
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft (raw, json)
Hash identifier: zteKtt8GX7BaEsjocZ8Qi3o89LRDLXGk5P+3PdAInCE=
Subject key identifier: 6D:7A:1B:C0:C0:2F:D7:3A:D2:EF:FE:0D:4E:2B:99:7E:84:47:11:A0
Authority key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
Certificate issuer: /CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Certificate serial: 637595381C937F6D44BF4F0423271B86155A8D82
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
Manifest number: 74
Signing time: Mon 27 Jul 2026 03:27:06 +0000
Manifest this update: Mon 27 Jul 2026 03:22:06 +0000
Manifest next update: Tue 28 Jul 2026 04:08:06 +0000
Files and hashes: 1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: gVVcFzT/K9Q9nDNA6t6fupz9aVwPxkvvDdd7B2c399E=)
2: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl (hash: oSEIIDDhWuMr0qEA3w5WRH+N8pKi0caxnpKeFrLhYzM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:75:95:38:1c:93:7f:6d:44:bf:4f:04:23:27:1b:86:15:5a:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C
Validity
Not Before: Jul 27 03:22:06 2026 GMT
Not After : Jul 28 04:08:06 2026 GMT
Subject: CN=6D7A1BC0C02FD73AD2EFFE0D4E2B997E844711A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:ab:55:39:f4:81:f0:ff:6d:05:d2:56:59:
e4:0f:e4:82:38:ee:b8:42:9e:95:50:a0:01:67:21:
80:4d:30:dd:93:60:4d:d9:bb:e5:7e:fe:b7:94:db:
d3:8f:eb:ed:88:65:d3:58:80:1d:7f:ca:df:66:ca:
dc:ed:b1:1e:64:d3:55:74:ea:7b:c6:65:dd:69:c4:
fc:39:36:79:48:b8:6b:f5:5c:5a:fd:f9:29:80:2e:
2a:df:49:99:ba:5a:78:17:64:c3:a2:a3:f4:df:9e:
4e:67:ec:92:3f:c4:f8:03:54:86:38:2c:cf:2d:93:
e7:49:b5:b0:52:88:41:45:e2:79:7e:71:97:5e:31:
bd:7c:3c:a5:4e:c2:b1:2f:4a:66:78:ef:11:a5:19:
90:a6:c4:fd:80:3c:1b:1f:d1:7b:fe:25:9a:9f:25:
aa:8c:f3:ef:08:c7:b4:5d:a7:ae:16:30:db:16:4b:
9b:6d:52:ba:03:77:1e:36:b0:6a:10:21:b5:c4:17:
e2:9a:b4:b4:f4:e3:80:46:f2:78:b2:a0:c4:56:38:
4c:98:dd:ff:cd:7e:ef:94:0b:18:c2:29:42:3b:59:
86:a7:7a:18:85:9a:1a:ac:48:98:fb:b9:89:d2:57:
e7:fe:85:7b:2d:70:0a:30:85:ba:66:79:e8:c1:87:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:1B:C0:C0:2F:D7:3A:D2:EF:FE:0D:4E:2B:99:7E:84:47:11:A0
X509v3 Authority Key Identifier:
keyid:5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:7f:c9:49:f8:6b:e6:63:dc:ff:5b:de:9c:fd:e9:11:66:
dc:a9:51:df:71:6f:80:2b:18:ed:17:a0:ea:6f:95:b9:c9:6e:
e4:89:f7:d5:ef:ee:f6:dd:d5:d5:24:91:33:b5:00:80:f4:8f:
f5:2c:3f:19:d7:ea:71:0e:83:24:50:19:6a:3c:88:88:78:da:
2e:86:58:a6:23:fb:34:3b:6a:85:f3:e0:66:de:66:e3:73:6c:
63:21:c3:bb:3e:a0:6c:b0:fa:48:2b:75:9e:a6:56:b5:73:fc:
3a:77:e5:e5:16:02:2a:18:70:09:40:68:e6:f3:9c:19:3c:48:
6f:8f:94:10:e8:4d:75:5a:10:7b:09:f3:93:64:be:38:04:4a:
5f:cd:72:e1:a4:cb:04:4f:af:ab:1d:53:c9:96:36:ba:23:68:
21:d9:61:50:db:64:53:33:f0:0f:6d:b5:19:3d:96:c7:20:dd:
20:51:b4:de:57:73:0e:9e:5b:ca:00:96:8c:0b:c1:e4:37:44:
46:4d:f6:79:8c:3c:88:e6:11:ef:2f:70:5c:6e:1d:af:1b:2f:
f3:55:43:d5:9f:8f:2d:85:59:27:d2:bb:76:31:bb:2f:f0:78:
e9:be:a6:33:fc:91:d9:78:be:21:1a:81:c2:35:c4:85:aa:4e:
92:c5:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:30:06 2026 by rpki-client