
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
File: A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft (raw, json)
Hash identifier: SLJWYom0q7r+cNtVlMfaq2t40rMCR5XsILTsSfy5NGw=
Subject key identifier: 20:B7:8C:46:90:4E:90:1D:D6:8A:BC:AA:3E:3D:0D:AA:11:67:C6:A5
Authority key identifier: A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F
Certificate issuer: /CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
Certificate serial: 244796AA99A50041DBF4D93024865B0B5929B5AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 19:56:30 +0000
Manifest this update: Sun 20 Sep 2026 19:51:30 +0000
Manifest next update: Mon 21 Sep 2026 20:47:30 +0000
Files and hashes: 1: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: Er3H+NoE/qoCZ0NYTHj60F9W/pBp8HuIir1H+XZwb1g=)
2: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: kdJxfQhpW6OgT8LyJDD+nLxEF80rT+HXCJxnMNo6540=)
3: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: iEOirfkgczYrzGd99jmi+CiuNPWk8r0epFlglE1baOk=)
4: A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl (hash: p6XzyYL6ChLUdrt2u51PFFpDhdnseVnZ1Y85P2JRVs0=)
5: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: F6YSAuATIsBxma88CzXV1skAHkxyPFVdfsSvO2q3IYM=)
6: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: PWbgnuZ3gY3I9+iqPkGiWxqH6JeAe8KDOepdMcIDtEw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl
rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:47:96:aa:99:a5:00:41:db:f4:d9:30:24:86:5b:0b:59:29:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A756644413E3B0EEE4F12FAD5122BD7A104B029F
Validity
Not Before: Sep 20 19:51:30 2026 GMT
Not After : Sep 21 20:47:30 2026 GMT
Subject: CN=20B78C46904E901DD68ABCAA3E3D0DAA1167C6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:dd:7f:5d:17:26:96:1b:73:87:0a:e9:c7:
e3:85:a8:17:b8:57:95:8c:24:fb:a0:f5:22:3c:37:
eb:aa:de:5a:03:58:0b:9c:9e:62:66:75:c9:85:06:
02:95:6f:d0:11:9c:6b:f3:99:62:3f:5a:ed:9e:5b:
76:5b:94:60:8f:9a:06:96:93:3c:77:24:1f:0d:47:
e2:20:4f:fe:65:78:49:ef:c8:25:2e:a0:8f:21:b1:
6e:5d:e6:36:16:54:e3:86:a8:7e:94:92:57:f8:d2:
be:84:52:e5:14:73:96:0b:27:eb:22:0c:b2:27:77:
aa:f2:73:1b:de:93:69:ec:dc:f8:0a:38:68:e2:79:
8c:fb:27:78:ad:f7:0d:5b:e9:e5:06:66:44:4c:7f:
d0:95:de:e9:5f:02:9f:11:16:23:b3:c4:5f:f6:84:
99:5c:8d:74:b0:60:86:31:37:46:89:de:9f:f8:0d:
54:96:d1:e8:2a:57:6b:de:1b:bc:44:99:a9:0d:aa:
77:e0:53:53:99:99:87:8c:4e:5a:1a:1f:ad:5f:f6:
47:2f:14:63:15:4c:3b:20:d5:72:ce:1f:3f:c6:f9:
13:1d:9e:67:85:15:0d:15:3b:bb:06:67:e2:a3:33:
f8:e4:a1:50:01:7e:96:06:f1:6d:c4:24:2f:c1:96:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:8C:46:90:4E:90:1D:D6:8A:BC:AA:3E:3D:0D:AA:11:67:C6:A5
X509v3 Authority Key Identifier:
keyid:A7:56:64:44:13:E3:B0:EE:E4:F1:2F:AD:51:22:BD:7A:10:4B:02:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A756644413E3B0EEE4F12FAD5122BD7A104B029F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/A756644413E3B0EEE4F12FAD5122BD7A104B029F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:e7:8b:4e:5c:63:74:a2:9a:dd:b5:fd:a4:ed:df:b4:75:
6b:d3:b2:d9:6c:80:8a:a2:64:32:bd:56:09:fa:8f:e2:4b:08:
45:2a:07:da:8d:e6:89:78:06:74:32:9c:3a:61:d2:e8:9e:6a:
38:7b:5f:96:1e:36:bb:9e:79:c0:dc:62:ba:a3:2e:e6:1f:56:
75:09:d3:16:f7:c7:6f:0a:eb:00:82:ab:fd:66:87:b7:0a:9b:
fd:b5:6b:db:ad:ea:12:fe:b8:a2:08:2e:b0:3d:fe:03:21:5b:
02:2f:d2:01:54:cc:fd:a1:43:a0:b5:9e:d1:c0:2a:b2:99:eb:
72:3c:31:d5:81:29:31:e0:c4:07:97:8b:4d:65:e8:58:fa:02:
99:be:b8:f6:04:ea:02:86:86:1c:fc:72:5d:e7:c4:6f:b3:7f:
12:73:1c:b8:ae:50:e9:f3:02:ad:a5:30:6f:ba:33:de:7e:de:
9e:84:2a:c0:8b:28:53:31:8e:3a:59:47:83:29:4d:5b:73:18:
39:32:ba:2d:d6:ef:98:d9:82:9f:c7:da:44:47:d9:46:91:c1:
e8:60:a4:e1:5a:c3:dc:ab:1d:cf:85:20:70:a8:6d:fa:51:f7:
70:93:cb:b3:87:cc:17:94:b6:c2:c6:1e:af:c3:8b:db:2c:66:
57:11:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:00 2026 by rpki-client