
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft
File: C75B176F51C97718668FEDA09720687C8DBF14CD.mft (raw, json)
Hash identifier: NN5woeQuiM0cKqBzodWZRezKa77wdNyLaUeUPihIUAw=
Subject key identifier: 7D:63:E7:51:91:ED:1C:05:8B:1B:16:33:14:4F:81:FF:71:38:3A:9D
Authority key identifier: C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD
Certificate issuer: /CN=C75B176F51C97718668FEDA09720687C8DBF14CD
Certificate serial: 4B2069F1B51BA6C74348A609B0D1BEE7025BC9D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 00:42:25 +0000
Manifest this update: Mon 21 Sep 2026 00:37:25 +0000
Manifest next update: Tue 22 Sep 2026 04:03:25 +0000
Files and hashes: 1: C75B176F51C97718668FEDA09720687C8DBF14CD.crl (hash: rRpyxXUxOlGZgp3e4NDtUqnKnE/5kQPbqR3x5R2aQuc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl
rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:20:69:f1:b5:1b:a6:c7:43:48:a6:09:b0:d1:be:e7:02:5b:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C75B176F51C97718668FEDA09720687C8DBF14CD
Validity
Not Before: Sep 21 00:37:25 2026 GMT
Not After : Sep 22 04:03:25 2026 GMT
Subject: CN=7D63E75191ED1C058B1B1633144F81FF71383A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:8c:dc:69:61:7f:b6:b7:55:a7:7a:c6:cc:
e2:65:53:ef:0e:cd:e3:38:45:1d:11:67:00:e1:a6:
9f:bd:5e:1c:ad:19:52:33:28:43:f0:47:d1:d4:73:
16:3d:a8:f1:40:65:8b:64:59:dd:65:63:c2:dc:3b:
4a:a6:f0:34:99:8d:6f:90:f8:db:a0:48:39:50:fd:
82:1e:07:4d:d5:f9:4a:56:e4:fe:8f:8f:fb:67:7c:
60:b2:45:c4:58:4d:6b:f5:eb:c9:cf:ff:bd:cf:d2:
52:11:26:95:8a:69:f7:04:00:16:34:86:98:82:28:
94:18:55:d6:3f:7b:4d:94:5f:78:49:8b:f7:9d:7d:
04:2e:4f:1c:d4:25:6c:08:fe:7c:24:d7:a6:26:3f:
73:ba:b4:56:35:3d:ca:97:be:88:15:13:0e:97:a3:
3b:a7:d4:3b:c6:ae:ac:99:78:94:7f:b1:48:73:93:
df:a3:dc:3a:92:62:c6:48:3f:1f:5a:82:ba:87:e9:
73:83:bd:4e:a5:3b:1f:b7:cb:41:97:ed:f2:45:50:
4c:3d:6d:2b:a6:3c:c8:63:8e:cf:6d:8c:65:61:c8:
cc:4f:54:69:4b:ba:17:c2:40:95:7f:d3:52:3f:f5:
c5:63:b5:4a:15:cb:1b:b7:e2:b9:f9:8a:77:a5:e9:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:E7:51:91:ED:1C:05:8B:1B:16:33:14:4F:81:FF:71:38:3A:9D
X509v3 Authority Key Identifier:
keyid:C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:56:e3:80:b0:92:a2:ec:a5:9a:f1:61:75:f7:47:89:0c:06:
8a:f7:6f:d4:9c:33:cc:1a:68:e2:11:b3:0a:78:1a:40:95:2b:
47:3e:4b:b7:15:61:2a:a5:83:4e:6d:d1:70:7c:5c:d6:1e:3e:
d2:ca:16:ec:b7:bb:7e:69:2a:6e:b0:8a:09:c7:a9:a7:5f:3d:
e7:c5:d0:00:7d:80:db:92:d2:c1:1e:7e:27:46:58:6f:10:99:
df:73:4e:b2:49:cf:7a:8e:12:23:65:6d:20:8e:d9:38:f6:4c:
b6:76:3b:04:86:ee:55:fc:7d:82:5c:20:cc:aa:e0:1d:85:fb:
20:f3:7d:25:92:14:7a:c3:96:5a:61:f2:41:45:ee:3b:30:07:
94:fd:c1:91:4c:f5:02:ac:9c:08:38:52:a3:2d:ea:14:59:a1:
fa:e9:d5:80:97:13:b1:ae:41:d1:8b:49:15:ca:08:c2:ad:50:
c5:ec:5d:fa:bc:bb:8e:3d:ad:ab:2b:5a:53:6e:44:74:c7:3e:
99:15:b7:31:d5:92:0a:79:c4:4a:91:21:c3:d4:99:60:e7:6d:
2b:07:8d:81:76:5f:b0:55:5d:b1:e3:d6:54:8c:01:55:00:27:
b3:f2:ac:2a:a4:77:34:ef:30:83:c0:51:b8:b0:aa:46:dc:73:
a3:e1:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:24 2026 by rpki-client