:60:37:a1:dc:97:e4:
c8:af:d0:0f:33:19:b0:2d:33:3d:d8:ab:d3:43:b5:
61:3e:c2:3c:56:89:7e:80:55:9c:6f:44:16:f2:1b:
6a:e5:fc:7f:e7:29:35:67:a0:b1:40:9f:dd:b3:b4:
81:2e:ab:8f:83:95:de:6b:7d:5e:2b:14:db:c8:66:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:99:E2:54:6C:B6:E8:1E:FF:AE:B9:F7:41:27:88:1D:85:B4:D6
X509v3 Authority Key Identifier:
keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e3:a7:41:64:8e:cb:39:9c:a7:0f:0a:37:26:54:be:a7:d2:
28:ed:b2:6f:1e:56:b3:cd:6f:18:5a:92:e8:33:5d:41:ee:c0:
b6:8f:9a:cf:9d:b5:ce:b6:5a:fb:20:83:1e:48:23:68:34:27:
d1:8c:6f:c6:3d:66:b9:17:f2:60:5e:82:b2:99:b8:8a:35:0f:
13:58:51:72:f6:0f:cd:cb:0c:4f:ef:5a:02:7d:67:72:1a:45:
4d:52:a9:00:57:5c:6e:f8:29:ca:72:62:23:d4:e1:a5:5a:7d:
d0:7f:68:60:92:64:c5:e0:90:86:1d:54:c0:d7:b9:11:a6:da:
8e:0a:55:21:7c:2a:8e:a0:d8:c4:19:76:c9:78:41:18:a7:06:
fc:4b:34:11:07:20:c2:b5:92:45:c5:63:a5:37:78:ad:16:ea:
ea:44:5d:f3:05:49:49:e8:0b:17:9f:64:e1:ae:1e:3b:b6:69:
d1:bd:36:87:55:01:85:83:04:1f:e7:3a:3d:37:e9:81:ba:e9:
f0:68:15:5c:89:e8:11:94:c4:f6:5f:2d:64:63:7d:4c:c4:8c:
7c:38:9a:ce:5c:7b:32:48:c9:c5:29:2d:d2:61:02:0a:a0:21:
e3:4c:aa:5b:95:f4:57:d5:00:c0:05:cf:f6:95:1a:f0:e2:95:
8d:df:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 01:44:01 2026 by rpki-client