
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft
File: 175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft (raw, json)
Hash identifier: kIVDxHLWjWsz9HKlNRSkZj/+s9KXd/97OSyEW6HustQ=
Subject key identifier: 12:E0:A3:2B:A0:F6:2A:73:EC:39:EA:8F:00:24:65:30:DC:6A:66:59
Authority key identifier: 17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24
Certificate issuer: /CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024
Certificate serial: 1DCCD23A8BD183F35A3021AD93D1A8D07B34AB6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 14:55:28 +0000
Manifest this update: Sun 20 Sep 2026 14:50:28 +0000
Manifest next update: Mon 21 Sep 2026 15:39:28 +0000
Files and hashes: 1: 3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (hash: vgB910N17H/8EA61cYkEzcJDMSXZKxKOBtMQhiSpiR8=)
2: 3230322e34332e36342e302f32342d3234203d3e203435333233.roa (hash: kd5X3aWuvmW67I45MCTvzwAMaeTd4OMwLlRd3nUpm7I=)
3: 3230322e34332e36352e302f32342d3234203d3e203435333233.roa (hash: c6hdy6h3i1f1rLa2ErTUO1eTi9ZbUz781ZUqD68CELk=)
4: 175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl (hash: OBsBGo0SzNO9PSznSOpvxHnBekRfWEO2eOKwm2DdCSQ=)
5: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: 3omtH0gia780DFyQ29c+VBozmVqrhGPgDCowWGzyQNY=)
6: 3230322e34332e36342e302f32332d3233203d3e203435333233.roa (hash: OvBBs++V7emF9OehzRM0FMmOsHlAddNrQdbMcRn58fc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl
rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 15:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cc:d2:3a:8b:d1:83:f3:5a:30:21:ad:93:d1:a8:d0:7b:34:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024
Validity
Not Before: Sep 20 14:50:28 2026 GMT
Not After : Sep 21 15:39:28 2026 GMT
Subject: CN=12E0A32BA0F62A73EC39EA8F00246530DC6A6659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:91:35:a3:02:dc:18:8a:d6:ba:d4:a7:12:
e8:14:a3:55:63:c0:a6:f8:ff:19:e4:e0:28:40:47:
e4:21:ba:2c:0c:c8:40:c1:03:79:25:d0:e6:38:10:
d5:d4:91:7d:95:44:43:75:ac:94:ba:34:cb:b4:03:
26:80:1b:43:40:ea:79:08:df:e2:a7:37:fa:a7:2d:
e3:66:4f:65:67:21:79:f0:c6:0a:e0:7e:bb:bf:dd:
22:7a:1c:a2:48:8b:29:09:5e:fc:1d:61:bc:b1:ac:
51:cd:58:55:5a:c3:9c:f0:16:52:70:76:75:c7:c2:
53:a7:00:cf:7e:e6:47:1f:17:84:65:56:0c:24:a0:
6a:bf:31:4f:53:01:b3:e9:d8:d2:d9:b4:6d:aa:f2:
20:75:47:f3:8e:70:4e:12:ac:56:39:a1:81:8b:66:
cd:b6:a9:f5:b9:d8:71:a0:17:bd:51:26:bb:c4:61:
f7:7a:d8:be:44:f6:a5:d3:36:ed:c5:f7:72:00:d1:
41:91:3e:e6:4e:26:cc:87:da:87:b1:0c:54:11:5d:
0d:f8:cf:f8:ad:d1:c5:f7:8c:4b:03:8e:13:15:f1:
e8:9a:4b:ab:79:e8:2f:0e:d5:e3:58:3a:cc:cc:e4:
4b:3b:94:3a:ec:4e:3d:69:cb:a0:83:8c:a4:1b:f1:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:A3:2B:A0:F6:2A:73:EC:39:EA:8F:00:24:65:30:DC:6A:66:59
