
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
File: A7EC36E89BE7B48874142363CBDE6AF22273C559.mft (raw, json)
Hash identifier: qFhzDimJoY6iC+VpXD0K1m402s4WzTWsac6fKr6Q6jo=
Subject key identifier: 71:15:E4:AD:1C:91:CA:40:4C:AB:B7:ED:5C:9D:13:47:E7:3D:06:15
Authority key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
Certificate issuer: /CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Certificate serial: 26AC4550C76880318A7D3BFFFA974F7C9CE4D536
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
Manifest number: 93
Signing time: Thu 20 Aug 2026 04:33:06 +0000
Manifest this update: Thu 20 Aug 2026 04:28:06 +0000
Manifest next update: Fri 21 Aug 2026 05:06:06 +0000
Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: +PzA369vX1gC5i4jACzVnnj39MhVu80F0pvVZunJO1g=)
2: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: 0JVt6Zu0M/Ga29cquq7tcggAAo9qmUWZlK+5RkmIrXg=)
3: A7EC36E89BE7B48874142363CBDE6AF22273C559.crl (hash: 2n3aKz7KQdGEBHrq8czIT4ZIvO2bd4oC1eqxNj9U1iM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 05:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ac:45:50:c7:68:80:31:8a:7d:3b:ff:fa:97:4f:7c:9c:e4:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559
Validity
Not Before: Aug 20 04:28:06 2026 GMT
Not After : Aug 21 05:06:06 2026 GMT
Subject: CN=7115E4AD1C91CA404CABB7ED5C9D1347E73D0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:a5:5b:8e:80:b3:22:fe:d0:e4:6a:01:04:
7c:9e:2b:85:8a:c7:ee:87:42:0d:9c:6b:ce:ff:67:
02:ab:74:dd:ef:6f:2a:e3:36:78:4c:3a:1e:38:b0:
2c:6d:e9:93:a9:a5:b9:a8:d7:3b:72:ee:d1:65:cd:
f9:56:2d:8d:b7:4d:90:2d:07:06:0d:af:ba:bf:43:
c8:37:6b:01:bf:ce:c9:47:7e:99:e0:0b:7d:4a:66:
c4:34:1c:c6:87:d3:f8:c7:75:bc:51:dd:98:27:ca:
78:7a:9c:98:ed:69:53:a1:a3:a6:34:5b:65:d3:10:
50:db:7c:0c:27:27:96:a6:70:6c:1c:9f:13:df:b4:
83:15:f5:b4:f7:7c:f8:8b:bb:1b:b4:44:a7:a5:3b:
72:61:d4:df:f6:36:bc:64:86:af:62:03:3a:40:1f:
03:d4:dc:cc:ea:49:6c:33:5f:ed:8a:6c:37:87:4a:
1c:76:ae:cd:c4:26:6c:fa:87:70:b6:a3:18:13:e8:
9c:cc:00:9e:01:ab:db:da:e2:ae:b0:5a:60:67:30:
51:42:42:ed:aa:dc:ba:84:40:e3:83:b8:94:3b:fb:
b9:ae:2f:c6:88:99:4f:e1:b9:9f:1d:ae:09:51:dc:
c0:1c:2f:59:72:89:56:d5:06:c3:97:f8:6a:cf:1e:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:E4:AD:1C:91:CA:40:4C:AB:B7:ED:5C:9D:13:47:E7:3D:06:15
X509v3 Authority Key Identifier:
keyid:A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:37:36:cb:06:49:2e:90:ff:fb:8c:6e:46:58:6e:96:df:
a1:69:d6:42:00:73:e7:3c:a2:8d:3a:3c:75:18:1c:ca:32:ef:
48:07:0f:9c:94:a9:11:ed:e1:c5:fa:d4:d1:5f:5a:8a:0f:6b:
fb:bd:9e:e8:3e:e6:c4:37:30:5a:d6:fa:2b:f5:e7:ad:3d:c1:
8f:a8:c6:47:73:32:90:5a:7e:b5:17:ee:02:14:e8:f8:13:9f:
71:cd:b2:8e:e5:8d:94:b1:16:3b:82:64:42:a1:c4:ca:49:1e:
04:96:c3:05:82:49:d2:75:23:21:dc:62:cf:96:02:62:f0:f8:
fe:59:3d:4e:0a:b1:74:d8:22:7f:1e:7f:e6:65:2c:85:d7:0b:
0c:d2:ce:b3:96:ad:a9:19:a3:c3:3e:95:bc:be:b0:56:54:b3:
1a:ef:a4:e2:af:6f:85:d1:ef:3a:02:73:b5:72:52:3b:79:a0:
c1:94:3a:56:58:84:ec:90:b6:6c:38:21:45:f0:76:c3:01:31:
77:07:f0:2b:19:7f:f9:e8:26:32:15:db:5b:f2:81:05:3e:06:
ce:7c:93:76:9e:85:8f:f6:46:b7:3b:40:3b:99:1d:04:ab:53:
0f:7e:52:d0:a5:50:4f:a9:a2:cc:39:bf:c5:4b:fc:f4:14:8f:
80:98:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 16:22:42 2026 by rpki-client