
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
File: AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft (raw, json)
Hash identifier: x/setJ8W21Jk/2NXA6+FQkYK7JA8/XIE7i8ujrVQvW4=
Subject key identifier: 25:66:47:8A:4A:98:A9:A0:27:26:27:79:30:24:74:86:1E:A4:79:E9
Authority key identifier: AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B
Certificate issuer: /CN=AD75BCED2E3406C9BAAE2A04EDA7609BB790840B
Certificate serial: 65A1D5CA77FB83CA37D83E1552BFB88523737DCC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 13:43:21 +0000
Manifest this update: Tue 22 Sep 2026 13:38:21 +0000
Manifest next update: Wed 23 Sep 2026 15:25:21 +0000
Files and hashes: 1: AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl (hash: JE8muDw4GBkfvyTUJmAXjjoDKaRslhDevII+9CKPARk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl
rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a1:d5:ca:77:fb:83:ca:37:d8:3e:15:52:bf:b8:85:23:73:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD75BCED2E3406C9BAAE2A04EDA7609BB790840B
Validity
Not Before: Sep 22 13:38:21 2026 GMT
Not After : Sep 23 15:25:21 2026 GMT
Subject: CN=2566478A4A98A9A027262779302474861EA479E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:6f:04:88:ed:d3:73:14:7d:e1:b2:16:1c:
e0:eb:25:10:0c:b8:28:af:e9:38:57:e5:a9:64:16:
19:5a:3f:f9:04:04:c4:5b:13:a4:0f:29:69:86:96:
88:ed:c2:d9:e4:02:c0:3a:db:b2:d9:f9:8a:e4:f7:
63:1a:14:f9:f8:96:de:06:f4:93:fc:ff:f7:4d:5a:
af:4f:4f:5b:f9:48:31:25:d6:16:8e:61:90:8c:fc:
19:07:38:e8:66:86:e5:d1:43:d1:b1:78:03:0e:cc:
4e:c4:3e:d5:9d:25:a4:8d:32:c7:93:96:b5:a4:68:
c9:83:22:a5:86:6b:90:95:18:37:fe:52:36:fd:2c:
59:ce:c1:96:4b:46:0a:9d:23:1a:0b:8d:f6:96:3d:
41:ef:ff:41:b4:fc:a6:44:d6:a3:3d:f3:13:85:fe:
64:1c:9e:a6:06:b0:be:f8:a7:c0:fe:23:7f:28:e9:
cb:03:9c:44:d3:ff:a6:6a:b3:ba:b5:83:9f:19:31:
fc:ff:b7:6b:3b:0d:a9:e8:ee:5c:ba:c2:0c:9a:52:
e2:0f:8b:f1:87:f5:23:02:7a:89:03:39:08:35:1d:
c1:f1:0e:bf:c4:6d:b3:80:de:62:17:4c:ed:bb:05:
61:09:ac:05:32:00:a4:5f:02:58:f4:36:46:92:e5:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:47:8A:4A:98:A9:A0:27:26:27:79:30:24:74:86:1E:A4:79:E9
X509v3 Authority Key Identifier:
keyid:AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5a:b6:fe:bc:8c:2a:f4:4f:00:d5:c3:e5:85:7c:7c:c7:c2:
ea:da:c6:9c:35:fe:46:09:fb:78:57:bc:dd:96:8f:c3:b8:f5:
84:37:94:9b:03:80:04:d6:0e:99:7f:38:a9:89:dc:a1:59:17:
