
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json)
Hash identifier: etZyoWM0OVTpsbcdMq8gWaBn1/3Jb7hjAsKvRtlh/ao=
Subject key identifier: EB:BB:06:E6:E4:16:E5:BE:71:2A:77:45:59:74:7F:40:2C:65:00:EC
Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0
Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
Certificate serial: 3D0BE94E026DD6EF8261D8F868FC63A890C93AE4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 00:42:01 +0000
Manifest this update: Wed 29 Jul 2026 00:37:01 +0000
Manifest next update: Thu 30 Jul 2026 02:28:01 +0000
Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=)
2: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: Q3oLATnD/4dGdXSv8flM1PFCVDSufn8ZpXipVaS6SU8=)
3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl
rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0b:e9:4e:02:6d:d6:ef:82:61:d8:f8:68:fc:63:a8:90:c9:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0
Validity
Not Before: Jul 29 00:37:01 2026 GMT
Not After : Jul 30 02:28:01 2026 GMT
Subject: CN=EBBB06E6E416E5BE712A774559747F402C6500EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:01:c9:5a:d3:a5:8a:a1:19:27:40:20:77:
70:e5:6b:7e:df:36:91:fc:d2:3f:d1:81:0f:df:0b:
c0:09:d6:45:ac:fe:6f:a2:eb:7b:f9:f7:28:20:b3:
60:4c:60:5b:47:1e:3b:12:84:70:25:6f:3d:86:07:
c1:b4:06:c8:c5:0c:de:bc:6f:8e:23:21:a1:5a:72:
58:9c:8c:37:6d:6e:84:a6:be:5c:54:7e:82:c7:0b:
32:ea:93:39:d4:4a:b5:14:78:df:6a:cb:6e:df:26:
5c:73:12:37:52:ff:30:2b:72:ce:82:8a:9c:02:8f:
4d:3b:b1:4c:5c:49:1a:66:fc:e5:5a:3b:3e:79:56:
af:88:40:92:b3:f9:28:c2:ff:9c:d2:df:df:2c:19:
dc:b2:90:5e:2d:f5:1e:39:56:86:57:0e:9f:89:da:
dc:61:a9:d1:7f:1c:f0:95:31:4e:f6:ea:e3:41:ad:
26:36:63:47:de:65:ad:fa:9b:ca:46:59:cc:74:1d:
fb:8b:30:10:69:95:84:1c:bb:d3:ca:3d:59:b8:f7:
f1:6b:8c:40:a5:bf:ff:75:63:2e:83:f0:44:e7:9f:
b2:fa:67:d9:24:2d:68:58:39:fd:51:65:c3:5d:43:
8b:71:99:cf:49:3a:fa:60:16:4c:72:24:52:17:5a:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:06:E6:E4:16:E5:BE:71:2A:77:45:59:74:7F:40:2C:65:00:EC
X509v3 Authority Key Identifier:
keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:15:04:6f:ba:62:90:03:77:23:40:9e:8e:c9:2a:04:b0:
9b:87:c1:02:76:5e:1c:66:df:52:14:bb:6a:be:09:05:82:ae:
b6:ce:3f:73:e9:f0:7f:74:39:2f:c3:a9:69:61:7e:8d:51:c3:
75:4e:12:68:c2:bd:da:da:1a:92:f6:33:f5:33:d1:42:bd:2a:
df:ce:aa:03:a5:5e:70:73:58:ca:33:ef:fc:89:8e:5f:48:45:
a6:29:59:f6:a5:2b:6a:51:18:3b:be:50:ae:c0:29:5b:6b:6b:
a3:f9:57:2c:fa:f4:98:6e:d4:01:c6:de:55:ef:b3:2a:69:03:
1f:17:e3:74:ed:d2:37:50:48:f4:08:72:f6:78:83:3e:cd:33:
80:b0:b7:56:15:28:e5:e2:81:5e:e5:9e:6e:c1:d1:29:bc:92:
e4:78:87:07:2c:cf:ec:25:6f:f2:69:0a:60:47:b0:e3:81:7b:
92:62:42:9c:79:bb:18:65:16:00:5c:3a:fc:7c:4f:ab:a0:ef:
0b:2a:5e:2f:d1:23:55:62:76:68:ec:0e:bd:f1:7d:cf:4c:3e:
34:9f:61:5f:84:5a:4f:6c:35:9f:86:ab:4d:e0:7e:4e:0a:8d:
05:7b:a0:4d:67:f7:56:5e:99:a5:a6:77:2b:84:64:4e:18:5e:
1a:35:0a:bd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPQvpTgJt1u+CYdj4aPxjqJDJOuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz
QzE1NEVBMDAeFw0yNjA3MjkwMDM3MDFaFw0yNjA3MzAwMjI4MDFaMDMxMTAvBgNV
BAMTKEVCQkIwNkU2RTQxNkU1QkU3MTJBNzc0NTU5NzQ3RjQwMkM2NTAwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8QHJWtOliqEZJ0Agd3Dla37f
NpH80j/RgQ/fC8AJ1kWs/m+i63v59yggs2BMYFtHHjsShHAlbz2GB8G0BsjFDN68
b44jIaFaclicjDdtboSmvlxUfoLHCzLqkznUSrUUeN9qy27fJlxzEjdS/zArcs6C
ipwCj007sUxcSRpm/OVaOz55Vq+IQJKz+SjC/5zS398sGdyykF4t9R45VoZXDp+J
2txhqdF/HPCVMU726uNBrSY2Y0feZa36m8pGWcx0HfuLMBBplYQcu9PKPVm49/Fr
jEClv/91Yy6D8ETnn7L6Z9kkLWhYOf1RZcNdQ4txmc9JOvpgFkxyJFIXWtrrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU67sG5uQW5b5xKndFWXR/QCxlAOwwHwYDVR0j
BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx
REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0
RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0
NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND
QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGbWFQRvumKQA3cjQJ6OySoEsJuHwQJ2Xhxm
31IUu2q+CQWCrrbOP3Pp8H90OS/DqWlhfo1Rw3VOEmjCvdraGpL2M/Uz0UK9Kt/O
qgOlXnBzWMoz7/yJjl9IRaYpWfalK2pRGDu+UK7AKVtra6P5Vyz69Jhu1AHG3lXv
syppAx8X43Tt0jdQSPQIcvZ4gz7NM4Cwt1YVKOXigV7lnm7B0Sm8kuR4hwcsz+wl
b/JpCmBHsOOBe5JiQpx5uxhlFgBcOvx8T6ug7wsqXi/RI1VidmjsDr3xfc9MPjSf
YV+EWk9sNZ+Gq03gfk4KjQV7oE1n91ZemaWmdyuEZE4YXho1Cr0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:35 2026 by rpki-client