X509v3 Authority Key Identifier:
keyid:17:5F:4B:94:FE:60:8C:AF:3A:DE:2F:B6:C5:E7:54:53:AB:2D:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/175F4B94FE608CAF3ADE2FB6C5E75453AB2DD024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:05:06:da:37:a4:1f:25:ca:93:18:c2:ed:64:a2:f5:f7:
79:46:53:21:74:75:85:d5:95:35:e0:d5:e0:81:d6:b4:f1:dc:
6a:9a:85:a0:06:d9:f3:81:4b:cd:a5:84:0c:4d:37:d0:48:a5:
8d:d7:82:99:40:fe:c7:03:48:7c:a8:8e:d2:67:8f:97:cb:1e:
7a:be:03:ce:17:f2:b9:a3:a5:e3:84:da:06:2c:95:d1:0e:15:
97:2f:33:c7:ce:67:c8:7e:34:fd:e8:df:c9:88:a9:0a:b8:ea:
1f:3f:0b:32:3e:dc:27:be:92:b3:4b:d2:1f:3a:1a:0c:14:36:
f3:45:f8:16:3f:39:e4:89:4a:e5:12:19:6a:18:a1:de:47:78:
a2:b9:1b:d1:b9:16:c6:4b:62:c8:5a:ce:2b:03:43:d3:77:99:
ba:1a:7f:22:68:97:c6:5e:09:38:cd:d3:7c:63:0a:75:e1:99:
4a:ac:1b:14:b6:9f:4f:90:78:2c:4f:46:8d:d4:df:6b:19:b6:
11:6c:f3:c2:93:b7:5e:4d:df:da:ef:98:a7:10:f4:c7:0c:f8:
14:44:b3:dd:78:49:b3:1c:c5:7a:ae:d2:40:c3:0c:ec:7d:db:
06:34:c8:1a:40:8b:bb:2b:34:19:ea:32:b0:17:dc:5f:f2:09:
87:3d:37:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHczSOovRg/NaMCGtk9Go0Hs0q24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc1RjRCOTRGRTYwOENBRjNBREUyRkI2QzVFNzU0NTNB
QjJERDAyNDAeFw0yNjA5MjAxNDUwMjhaFw0yNjA5MjExNTM5MjhaMDMxMTAvBgNV
BAMTKDEyRTBBMzJCQTBGNjJBNzNFQzM5RUE4RjAwMjQ2NTMwREM2QTY2NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJJE1owLcGIrWutSnEugUo1Vj
wKb4/xnk4ChAR+QhuiwMyEDBA3kl0OY4ENXUkX2VREN1rJS6NMu0AyaAG0NA6nkI
3+KnN/qnLeNmT2VnIXnwxgrgfru/3SJ6HKJIiykJXvwdYbyxrFHNWFVaw5zwFlJw
dnXHwlOnAM9+5kcfF4RlVgwkoGq/MU9TAbPp2NLZtG2q8iB1R/OOcE4SrFY5oYGL
Zs22qfW52HGgF71RJrvEYfd62L5E9qXTNu3F93IA0UGRPuZOJsyH2oexDFQRXQ34
z/it0cX3jEsDjhMV8eiaS6t56C8O1eNYOszM5Es7lDrsTj1py6CDjKQb8S0NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEuCjK6D2KnPsOeqPACRlMNxqZlkwHwYDVR0j
BBgwFoAUF19LlP5gjK863i+2xedUU6st0CQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGNmMDBmOGEtNWNiZC00NjBmLWJmYzYtYmQ4OTQyYjY1MzdjLzAvMTc1RjRCOTRG
RTYwOENBRjNBREUyRkI2QzVFNzU0NTNBQjJERDAyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNzVGNEI5NEZFNjA4Q0FGM0FERTJGQjZDNUU3NTQ1M0FCMkRE
MDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm
YzYtYmQ4OTQyYjY1MzdjLzAvMTc1RjRCOTRGRTYwOENBRjNBREUyRkI2QzVFNzU0
NTNBQjJERDAyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJOtBQbaN6QfJcqTGMLtZKL193lGUyF0dYXV
lTXg1eCB1rTx3GqahaAG2fOBS82lhAxNN9BIpY3XgplA/scDSHyojtJnj5fLHnq+
A84X8rmjpeOE2gYsldEOFZcvM8fOZ8h+NP3o38mIqQq46h8/CzI+3Ce+krNL0h86
GgwUNvNF+BY/OeSJSuUSGWoYod5HeKK5G9G5FsZLYshazisDQ9N3mboafyJol8Ze
CTjN03xjCnXhmUqsGxS2n0+QeCxPRo3U32sZthFs88KTt15N39rvmKcQ9McM+BRE
s914SbMcxXqu0kDDDOx92wY0yBpAi7srNBnqMrAX3F/yCYc9N1c=
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:42 2026 by rpki-client