f7:ce:c4:56:4d:0e:f8:69:1f:fa:06:d7:38:9d:63:aa:a9:d1:
f7:1d:82:35:ac:6c:d6:50:3d:6e:a0:d4:2e:21:eb:e5:95:70:
38:73:5f:aa:8d:86:5d:4a:94:d7:a1:01:8d:e9:b2:eb:4f:fd:
8d:72:3c:bc:a6:0d:d5:57:26:00:3f:cd:11:a4:3c:3d:f1:96:
49:f8:a0:4d:e4:29:4a:08:df:d9:cf:b5:d1:cc:57:80:40:64:
8a:b7:4d:34:16:ac:65:04:8e:cc:57:61:61:e0:91:c8:26:36:
8f:35:9f:a6:09:d9:3d:d4:12:0b:28:52:eb:cd:76:99:8d:a5:
d5:df:c8:29:28:1f:cd:56:e4:f2:9f:98:1c:93:ef:95:a6:b8:
31:75:ae:04:93:78:91:f9:a0:8a:0b:c3:33:84:a9:39:37:b7:
a1:9d:60:9c:0a:96:3f:0c:5a:75:0e:a9:99:14:c8:b7:64:54:
3d:a6:41:ab:2c:c8:fe:97:cf:a3:e5:8f:cc:b4:04:07:60:ae:
42:79:d2:70
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZaHVynf7g8o32D4VUr+4hSNzfcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3NUJDRUQyRTM0MDZDOUJBQUUyQTA0RURBNzYwOUJC
NzkwODQwQjAeFw0yNjA5MjIxMzM4MjFaFw0yNjA5MjMxNTI1MjFaMDMxMTAvBgNV
BAMTKDI1NjY0NzhBNEE5OEE5QTAyNzI2Mjc3OTMwMjQ3NDg2MUVBNDc5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Tm8EiO3TcxR94bIWHODrJRAM
uCiv6ThX5alkFhlaP/kEBMRbE6QPKWmGlojtwtnkAsA627LZ+Yrk92MaFPn4lt4G
9JP8//dNWq9PT1v5SDEl1haOYZCM/BkHOOhmhuXRQ9GxeAMOzE7EPtWdJaSNMseT
lrWkaMmDIqWGa5CVGDf+Ujb9LFnOwZZLRgqdIxoLjfaWPUHv/0G0/KZE1qM98xOF
/mQcnqYGsL74p8D+I38o6csDnETT/6Zqs7q1g58ZMfz/t2s7Dano7ly6wgyaUuIP
i/GH9SMCeokDOQg1HcHxDr/EbbOA3mIXTO27BWEJrAUyAKRfAlj0NkaS5YYdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJWZHikqYqaAnJid5MCR0hh6keekwHwYDVR0j
BBgwFoAUrXW87S40Bsm6rioE7adgm7eQhAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGZkMDhiMzgtM2Y1Zi00MDE5LWIyYTMtMjM2MDRmOTQyYzg3LzAvQUQ3NUJDRUQy
RTM0MDZDOUJBQUUyQTA0RURBNzYwOUJCNzkwODQwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDc1QkNFRDJFMzQwNkM5QkFBRTJBMDRFREE3NjA5QkI3OTA4
NDBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZkMDhiMzgtM2Y1Zi00MDE5LWIy
YTMtMjM2MDRmOTQyYzg3LzAvQUQ3NUJDRUQyRTM0MDZDOUJBQUUyQTA0RURBNzYw
OUJCNzkwODQwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIZatv68jCr0TwDVw+WFfHzHwuraxpw1/kYJ
+3hXvN2Wj8O49YQ3lJsDgATWDpl/OKmJ3KFZF/fOxFZNDvhpH/oG1zidY6qp0fcd
gjWsbNZQPW6g1C4h6+WVcDhzX6qNhl1KlNehAY3psutP/Y1yPLymDdVXJgA/zRGk
PD3xlkn4oE3kKUoI39nPtdHMV4BAZIq3TTQWrGUEjsxXYWHgkcgmNo81n6YJ2T3U
EgsoUuvNdpmNpdXfyCkoH81W5PKfmByT75WmuDF1rgSTeJH5oIoLwzOEqTk3t6Gd
YJwKlj8MWnUOqZkUyLdkVD2mQassyP6Xz6Plj8y0BAdgrkJ50nA=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:08:49 2026 by rpki-client