
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json)
Hash identifier: 1wJmDvRgSHVknDbVt6Mzt1ttTWWUr+7x1RDFAXf2HJ4=
Subject key identifier: 0E:F8:C1:5F:F6:EB:DB:A2:2E:D5:96:6E:C4:F1:5A:DF:30:CC:23:A6
Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Certificate serial: 7CE56183486085EC681F67C0BEF5F01CDDCB7EEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 20:18:56 +0000
Manifest this update: Sat 13 Jun 2026 20:13:56 +0000
Manifest next update: Sun 14 Jun 2026 22:25:56 +0000
Files and hashes: 1: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=)
2: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=)
3: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: zWLZI5/afb3cChu1G+HR2UXEzXQicYKxodNGp1eHHwo=)
4: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=)
5: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e5:61:83:48:60:85:ec:68:1f:67:c0:be:f5:f0:1c:dd:cb:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Validity
Not Before: Jun 13 20:13:56 2026 GMT
Not After : Jun 14 22:25:56 2026 GMT
Subject: CN=0EF8C15FF6EBDBA22ED5966EC4F15ADF30CC23A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:5d:95:c1:05:f5:31:7a:f7:2b:7d:29:88:
eb:a6:a2:48:84:57:19:3b:a5:24:db:c5:06:89:76:
ce:4d:b0:1d:05:1f:72:17:d5:47:ca:23:3a:9f:db:
d6:a0:4d:ed:9e:e4:07:05:48:fd:7f:6c:33:dd:7e:
a7:71:e8:ec:7b:c6:21:02:93:04:be:f2:15:fc:08:
4c:84:15:71:c8:55:d1:25:00:ca:d5:17:61:53:21:
34:af:2b:88:24:76:0f:76:ab:5f:29:4b:37:47:66:
a8:3b:89:35:35:8a:8e:c9:11:80:6d:cb:40:86:4d:
27:e3:76:67:09:45:02:91:f7:74:d4:01:d5:e7:6d:
7f:22:98:e8:72:bd:25:bd:24:38:7a:bb:95:de:3d:
e6:b9:70:29:a7:63:d7:17:32:74:14:7d:a5:ed:47:
e1:96:85:38:4d:14:a1:43:0d:2f:16:7d:4f:11:78:
b9:e3:1a:4e:b4:09:68:60:f2:23:e7:d7:29:cf:fa:
68:c8:11:e1:1b:d3:44:fa:f2:53:72:36:1a:fa:ef:
c5:23:87:f4:a6:74:2c:22:ce:ae:4d:9b:4c:73:f5:
f8:f3:95:ab:46:f7:3e:a1:b7:fd:83:b1:ac:24:67:
93:d1:74:37:6a:83:1b:07:e1:50:0b:3f:98:18:f8:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:C1:5F:F6:EB:DB:A2:2E:D5:96:6E:C4:F1:5A:DF:30:CC:23:A6
X509v3 Authority Key Identifier:
keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:7c:b6:d9:25:9a:8f:3c:9f:9f:dc:fb:4d:43:aa:90:b0:
73:57:e0:c3:f3:10:71:ca:d0:55:7a:36:ea:28:83:b0:f9:4f:
3a:be:80:ee:e9:9b:cb:b8:10:05:49:2c:85:6f:e0:ba:08:6b:
46:18:99:24:b1:2a:7e:8c:9e:07:99:64:17:86:2f:01:87:97:
8c:4a:46:9d:cf:4f:0a:74:81:db:4d:d1:20:87:18:94:66:b2:
04:8a:a8:97:eb:96:c8:8f:30:54:53:9a:a4:ce:dd:e6:09:2c:
60:7f:c4:36:d2:41:13:4e:62:f6:56:ff:e4:49:43:c3:8e:08:
9f:2b:5c:7e:60:c5:85:36:99:8f:f0:af:ca:a3:52:b1:ab:f2:
85:98:f2:24:fc:4f:b5:26:a6:f2:fb:02:3f:b8:0e:22:57:17:
60:03:c0:ce:c7:78:d5:fd:c5:fe:98:48:9e:99:29:af:8b:54:
85:e7:25:69:d2:63:62:e1:d8:2a:18:f3:32:d0:fd:78:56:7f:
c8:0d:84:3f:4f:9b:36:05:5b:8c:4a:ff:1a:c3:28:cd:91:59:
e8:84:a3:dd:4a:93:b5:13:83:7b:e8:2d:f5:2d:83:ee:c7:63:
fb:39:f8:fc:7f:0f:bb:59:4d:0b:90:70:cb:9a:9b:d9:21:47:
ce:98:56:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfOVhg0hghexoH2fAvvXwHN3LfuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdBODhD
M0VEN0U0MjAeFw0yNjA2MTMyMDEzNTZaFw0yNjA2MTQyMjI1NTZaMDMxMTAvBgNV
BAMTKDBFRjhDMTVGRjZFQkRCQTIyRUQ1OTY2RUM0RjE1QURGMzBDQzIzQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jV2VwQX1MXr3K30piOumokiE
Vxk7pSTbxQaJds5NsB0FH3IX1UfKIzqf29agTe2e5AcFSP1/bDPdfqdx6Ox7xiEC
kwS+8hX8CEyEFXHIVdElAMrVF2FTITSvK4gkdg92q18pSzdHZqg7iTU1io7JEYBt
y0CGTSfjdmcJRQKR93TUAdXnbX8imOhyvSW9JDh6u5XePea5cCmnY9cXMnQUfaXt
R+GWhThNFKFDDS8WfU8ReLnjGk60CWhg8iPn1ynP+mjIEeEb00T68lNyNhr678Uj
h/SmdCwizq5Nm0xz9fjzlatG9z6ht/2DsawkZ5PRdDdqgxsH4VALP5gY+AYLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDvjBX/br26Iu1ZZuxPFa3zDMI6YwHwYDVR0j
BBgwFoAUdm+SLr5mk7TCKaAGMfl6iMPtfkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE3ODhiNGEtZDQ1MS00OWZiLWI3Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVC
RTY2OTNCNEMyMjlBMDA2MzFGOTdBODhDM0VEN0U0Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjZGOTIyRUJFNjY5M0I0QzIyOUEwMDYzMUY5N0E4OEMzRUQ3
RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3
Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdB
ODhDM0VEN0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGcVfLbZJZqPPJ+f3PtNQ6qQsHNX4MPzEHHK
0FV6Nuoog7D5Tzq+gO7pm8u4EAVJLIVv4LoIa0YYmSSxKn6MngeZZBeGLwGHl4xK
Rp3PTwp0gdtN0SCHGJRmsgSKqJfrlsiPMFRTmqTO3eYJLGB/xDbSQRNOYvZW/+RJ
Q8OOCJ8rXH5gxYU2mY/wr8qjUrGr8oWY8iT8T7UmpvL7Aj+4DiJXF2ADwM7HeNX9
xf6YSJ6ZKa+LVIXnJWnSY2Lh2CoY8zLQ/XhWf8gNhD9PmzYFW4xK/xrDKM2RWeiE
o91Kk7UTg3voLfUtg+7HY/s5+Px/D7tZTQuQcMuam9khR86YVpo=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:44 2026 by rpki-client