
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft
File: 7761761400F24897480B3ACB185C89ED59AA03ED.mft (raw, json)
Hash identifier: iO1gTvmvwXPdIA+zyltfhXTAUchuQMooU9Rkvdfs/04=
Subject key identifier: AE:B5:D1:8D:E0:20:9D:9A:53:71:54:61:5B:26:F1:A6:8F:2D:68:40
Authority key identifier: 77:61:76:14:00:F2:48:97:48:0B:3A:CB:18:5C:89:ED:59:AA:03:ED
Certificate issuer: /CN=7761761400F24897480B3ACB185C89ED59AA03ED
Certificate serial: 3FDD32AC045CB0DDE9D38369C3047D4F42A3790F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 02:14:12 +0000
Manifest this update: Tue 22 Sep 2026 02:09:12 +0000
Manifest next update: Wed 23 Sep 2026 03:33:12 +0000
Files and hashes: 1: 7761761400F24897480B3ACB185C89ED59AA03ED.crl (hash: xdOt3pgMSFv2y1eZaVV2F2Y7pt3BoOQBzwswLig4wNs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.crl
rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:dd:32:ac:04:5c:b0:dd:e9:d3:83:69:c3:04:7d:4f:42:a3:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7761761400F24897480B3ACB185C89ED59AA03ED
Validity
Not Before: Sep 22 02:09:12 2026 GMT
Not After : Sep 23 03:33:12 2026 GMT
Subject: CN=AEB5D18DE0209D9A537154615B26F1A68F2D6840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:2f:6c:af:e8:5c:b5:41:8a:49:99:d6:62:
a3:e6:47:4d:24:05:54:21:a5:9a:ac:b5:fd:30:bc:
0c:dd:c7:0b:a1:88:bf:2b:8e:19:17:b0:22:04:2e:
af:c2:81:f3:30:4f:a6:00:fd:6d:75:16:36:a6:e2:
e1:65:63:28:2a:08:45:fd:2e:8c:ff:93:2a:f8:3b:
a1:ce:9e:51:54:51:84:61:b2:68:fe:ec:38:07:5e:
bb:27:f7:7b:9b:9d:b5:8c:9a:ad:59:ee:67:26:2a:
18:58:4e:89:5e:b9:dd:eb:be:95:54:98:63:9d:9d:
6e:6c:73:c5:86:e0:4d:64:f3:cb:07:75:69:06:fb:
63:85:ed:c9:fb:2c:a9:86:34:71:b5:e9:e6:ef:13:
e2:57:38:a3:9a:3c:4b:0c:84:f7:de:68:1f:f2:9f:
c9:47:28:00:0b:25:f0:6a:45:41:6b:d2:f4:92:04:
b6:51:28:4e:42:2c:84:cd:7c:c8:64:d5:cc:68:25:
18:5e:97:bb:2d:4b:e0:c0:8c:87:4f:df:61:58:77:
8f:17:ee:5b:9b:24:f6:da:d2:e0:96:5e:ca:2a:3d:
0e:b3:36:2b:2d:36:c1:c6:aa:76:02:f3:2a:f9:c1:
26:9a:fd:af:50:01:b0:1d:80:7c:05:ca:d5:75:2c:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:D1:8D:E0:20:9D:9A:53:71:54:61:5B:26:F1:A6:8F:2D:68:40
X509v3 Authority Key Identifier:
keyid:77:61:76:14:00:F2:48:97:48:0B:3A:CB:18:5C:89:ED:59:AA:03:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7761761400F24897480B3ACB185C89ED59AA03ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/7761761400F24897480B3ACB185C89ED59AA03ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:ba:98:7b:14:01:43:3f:31:6a:17:fb:ce:f7:9c:76:1a:
0a:5d:60:43:38:85:6f:3b:50:3b:3f:f8:b3:67:88:0f:14:df:
e0:a5:88:90:61:29:eb:e8:39:a2:79:a8:69:de:57:19:5a:c0:
48:43:f9:1e:a8:20:eb:56:55:2b:08:7b:11:c1:14:37:c8:9f:
78:6d:94:05:e2:81:6e:d2:04:43:18:5b:e9:b5:48:88:75:2c:
9c:78:26:a2:9f:3e:fb:4f:05:cf:e1:63:c5:f2:bb:2e:58:84:
dc:3f:7b:fc:64:0f:05:30:26:08:18:0b:60:e8:85:06:32:68:
25:88:62:e3:4e:10:ca:b0:25:14:c1:b3:29:44:7b:05:27:1e:
c3:c8:c0:24:b5:5e:e4:43:f1:d6:98:c8:82:9b:a5:59:ea:fc:
a3:6c:a2:c7:98:a6:2c:05:b9:a7:61:23:b2:16:95:19:db:1d:
b5:a3:a8:12:c0:0e:cf:d7:2a:53:2e:69:ce:fb:24:3e:18:a8:
9d:fc:2d:8d:31:31:6f:b5:83:81:e9:35:90:77:af:15:77:a8:
15:eb:c7:bd:14:78:62:e3:95:84:f7:0d:73:1b:ab:54:9f:05:
ba:5c:d2:5b:22:a8:0e:56:c8:7b:27:c0:ee:73:cf:d1:91:03:
4d:0c:b8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:50 2026 by rpki-client