
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
File: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft (raw, json)
Hash identifier: kQDLqIQYNnM804atAkR9F0eVYIudRX+UbjoMzdJvm7E=
Subject key identifier: AE:6C:5A:B9:1F:78:D7:F5:AC:14:9B:6E:76:92:81:EC:CF:A2:37:6D
Authority key identifier: 1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
Certificate issuer: /CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Certificate serial: 01FEF4F9C0DDA912C8194977F6563654F7643703
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 00:36:55 +0000
Manifest this update: Wed 29 Jul 2026 00:31:55 +0000
Manifest next update: Thu 30 Jul 2026 01:50:55 +0000
Files and hashes: 1: 1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl (hash: ZMdyhDizAKy0TrDeBFxd/UYN48FJuS4Offs+qAGQwws=)
2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: fsyTi1wKrYDgpsKCw76juglRx93+2YzZ5l6lzjCtU8E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fe:f4:f9:c0:dd:a9:12:c8:19:49:77:f6:56:36:54:f7:64:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DD0DE90198F9D1A28E457EE5788E7D13547CB91
Validity
Not Before: Jul 29 00:31:55 2026 GMT
Not After : Jul 30 01:50:55 2026 GMT
Subject: CN=AE6C5AB91F78D7F5AC149B6E769281ECCFA2376D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:dc:14:1b:ec:e6:8d:4f:fa:3c:71:59:95:
89:a0:cb:1c:bb:5a:b1:eb:20:53:81:9b:b7:6c:7a:
e2:c8:db:5c:8d:ab:df:fb:19:63:96:7f:5e:f9:ff:
b2:87:42:8b:86:06:66:fb:1c:f7:9a:aa:ef:a6:3c:
97:ac:18:76:ed:06:0d:6d:2b:9f:3d:e9:dc:fe:7a:
21:57:a8:95:8e:a7:ef:93:ad:c0:d0:c5:25:ac:7b:
8b:11:fd:07:d5:67:ca:68:4f:89:cb:fe:d9:1d:d0:
26:79:7c:ed:80:0d:7f:71:de:aa:a1:cf:ad:93:f7:
50:24:cb:2a:ad:cc:79:10:44:ae:2e:64:46:06:bd:
4f:8d:ef:07:99:45:5b:5a:b1:3d:e7:64:dc:a6:ac:
b8:2d:66:c2:0b:67:68:86:de:8a:c9:eb:cb:86:10:
89:7b:83:b5:3b:d4:d6:e8:e2:0c:1c:d2:db:9b:02:
9c:9f:94:b1:5b:22:0b:7b:81:69:26:40:d8:f8:85:
19:55:99:f1:6d:17:2e:42:db:3b:11:7c:36:32:5f:
d2:da:e7:f8:c6:ea:b7:ad:ab:c7:4c:f3:e2:4a:b7:
bf:5a:ef:03:dd:7d:a1:ed:5f:a9:34:80:79:3e:f9:
57:06:0a:bd:51:0e:d8:7e:1f:96:6c:19:07:3e:65:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:5A:B9:1F:78:D7:F5:AC:14:9B:6E:76:92:81:EC:CF:A2:37:6D
X509v3 Authority Key Identifier:
keyid:1D:D0:DE:90:19:8F:9D:1A:28:E4:57:EE:57:88:E7:D1:35:47:CB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/1DD0DE90198F9D1A28E457EE5788E7D13547CB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7d:c1:b1:56:fd:11:2b:fb:49:16:75:b0:51:00:5a:b3:c0:
