
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json)
Hash identifier: mM/a1p1pSaOZM9//Au0S6bg42mo8M4KiHoRSQtd6UWs=
Subject key identifier: 01:F4:1D:41:F3:97:51:91:DD:79:85:5B:BC:1C:55:28:30:6E:08:DF
Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Certificate serial: 396500D60A299B2A17FA0F400DDAB7C11A6EF0D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 12:15:45 +0000
Manifest this update: Wed 29 Jul 2026 12:10:45 +0000
Manifest next update: Thu 30 Jul 2026 15:41:45 +0000
Files and hashes: 1: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=)
2: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=)
3: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=)
4: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=)
5: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=)
6: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: v+5v5vhGbpt0S8gyNStdeN4yoVg1GfZmor6QMtWnr/Y=)
7: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:65:00:d6:0a:29:9b:2a:17:fa:0f:40:0d:da:b7:c1:1a:6e:f0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Validity
Not Before: Jul 29 12:10:45 2026 GMT
Not After : Jul 30 15:41:45 2026 GMT
Subject: CN=01F41D41F3975191DD79855BBC1C5528306E08DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:1e:59:58:44:ee:a0:49:1b:a3:84:0e:20:
92:a4:e0:f6:dd:8e:d0:68:44:c2:20:f2:1a:37:6f:
7a:ba:b5:a0:22:6f:2d:a6:89:5f:d8:dd:7c:3f:68:
44:03:58:19:68:7c:be:c6:b5:6f:7b:99:53:69:ea:
e6:3a:50:ae:ea:b2:35:0c:d2:30:88:31:3a:8e:e2:
e4:72:40:44:5a:5d:9d:00:6e:1c:a1:a4:35:8e:49:
f1:31:e0:7d:f8:a0:3f:30:61:68:7e:fa:70:be:ba:
43:16:64:b1:a7:a4:9a:fb:59:e3:c3:ce:b8:37:04:
85:41:ae:95:15:be:5f:77:66:75:8e:0b:f7:96:cd:
88:97:72:7f:27:92:22:19:ef:15:af:dd:c7:7b:46:
ef:e0:4c:5d:e4:9b:cd:bd:03:55:c4:5b:c9:d4:c4:
e2:b8:3a:af:f0:c8:e0:fb:3c:99:5d:79:21:27:98:
12:7e:c1:43:19:2b:78:cb:0a:65:e0:62:4a:53:ca:
15:6e:34:79:b8:19:98:cb:ab:b8:83:8d:c5:a8:60:
35:36:cc:b3:94:f9:e5:4d:a1:50:d1:3d:63:b3:7a:
7f:89:45:32:c1:3b:c5:7d:0e:ad:2a:8b:6e:77:1a:
57:06:2a:2c:d6:76:5e:73:ff:4d:7c:4c:c2:7c:2f:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:1D:41:F3:97:51:91:DD:79:85:5B:BC:1C:55:28:30:6E:08:DF
X509v3 Authority Key Identifier:
keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:76:5f:90:97:89:80:67:ed:ec:cb:27:d2:a2:e8:8a:d9:
ab:17:1f:45:9d:48:a8:b6:ed:64:07:32:bc:18:ce:d7:15:96:
43:f7:31:0b:78:a6:26:15:03:ff:2d:e9:b6:bd:c0:ff:44:42:
ff:7d:0f:d1:55:82:29:8d:39:ae:5e:b9:fd:0f:71:ad:42:55:
a9:39:12:1d:3c:64:7c:9c:44:64:b4:da:38:cb:f4:ae:38:b4:
10:a4:b4:1a:98:15:3b:7d:13:6f:06:c2:69:a2:32:91:91:3e:
64:fc:30:13:6b:22:b1:68:e7:8e:57:32:f6:0b:66:6d:6d:2d:
0b:3d:25:78:c9:55:1a:a1:7d:c1:c9:2b:0f:0c:40:70:59:f2:
cd:3c:68:93:d5:9a:70:ce:10:ef:39:7c:5f:75:15:c0:af:e4:
9e:4e:e1:3c:b8:cd:52:0b:12:c1:99:14:5b:3d:14:ff:eb:e4:
ad:d3:e3:7d:b7:f5:9b:14:9d:24:5b:ed:5d:79:a9:8c:63:68:
de:78:49:2a:d5:a1:0c:70:43:bd:cf:1b:12:15:34:23:b3:c7:
73:e5:cd:81:26:c9:9c:90:e3:0a:82:c1:9e:35:61:9a:1d:d5:
66:89:98:5c:87:bf:c5:1d:15:b9:e5:6a:e4:6a:0a:65:93:50:
30:fd:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:43:17 2026 by rpki-client