
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
File: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json)
Hash identifier: ZBC4/iOHwGqFtV8ortrGBWjAM8DdbEZQ1VQmK8j3FYY=
Subject key identifier: BD:4A:59:7A:EB:30:A9:D9:16:2D:FB:3A:94:A4:C5:96:FF:7E:B8:47
Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
Certificate issuer: /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Certificate serial: 26852B1A269C614E45F2FDCB3BF4DC77191781F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 09:25:16 +0000
Manifest this update: Sat 13 Jun 2026 09:20:15 +0000
Manifest next update: Sun 14 Jun 2026 11:08:15 +0000
Files and hashes: 1: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: w2cUQNLjibo7R6exifcKa8rlB20zJD3K+tz3w/+kpew=)
2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:85:2b:1a:26:9c:61:4e:45:f2:fd:cb:3b:f4:dc:77:19:17:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Validity
Not Before: Jun 13 09:20:15 2026 GMT
Not After : Jun 14 11:08:15 2026 GMT
Subject: CN=BD4A597AEB30A9D9162DFB3A94A4C596FF7EB847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:7b:c2:22:78:5a:d0:ca:a8:ac:cd:cc:f3:
21:05:9c:95:c1:94:55:89:4a:12:5c:7d:b7:2a:77:
2a:4a:20:7a:7f:ef:3f:f1:93:d8:25:49:f7:91:a3:
a4:93:7f:46:8c:8f:4a:f5:f4:b4:a8:d3:c8:e3:3d:
84:7b:d7:93:29:24:e0:1e:40:e9:f6:06:f0:22:12:
9c:1d:f3:33:da:5e:1e:94:db:70:f5:24:7f:41:93:
d6:2c:14:e5:45:df:e8:45:1c:f4:4d:bd:21:0f:de:
30:0a:35:dd:af:e3:f4:41:fe:5d:d6:39:43:bb:9f:
12:3b:25:e7:51:f7:52:9f:a3:fb:75:6f:72:a9:97:
e2:71:c6:5e:39:8b:9d:df:0e:38:2a:dd:dd:69:86:
e3:c9:0b:8b:4d:61:52:9f:75:07:30:be:f2:67:0a:
3c:bb:20:ba:be:6c:12:d4:66:f8:54:e0:06:ce:de:
f5:1e:3b:bf:ee:75:66:49:e9:9f:23:bc:3e:cc:6c:
e4:89:38:41:fa:bf:db:9a:71:97:59:b5:60:40:34:
66:a5:7e:de:c5:b7:13:db:68:e0:de:6e:71:1b:61:
80:fb:bd:af:f1:e2:b0:75:09:05:64:41:01:50:2c:
9e:47:d9:e0:af:26:f0:87:e0:0b:16:61:6f:0c:1d:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:59:7A:EB:30:A9:D9:16:2D:FB:3A:94:A4:C5:96:FF:7E:B8:47
X509v3 Authority Key Identifier:
keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:e5:a6:41:f8:c3:8e:38:04:8b:6b:ec:dd:1b:84:0f:54:
ab:64:97:13:2b:4c:fd:78:12:6e:7e:62:5c:49:87:a8:68:1d:
e3:09:ab:f7:51:d6:ce:4c:a9:55:31:d9:70:ec:fb:46:a0:60:
4e:72:44:e1:63:5e:44:ee:e8:7b:af:db:aa:9b:62:3d:21:45:
d8:9a:73:87:86:c3:3c:89:ef:e2:ff:0c:f2:6c:47:34:84:d7:
3f:f6:12:f5:89:70:e8:00:35:03:c3:02:46:1b:0b:73:55:b1:
db:38:ca:5c:d4:61:b2:d3:2e:a8:b9:35:aa:ca:c1:1f:16:12:
30:89:f1:bb:a7:ca:36:cd:c5:ea:46:4c:04:9a:af:6d:1d:97:
80:69:40:c4:34:b7:61:a9:64:b0:45:ee:1a:3c:2a:f5:8e:59:
dd:80:5a:10:b7:63:d3:b0:3b:d9:af:f9:a4:c4:82:75:5d:11:
02:b0:9b:25:42:53:20:0c:0e:72:f4:62:2e:4b:8b:23:a3:d2:
9c:ee:d7:dd:15:66:5c:f0:e5:7b:7e:93:b5:ff:e0:68:ab:f0:
10:6a:69:5c:58:2d:fa:8e:4b:b5:45:31:d1:41:bc:31:73:21:
69:29:43:66:16:61:e5:6f:14:20:52:fc:24:b8:c3:e0:30:6a:
8d:f9:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:54 2026 by rpki-client