
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
File: 0C75F355F1722A2E5EB758DF502B8C46518996E9.mft (raw, json)
Hash identifier: fzaJgrx/esmI5/ITF01W/h3rVFtoyLErxlZUgqWFLw8=
Subject key identifier: 2E:E8:AF:87:19:A9:E2:D4:C4:EE:23:0E:96:FC:5A:09:CD:58:21:EC
Authority key identifier: 0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9
Certificate issuer: /CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
Certificate serial: 36B444C6704C505F93EE8FC22CE26940A339BC43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 17:23:12 +0000
Manifest this update: Mon 21 Sep 2026 17:18:12 +0000
Manifest next update: Tue 22 Sep 2026 18:22:12 +0000
Files and hashes: 1: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: YcFbm0cjMQXhSHXz+D7KTmt9+oLCtHoQnn3BM3lUHaM=)
2: 0C75F355F1722A2E5EB758DF502B8C46518996E9.crl (hash: U55QQN6CLmOOYbspSCUIji9KFY/D0nVL9ArXFC7wYhY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl
rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b4:44:c6:70:4c:50:5f:93:ee:8f:c2:2c:e2:69:40:a3:39:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
Validity
Not Before: Sep 21 17:18:12 2026 GMT
Not After : Sep 22 18:22:12 2026 GMT
Subject: CN=2EE8AF8719A9E2D4C4EE230E96FC5A09CD5821EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:a2:91:43:a0:cf:a4:63:4d:c8:6a:63:e2:
82:f8:ca:0e:8b:35:85:b7:2b:71:8e:c8:65:90:91:
b9:eb:e8:ea:b2:3c:e5:e3:ac:ad:56:87:99:43:59:
d0:0b:72:7d:eb:fe:0d:04:00:34:77:87:cd:04:ef:
61:0d:c3:54:98:8d:ca:4c:2b:05:33:9b:4e:fe:c6:
50:ec:1e:22:d1:7c:d1:60:6d:da:c6:6c:68:61:77:
4d:b0:2e:6c:07:0d:be:25:a1:2f:31:29:70:7a:c4:
2d:4b:6a:41:a7:f7:fa:46:1a:56:8e:5d:99:73:b7:
1e:59:8a:fd:7d:cf:04:1d:ee:1a:58:4c:7e:f4:d7:
1a:ec:c5:77:52:87:f4:2b:3c:47:35:b0:c7:b1:d7:
fe:2e:30:b5:92:a2:8b:d2:25:66:c8:ca:10:20:29:
4d:94:f8:01:f3:d7:01:00:01:09:30:cc:19:05:89:
c0:b2:a0:d0:d2:a2:64:24:db:a8:51:d2:7d:97:4a:
8a:70:d0:85:de:b1:19:c7:6c:c2:26:14:38:82:9f:
70:61:9a:19:42:c9:5b:ab:4e:c8:94:be:0e:20:b9:
98:c7:4f:81:9e:1e:5b:e1:a9:03:e7:0b:e6:d3:7c:
b4:b3:77:76:b5:7b:91:35:29:b5:c7:83:4e:b7:31:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:AF:87:19:A9:E2:D4:C4:EE:23:0E:96:FC:5A:09:CD:58:21:EC
X509v3 Authority Key Identifier:
keyid:0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:22:e8:ff:48:5f:ea:16:88:01:a6:1a:ab:a2:eb:57:25:ae:
e9:72:ee:dc:f8:8b:45:79:6a:d0:ba:fe:2a:eb:20:ef:4a:c9:
c9:59:7d:b2:25:89:f9:c8:f9:61:2b:73:89:3a:d4:42:41:eb:
ad:a9:53:e8:1f:cd:d1:f5:36:98:07:37:66:c5:91:be:08:f5:
c5:84:c0:50:d6:ca:4d:71:58:c8:3e:44:05:4e:ca:5f:75:66:
74:a1:2b:d3:8e:4d:8e:9b:66:f3:9c:a5:c5:b1:c2:5d:d2:e8:
f9:d5:94:13:db:58:7a:80:57:fe:05:ba:54:a5:8d:82:6f:32:
ea:5e:80:2b:5e:39:39:b2:63:9e:1a:72:bd:29:7b:da:8f:fb:
c4:a6:a9:7a:32:ed:23:16:6e:3f:51:a8:80:b0:a7:36:c7:21:
9e:fe:98:a8:5f:2e:f9:7b:7d:84:01:7e:57:18:b5:37:4a:bf:
f2:c5:9b:70:f5:22:af:0b:bd:89:f6:d9:9c:aa:6c:f5:31:cf:
7d:81:a9:3e:a6:61:b8:3b:6f:b4:35:d1:6a:2a:7f:c6:9e:0e:
f8:71:59:36:54:fb:f0:c0:3c:3f:e6:f2:f8:c8:b6:8c:4e:10:
12:7d:a8:50:8e:4d:dd:2d:f4:a5:2a:0d:89:80:89:52:95:17:
18:5f:26:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNrRExnBMUF+T7o/CLOJpQKM5vEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM3NUYzNTVGMTcyMkEyRTVFQjc1OERGNTAyQjhDNDY1
MTg5OTZFOTAeFw0yNjA5MjExNzE4MTJaFw0yNjA5MjIxODIyMTJaMDMxMTAvBgNV
BAMTKDJFRThBRjg3MTlBOUUyRDRDNEVFMjMwRTk2RkM1QTA5Q0Q1ODIxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCol6KRQ6DPpGNNyGpj4oL4yg6L
NYW3K3GOyGWQkbnr6OqyPOXjrK1Wh5lDWdALcn3r/g0EADR3h80E72ENw1SYjcpM
KwUzm07+xlDsHiLRfNFgbdrGbGhhd02wLmwHDb4loS8xKXB6xC1LakGn9/pGGlaO
XZlztx5Ziv19zwQd7hpYTH701xrsxXdSh/QrPEc1sMex1/4uMLWSoovSJWbIyhAg
KU2U+AHz1wEAAQkwzBkFicCyoNDSomQk26hR0n2XSopw0IXesRnHbMImFDiCn3Bh
mhlCyVurTsiUvg4guZjHT4GeHlvhqQPnC+bTfLSzd3a1e5E1KbXHg063MditAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULuivhxmp4tTE7iMOlvxaCc1YIewwHwYDVR0j
BBgwFoAUDHXzVfFyKi5et1jfUCuMRlGJlukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2U1MDUzMTktYzMzZC00MzRhLWFiYzUtNmE2MWNlODUzZTk1LzAvMEM3NUYzNTVG
MTcyMkEyRTVFQjc1OERGNTAyQjhDNDY1MTg5OTZFOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQzc1RjM1NUYxNzIyQTJFNUVCNzU4REY1MDJCOEM0NjUxODk5
NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U1MDUzMTktYzMzZC00MzRhLWFi
YzUtNmE2MWNlODUzZTk1LzAvMEM3NUYzNTVGMTcyMkEyRTVFQjc1OERGNTAyQjhD
NDY1MTg5OTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH4i6P9IX+oWiAGmGqui61clruly7tz4i0V5
atC6/irrIO9KyclZfbIlifnI+WErc4k61EJB662pU+gfzdH1NpgHN2bFkb4I9cWE
wFDWyk1xWMg+RAVOyl91ZnShK9OOTY6bZvOcpcWxwl3S6PnVlBPbWHqAV/4FulSl
jYJvMupegCteOTmyY54acr0pe9qP+8SmqXoy7SMWbj9RqICwpzbHIZ7+mKhfLvl7
fYQBflcYtTdKv/LFm3D1Iq8LvYn22ZyqbPUxz32BqT6mYbg7b7Q10Woqf8aeDvhx
WTZU+/DAPD/m8vjItoxOEBJ9qFCOTd0t9KUqDYmAiVKVFxhfJo0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:59 2026 by rpki-client