
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json)
Hash identifier: VcliZySOIasRoFHCt615RfcwmsMWkZ2gNAJweyTGOMY=
Subject key identifier: 84:C3:30:00:1F:74:EB:28:71:AB:32:54:F4:88:F5:D6:C3:06:30:E0
Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Certificate serial: 69AB6035A2F668A9F7D1245A7B5C78766A451218
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 20:26:42 +0000
Manifest this update: Tue 28 Jul 2026 20:21:42 +0000
Manifest next update: Thu 30 Jul 2026 00:18:42 +0000
Files and hashes: 1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=)
2: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: Oj6p6TfhLaxrfUEkQpD5hdBvUbrTfElhOpMp7q/Pa1I=)
3: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=)
4: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ab:60:35:a2:f6:68:a9:f7:d1:24:5a:7b:5c:78:76:6a:45:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6
Validity
Not Before: Jul 28 20:21:42 2026 GMT
Not After : Jul 30 00:18:42 2026 GMT
Subject: CN=84C330001F74EB2871AB3254F488F5D6C30630E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:fa:34:2f:39:d2:d9:32:93:8d:25:57:95:
45:d8:c1:6b:f3:98:d4:1e:1b:94:68:ad:d8:8f:e8:
b4:25:a6:da:5b:c9:e7:23:0d:5d:35:d1:8e:23:2c:
23:1f:84:b0:59:fd:7b:f3:31:88:31:de:eb:cb:5c:
59:58:65:97:e2:a9:53:bd:93:bc:4f:7d:68:49:18:
3c:58:f7:6c:f4:70:dd:d3:03:13:2c:da:3a:81:c7:
d6:0b:c4:02:7e:12:99:2b:2d:8c:41:73:7d:7f:2c:
e2:23:02:74:60:1e:97:7c:88:52:ed:93:a2:fb:c0:
28:b9:61:8f:e5:6f:13:37:e1:ae:a7:b5:8e:93:16:
0d:aa:4c:a5:f4:39:25:77:9f:3a:6c:53:62:7c:aa:
05:8e:50:ca:1f:6a:2a:68:ea:9b:f0:b4:4c:f2:92:
b0:1a:2a:86:58:91:99:e7:95:7a:7d:60:2d:f9:70:
ff:36:08:dc:94:9d:74:28:a8:96:30:c1:ed:24:47:
13:50:81:56:8c:21:45:99:44:8b:e9:3c:78:ae:08:
a9:60:ee:02:0d:a8:fc:bb:8c:13:8d:f8:a3:86:b9:
28:23:52:76:4e:17:e0:41:42:d6:44:f6:05:f0:2d:
0a:57:74:69:65:c6:ab:7e:29:3f:ec:12:62:87:9e:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:30:00:1F:74:EB:28:71:AB:32:54:F4:88:F5:D6:C3:06:30:E0
X509v3 Authority Key Identifier:
keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:6a:01:8d:7b:79:de:de:97:75:82:3d:a7:45:7c:2f:d6:
e3:51:10:6f:da:76:6d:ab:f5:10:9d:ee:9d:a0:40:d5:77:ba:
14:6b:59:e2:81:5c:82:db:e0:04:8b:2f:3a:3e:91:a8:fb:8a:
fb:96:06:13:1e:ec:38:45:88:30:48:10:b1:22:f2:92:8e:1b:
9f:0a:d2:cb:89:09:b0:bf:b2:a7:2c:5c:ca:62:14:bd:d3:e8:
82:a1:dc:5b:3d:95:d4:be:32:93:b9:a5:6b:52:c1:e4:e5:79:
73:10:48:70:27:9f:a6:7d:b4:d0:de:94:93:ee:3f:7c:2e:77:
e5:4d:9c:7c:c1:b7:c2:01:bc:71:08:9a:8f:51:e3:f4:52:39:
02:2a:6d:c2:05:28:84:f0:c3:73:52:4c:76:90:3c:48:f9:71:
1e:a4:08:3e:3c:46:1e:11:f5:ef:85:5f:77:e1:89:67:a1:20:
68:d9:31:05:6f:31:d9:a0:6b:66:37:da:4f:6f:ac:a3:32:9e:
b8:f0:51:22:54:79:4f:68:15:0b:74:32:c5:30:0d:c1:bf:67:
32:d7:d5:27:d8:2f:f5:b6:f0:ef:f7:cf:7a:d0:83:50:77:b7:
fc:8e:b8:01:8f:94:16:37:16:77:84:80:75:66:1f:69:86:43:
a7:d8:8d:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaatgNaL2aKn30SRae1x4dmpFEhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5
NTMyOTZBNjAeFw0yNjA3MjgyMDIxNDJaFw0yNjA3MzAwMDE4NDJaMDMxMTAvBgNV
BAMTKDg0QzMzMDAwMUY3NEVCMjg3MUFCMzI1NEY0ODhGNUQ2QzMwNjMwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDfo0LznS2TKTjSVXlUXYwWvz
mNQeG5RordiP6LQlptpbyecjDV010Y4jLCMfhLBZ/XvzMYgx3uvLXFlYZZfiqVO9
k7xPfWhJGDxY92z0cN3TAxMs2jqBx9YLxAJ+EpkrLYxBc31/LOIjAnRgHpd8iFLt
k6L7wCi5YY/lbxM34a6ntY6TFg2qTKX0OSV3nzpsU2J8qgWOUMofaipo6pvwtEzy
krAaKoZYkZnnlXp9YC35cP82CNyUnXQoqJYwwe0kRxNQgVaMIUWZRIvpPHiuCKlg
7gINqPy7jBON+KOGuSgjUnZOF+BBQtZE9gXwLQpXdGllxqt+KT/sEmKHnq6RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhMMwAB906yhxqzJU9Ij11sMGMOAwHwYDVR0j
BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3
N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5
NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC
Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAEfagGNe3ne3pd1gj2nRXwv1uNREG/adm2r
9RCd7p2gQNV3uhRrWeKBXILb4ASLLzo+kaj7ivuWBhMe7DhFiDBIELEi8pKOG58K
0suJCbC/sqcsXMpiFL3T6IKh3Fs9ldS+MpO5pWtSweTleXMQSHAnn6Z9tNDelJPu
P3wud+VNnHzBt8IBvHEImo9R4/RSOQIqbcIFKITww3NSTHaQPEj5cR6kCD48Rh4R
9e+FX3fhiWehIGjZMQVvMdmga2Y32k9vrKMynrjwUSJUeU9oFQt0MsUwDcG/ZzLX
1SfYL/W28O/3z3rQg1B3t/yOuAGPlBY3FneEgHVmH2mGQ6fYjeM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:13 2026 by rpki-client