
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json)
Hash identifier: tfnMk85dkoqjQgwl8gpZk90muOicqpzbaJVcPBNjU7U=
Subject key identifier: C4:E8:91:6E:F2:61:02:4D:B1:B4:04:16:E1:90:E9:64:EF:C3:C1:A5
Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED
Certificate serial: 2E5295AC629B6EFA0E0C5C615EC15110801A6069
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 10:28:30 +0000
Manifest this update: Wed 29 Jul 2026 10:23:30 +0000
Manifest next update: Thu 30 Jul 2026 12:24:30 +0000
Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=)
2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=)
3: D88374740C8E344956042586CFB98762292C9BED.crl (hash: W29uSieoAscK5taNubwUbmGN3mUyJxJoY36dcjudIAQ=)
4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 12:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:52:95:ac:62:9b:6e:fa:0e:0c:5c:61:5e:c1:51:10:80:1a:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D88374740C8E344956042586CFB98762292C9BED
Validity
Not Before: Jul 29 10:23:30 2026 GMT
Not After : Jul 30 12:24:30 2026 GMT
Subject: CN=C4E8916EF261024DB1B40416E190E964EFC3C1A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:a1:63:83:f2:66:39:2e:73:e2:ed:b5:ba:
da:ed:ea:1a:fa:14:4c:52:4f:1e:2d:b7:01:df:da:
6d:e8:2b:6c:71:c2:23:1a:0f:dd:1a:76:5b:56:9f:
8c:e7:a9:c3:fd:12:7e:59:22:06:3c:06:cd:93:d8:
bf:d8:71:86:b4:22:4a:a6:97:25:41:6e:89:91:7e:
4c:26:db:bc:5d:c1:ce:29:9d:0e:ac:66:a4:52:ff:
91:0c:d4:9d:9b:79:90:6c:33:7d:1f:75:24:33:3b:
f6:29:05:1e:4c:0a:d1:e6:a4:46:9c:6e:34:12:33:
8b:fe:49:fd:72:30:ef:d2:5c:6d:37:5c:e5:ff:6d:
e1:9e:5f:11:9a:3d:13:8b:ab:c0:1a:52:75:7a:97:
23:72:c9:85:49:92:fe:65:8b:d8:20:55:17:b9:64:
a9:ac:92:cc:bf:7d:c0:f3:9c:85:8a:91:42:ac:45:
13:69:5e:73:c2:72:60:ce:ad:3e:73:ae:d9:aa:2b:
e8:9b:ef:09:bf:bc:d8:2e:7b:0f:31:eb:97:fb:26:
08:c0:1b:b9:af:44:71:67:1a:8e:fb:7d:bb:c4:ce:
d4:cd:a1:fb:e3:de:4f:aa:59:a0:fc:4e:48:6e:87:
b0:82:20:76:d7:91:46:d2:17:6a:60:9a:50:24:f2:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:91:6E:F2:61:02:4D:B1:B4:04:16:E1:90:E9:64:EF:C3:C1:A5
X509v3 Authority Key Identifier:
keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:28:75:4e:f3:2b:a9:27:5b:60:75:2b:94:74:2e:f8:12:
7d:da:69:92:bf:60:33:39:7d:6e:95:8a:a9:ae:09:d6:f2:11:
19:ec:ea:ff:00:ba:e5:5f:ff:ea:6a:2b:86:85:7d:9b:ce:6c:
0b:68:d5:d7:47:8a:b0:f8:21:c6:d6:7b:56:12:c8:6a:ce:85:
da:31:7b:ba:00:ec:de:a7:fd:d5:d8:62:a1:67:4b:5e:7d:c0:
b0:96:60:99:ce:f8:3e:7b:75:06:a1:52:b7:46:27:39:45:e1:
5e:ba:25:ab:11:69:31:1d:cf:e0:f9:ed:46:50:9c:ea:fb:fa:
36:86:61:4c:c5:16:20:f4:52:09:2f:ca:43:4e:a9:95:55:de:
58:6d:7a:02:a0:33:cb:43:3c:ff:28:f4:8c:6f:f3:7a:81:0e:
a3:44:63:e6:28:31:6b:73:50:97:f8:45:39:cd:1d:b5:67:9e:
6c:f4:04:9e:6f:79:d3:d2:06:26:a1:e5:09:8d:33:33:4f:45:
da:ea:b9:fc:8f:f1:db:5c:fc:ae:21:01:90:90:4e:c8:1e:df:
11:9b:c8:3c:0d:12:f6:17:84:a8:ea:88:99:ed:c7:f8:65:49:
b0:2a:3e:ba:81:7f:60:49:26:47:d7:b5:f0:26:84:0f:20:eb:
2f:f9:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:48 2026 by rpki-client