
$ rpki-client -vvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File: 74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier: dDLc/mfBog2pRL4qcAWK3xf22WqUJkf9M+LfX/G2GWA=
Subject key identifier: 8A:20:64:FF:5F:87:31:AC:9B:63:8A:A2:DB:35:90:44:FB:FA:E4:BF
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer: /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial: 575C49F2CBE723B9FD603579145107AC7195C84D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 14:32:12 +0000
Manifest this update: Sat 13 Jun 2026 14:27:12 +0000
Manifest next update: Sun 14 Jun 2026 17:33:12 +0000
Files and hashes: 1: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: y8w0IO2Kq8oCxQy+IX5xzHSP6eErPbxF3LcdJ5WI4H0=)
2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5c:49:f2:cb:e7:23:b9:fd:60:35:79:14:51:07:ac:71:95:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Validity
Not Before: Jun 13 14:27:12 2026 GMT
Not After : Jun 14 17:33:12 2026 GMT
Subject: CN=8A2064FF5F8731AC9B638AA2DB359044FBFAE4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:7f:de:0a:91:09:40:68:68:55:d1:59:89:
21:f4:10:d1:0f:7f:d5:b2:98:ab:91:32:4c:3b:12:
fe:4d:38:d3:c3:0d:ba:34:87:c4:44:2f:d2:85:2f:
c9:92:e4:29:da:7d:c3:9c:3a:39:cd:18:a7:71:0a:
3e:10:80:07:37:17:c0:da:1a:5a:91:4e:9b:90:f9:
f2:e1:0b:bc:af:c2:3f:ec:e2:10:3b:56:b9:94:16:
5b:a3:e6:2e:ba:90:79:a7:5f:4a:e2:84:d0:ce:26:
49:34:b3:74:2e:a6:37:83:b8:7d:b7:c8:bd:4c:9a:
3b:7f:6d:b8:98:75:14:93:4a:b1:67:e4:de:8c:dc:
2f:ea:71:46:1a:c5:46:62:50:3f:36:23:95:37:76:
dd:17:71:78:c6:e9:99:f2:8f:bb:2b:c1:13:8a:24:
55:0c:d7:97:53:2b:2a:a9:43:b3:93:50:e5:9e:06:
df:25:03:3e:39:37:c5:20:0d:29:6f:2e:55:48:75:
9e:66:1f:46:c4:97:f1:47:4f:e8:ba:62:bf:66:49:
ca:9b:e3:37:52:a0:50:72:b0:d2:53:95:7c:9b:10:
34:f0:70:22:51:08:c9:18:69:3e:17:09:b5:89:e8:
b7:3c:fc:05:f6:4e:80:a8:1a:a4:50:0a:c2:70:dc:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:64:FF:5F:87:31:AC:9B:63:8A:A2:DB:35:90:44:FB:FA:E4:BF
X509v3 Authority Key Identifier:
keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:9e:35:04:ad:1d:76:fd:0a:b8:c2:be:c0:cf:f0:99:3c:
68:dc:b4:ac:03:1e:3c:97:79:87:37:05:1b:11:3c:63:df:e8:
1c:41:65:c3:40:17:f4:ee:3f:67:48:04:4d:4e:a6:0a:b7:df:
8a:ef:14:82:12:6b:ac:c8:83:55:3d:a3:1e:72:d4:01:51:4c:
67:36:a5:1a:c4:9e:90:d3:cb:f6:59:3d:28:41:30:d1:85:32:
70:e9:82:9e:db:67:62:9f:b0:38:55:f2:34:86:07:f3:46:3a:
7a:05:be:7b:46:7a:b0:ed:a5:18:01:df:ad:76:6a:cb:37:7a:
74:7e:2e:cf:4b:a8:5b:58:24:ea:45:42:69:9f:61:c5:ba:3d:
ae:04:25:4a:2a:6a:6c:ed:b2:9d:b5:e1:60:f6:30:b4:4e:2e:
4e:ee:cf:fb:69:f6:1a:02:b6:25:93:e0:85:1d:c1:67:1a:28:
fb:42:d5:a3:6c:25:c2:f2:7d:82:3f:b6:d5:6e:4a:d2:15:03:
e8:1e:a6:9e:43:f7:b7:a3:df:54:7c:e6:68:77:83:4b:d1:93:
4f:32:72:e1:40:d4:2f:98:34:02:a5:76:9e:29:46:5e:ee:78:
47:74:6b:3e:98:a4:06:17:d3:c0:fb:42:ff:74:d6:87:ab:87:
2b:e8:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:47 2026 by rpki-client