14:95:7c:01:dd:3a:b3:ee:b1:3f:e9:0c:38:b6:47:d6:77:b5:
2e:60:9a:84:50:39:cc:b1:ff:c4:ab:19:72:1f:2b:27:cb:49:
e7:ed:a4:b7:98:e0:27:17:a0:21:ba:4e:bd:09:4d:36:52:68:
60:b7:78:bf:a0:45:40:a2:63:68:1c:d3:d7:d9:d1:05:09:28:
b2:e0:41:a4:c0:05:3d:3b:81:48:0f:59:97:cf:14:32:54:1c:
f7:3b:3f:66:b9:76:6d:15:11:07:e1:f9:a7:56:d2:a2:9d:dc:
85:a3:73:95:e9:b3:36:30:db:59:db:d7:cf:e4:c3:4d:fc:62:
25:9a:94:22:c2:43:53:34:74:1f:4b:1a:0e:d6:71:47:18:ed:
bd:70:cc:9c:8b:16:43:1b:32:b1:39:9f:b6:c3:c6:47:9b:c4:
50:08:bf:5e:de:4b:f1:93:59:6a:df:8d:42:56:e2:cc:57:be:
f2:51:2d:6c:e3:94:00:23:ee:04:d1:d6:a8:b8:81:27:73:ec:
8e:b3:09:b0:c8:8a:f3:7a:a5:f3:72:b4:56:23:aa:29:96:ba:
78:79:0b:40:89:58:24:6f:00:0b:be:78:6e:2c:6c:1f:e4:5d:
17:16:23:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAf70+cDdqRLIGUl39lY2VPdkNwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEz
NTQ3Q0I5MTAeFw0yNjA3MjkwMDMxNTVaFw0yNjA3MzAwMTUwNTVaMDMxMTAvBgNV
BAMTKEFFNkM1QUI5MUY3OEQ3RjVBQzE0OUI2RTc2OTI4MUVDQ0ZBMjM3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnANwUG+zmjU/6PHFZlYmgyxy7
WrHrIFOBm7dseuLI21yNq9/7GWOWf175/7KHQouGBmb7HPeaqu+mPJesGHbtBg1t
K5896dz+eiFXqJWOp++TrcDQxSWse4sR/QfVZ8poT4nL/tkd0CZ5fO2ADX9x3qqh
z62T91AkyyqtzHkQRK4uZEYGvU+N7weZRVtasT3nZNymrLgtZsILZ2iG3orJ68uG
EIl7g7U71Nbo4gwc0tubApyflLFbIgt7gWkmQNj4hRlVmfFtFy5C2zsRfDYyX9La
5/jG6retq8dM8+JKt79a7wPdfaHtX6k0gHk++VcGCr1RDth+H5ZsGQc+ZZxnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrmxauR941/WsFJtudpKB7M+iN20wHwYDVR0j
BBgwFoAUHdDekBmPnRoo5FfuV4jn0TVHy5EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAx
OThGOUQxQTI4RTQ1N0VFNTc4OEU3RDEzNTQ3Q0I5MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xREQwREU5MDE5OEY5RDFBMjhFNDU3RUU1Nzg4RTdEMTM1NDdD
QjkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4
MDAtYjUzZTJhOTE4YWNhLzEvMUREMERFOTAxOThGOUQxQTI4RTQ1N0VFNTc4OEU3
RDEzNTQ3Q0I5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFh9wbFW/REr+0kWdbBRAFqzwBSVfAHdOrPu
sT/pDDi2R9Z3tS5gmoRQOcyx/8SrGXIfKyfLSeftpLeY4CcXoCG6Tr0JTTZSaGC3
eL+gRUCiY2gc09fZ0QUJKLLgQaTABT07gUgPWZfPFDJUHPc7P2a5dm0VEQfh+adW
0qKd3IWjc5XpszYw21nb18/kw038YiWalCLCQ1M0dB9LGg7WcUcY7b1wzJyLFkMb
MrE5n7bDxkebxFAIv17eS/GTWWrfjUJW4sxXvvJRLWzjlAAj7gTR1qi4gSdz7I6z
CbDIivN6pfNytFYjqimWunh5C0CJWCRvAAu+eG4sbB/kXRcWI40=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:47 2026 by rpki-client