
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft
File: 375BB2985478673C260242A779568A4435FE5916.mft (raw, json)
Hash identifier: wbLKXLZIynqhq+LFRUy2C7H4PpjAgdMXWqchZ7TQfNw=
Subject key identifier: 99:93:C1:7C:40:FE:FD:E0:1F:1A:A2:3D:44:BF:3B:9E:9B:2E:B4:CD
Authority key identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16
Certificate issuer: /CN=375BB2985478673C260242A779568A4435FE5916
Certificate serial: 4745B641B9BB325C0DB3C2FA34605BAB9484D3B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 15:46:06 +0000
Manifest this update: Tue 28 Jul 2026 15:41:06 +0000
Manifest next update: Wed 29 Jul 2026 16:20:06 +0000
Files and hashes: 1: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: r2opJlukM/WXY4Q2K0Bya1XcZKBiKs1jhLESJdrguEM=)
2: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: 2tzcr5upqyH9fZykdfFPqjFFvR9omuDbfe3zk3q54uE=)
3: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: ybt+IBuyxgaY4Z/OUPugnKAVbMyz/yKohUnz5iBtAcc=)
4: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: +khD6fTKppHI5JvHnZDJ36jLAF7NQSFlP020rk3Q+Bw=)
5: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: vkf0yRO25ABbOz67XbB5ZjYKpcZhyMtCimxrRdXql3I=)
6: 375BB2985478673C260242A779568A4435FE5916.crl (hash: PUnEQ9TaOKPjqWLwB3tDxceArtHG4jM72pancBgC9ms=)
7: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: 2SNG+J8YVnJEhFWEWTHXlYtdGDOPjiHimQkIYXb7fTk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl
rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:45:b6:41:b9:bb:32:5c:0d:b3:c2:fa:34:60:5b:ab:94:84:d3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375BB2985478673C260242A779568A4435FE5916
Validity
Not Before: Jul 28 15:41:06 2026 GMT
Not After : Jul 29 16:20:06 2026 GMT
Subject: CN=9993C17C40FEFDE01F1AA23D44BF3B9E9B2EB4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:43:c7:89:ba:d9:18:e9:21:a7:53:1d:65:
c6:4e:b3:bc:ac:79:d5:5a:66:f7:8a:ea:89:ed:2e:
e4:08:c8:92:5c:bb:37:2a:fe:e2:ff:fe:3e:c3:50:
fc:bd:7d:16:bf:24:86:0d:b2:83:4a:5a:9a:04:04:
e6:57:8d:0e:d7:eb:e6:5c:58:ad:56:61:64:d8:fc:
8e:c1:53:69:f1:12:e6:3e:b2:34:9f:37:82:1f:b9:
ac:e9:26:13:48:b4:9e:03:e6:85:cf:a4:e8:66:ea:
53:1d:06:b6:07:31:24:e8:6e:61:ee:1f:2f:66:c8:
4e:74:eb:fd:3b:f8:f4:60:48:da:f0:42:6b:58:22:
2d:67:34:1d:94:d9:95:5d:d5:bf:9c:54:98:43:83:
48:57:7e:09:d4:f1:44:db:ce:a2:de:ab:5a:3d:a0:
01:6a:49:03:12:a9:12:8b:22:41:b8:2e:90:d2:ae:
79:5a:53:c7:1f:c3:2f:fc:34:2c:45:ff:11:b7:c7:
5d:a5:92:33:67:e7:81:8d:6d:6c:1e:74:74:3f:2c:
84:c2:a9:6a:cc:15:17:52:f9:cc:d3:19:14:08:ad:
a2:04:2f:87:14:4d:3e:a1:1b:9c:d5:31:32:42:65:
2a:a8:0a:d7:29:ee:9e:cb:d0:03:d1:01:a6:88:3c:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:C1:7C:40:FE:FD:E0:1F:1A:A2:3D:44:BF:3B:9E:9B:2E:B4:CD
X509v3 Authority Key Identifier:
keyid:37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6a:f0:a9:75:89:da:9f:1e:0e:bf:35:7d:e2:a5:fa:e5:c9:
1d:75:e8:b7:61:4e:02:bc:84:72:58:cd:aa:a1:60:01:19:13:
c1:cc:0a:2f:7c:61:bf:f7:47:55:63:dc:0f:22:38:b3:52:3a:
4d:99:c9:ae:28:33:d8:79:89:f7:8d:61:b2:1c:52:ae:77:b0:
07:7a:cd:f9:61:78:8a:5d:20:7d:d7:11:d0:5b:74:69:e7:02:
78:c9:cf:6a:17:5c:cc:4e:f2:be:b5:b2:e9:be:a8:70:88:0e:
ff:6a:05:ef:63:64:40:27:d2:99:db:8a:90:3e:60:81:9c:df:
97:18:bf:5b:07:c3:1a:9c:b5:ba:91:93:67:7c:7b:63:70:d2:
96:77:ef:bc:46:91:e1:4e:55:fc:b2:e0:3e:40:83:ee:03:6c:
bf:07:79:58:1f:68:60:6c:1c:85:ad:1f:a1:ee:a2:93:a6:f4:
ec:3a:c8:92:37:31:4e:8e:8f:ac:23:ef:16:91:83:49:2f:1e:
85:b7:d8:be:d7:bd:3a:c9:3e:ff:fb:55:d4:31:e9:1a:fe:58:
78:36:40:b9:c1:6a:61:88:fe:6c:07:e1:65:84:f0:2b:84:1c:
84:90:28:c2:d1:64:b2:e2:32:e5:16:23:35:32:9a:2b:3e:62:
af:a2:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:31 2026 by rpki-client