
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
File: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft (raw, json)
Hash identifier: Nad9mV0IBHEnljHQCXM8HW2XnycUKJY6cviXNth6UMw=
Subject key identifier: A7:9F:1E:AA:34:6E:9E:13:EA:D3:7D:D2:D8:C6:98:BE:7F:CD:2A:9E
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Certificate issuer: /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial: 77F2A86800692F1125DAAF6770EE6652525DA961
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
Manifest number: EB
Signing time: Sat 24 Oct 2026 22:11:49 +0000
Manifest this update: Sat 24 Oct 2026 22:06:49 +0000
Manifest next update: Mon 26 Oct 2026 01:26:49 +0000
Files and hashes: 1: 7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl (hash: 6kQhOfrwvoCIYMTy194KVY5aPlXDyKo7k3F31ExF3iQ=)
2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f2:a8:68:00:69:2f:11:25:da:af:67:70:ee:66:52:52:5d:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Validity
Not Before: Oct 24 22:06:49 2026 GMT
Not After : Oct 26 01:26:49 2026 GMT
Subject: CN=A79F1EAA346E9E13EAD37DD2D8C698BE7FCD2A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:bc:8a:20:d5:d5:ea:77:cb:40:97:31:4e:
c5:ec:11:0a:69:88:f2:a2:e0:3b:b9:38:93:d0:e8:
3c:11:25:0e:f1:93:ef:63:c7:32:88:03:e1:c6:70:
3a:76:38:a1:22:8a:d8:e1:35:2e:22:dc:af:3d:bb:
11:9c:33:15:3a:c5:ef:c0:96:d5:65:9a:26:72:c3:
3c:e9:24:2f:8f:76:59:df:24:e3:52:93:17:0a:f9:
86:1a:ae:5c:ac:dc:78:22:6a:7a:eb:23:24:ee:0b:
8f:39:14:18:c1:ee:09:6b:ae:c0:79:9a:d1:68:fb:
b5:19:9d:96:ea:d8:84:ad:0e:75:a4:f4:7e:bb:4d:
65:6c:de:58:f8:05:7a:bf:ad:2f:d2:5e:49:e9:e7:
90:12:9b:6d:38:29:61:bd:25:63:4e:4d:a7:7e:6f:
0d:f6:39:59:71:f1:64:41:97:fe:f5:64:4e:e6:4c:
11:2a:ce:10:63:de:7d:a6:34:db:f4:0d:bc:39:f7:
dc:a5:a0:6a:5e:fe:0a:13:84:87:b5:65:84:17:b6:
74:86:c7:31:89:04:4d:b0:2a:42:cc:60:41:58:e1:
13:0f:1a:1d:46:b1:46:fa:b7:59:b2:3e:47:0d:4f:
7f:d7:68:d4:49:a3:ba:22:60:f9:0a:04:1d:ed:ff:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:1E:AA:34:6E:9E:13:EA:D3:7D:D2:D8:C6:98:BE:7F:CD:2A:9E
X509v3 Authority Key Identifier:
keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:36:94:c1:87:70:ed:5a:2f:37:7e:bf:36:2a:9b:b4:90:c0:
3d:b9:c8:15:98:de:3e:25:73:f4:90:40:d9:30:6b:f4:99:8d:
d6:06:89:ed:5a:59:13:82:50:85:7a:61:b4:a9:a1:ad:9a:c0:
fa:83:13:77:4b:b8:e2:59:ec:d7:b8:6d:2a:b3:34:92:f3:89:
35:2c:dd:ba:c2:66:d3:8f:0a:87:5c:67:ba:e1:4b:f3:09:5c:
be:f0:35:bc:b1:fe:67:e7:52:e9:a5:2b:63:03:ce:48:24:4e:
5e:80:b0:e4:77:93:bd:2a:02:68:ec:dc:af:ac:99:31:7c:18:
a4:d8:4c:56:fb:19:fa:b6:29:cd:a3:8b:a3:9a:f5:32:23:f4:
52:51:69:37:9b:ae:fe:17:5a:c7:37:0b:b6:55:5f:2b:00:fe:
3f:f6:09:8f:16:c8:ab:eb:4e:3a:ae:a5:e4:50:d1:9e:02:0a:
7f:d1:48:ef:dc:c2:44:74:74:2d:fa:3c:9f:4f:cf:e4:c0:4a:
a4:63:da:70:e4:02:f1:57:a5:da:59:9f:2c:81:44:c4:f9:0d:
d3:23:2a:8f:1e:1d:9e:b6:b0:1a:bf:42:7f:b2:8f:57:4d:9f:
5c:58:ae:94:5c:87:c9:d0:54:1a:05:98:4a:2c:36:9c:65:d5:
2c:a7:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:54:55 2026 by rpki-client