
$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json)
Hash identifier: pjtqNKcgaAECYfBLvbfQXq0CY9jG+I9c8hhY8pZZ/cU=
Subject key identifier: 37:37:C8:C2:D4:36:61:A8:99:4B:B7:63:25:5C:B8:F9:D3:A1:D6:96
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial: 5A952EA590689FBDC40E8CA51D7ADB7CE95199DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
Manifest number: 0226
Signing time: Tue 24 Mar 2026 21:51:21 +0000
Manifest this update: Tue 24 Mar 2026 21:46:21 +0000
Manifest next update: Sat 28 Mar 2026 08:29:21 +0000
Files and hashes: 1: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8=)
2: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: g3CoUiT3ttmGYXOlT0LF6qng1sCblD7zhlp8Rh6FKso=)
3: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=)
4: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: 0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:95:2e:a5:90:68:9f:bd:c4:0e:8c:a5:1d:7a:db:7c:e9:51:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Validity
Not Before: Mar 24 21:46:21 2026 GMT
Not After : Mar 28 08:29:21 2026 GMT
Subject: CN=3737C8C2D43661A8994BB763255CB8F9D3A1D696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8f:2e:26:60:95:e1:cd:cc:36:ab:c2:5a:0d:
ec:ac:e7:3b:20:bb:9e:28:94:ee:e0:a0:93:dc:4e:
85:22:4b:50:b0:7f:9d:89:ef:4e:1f:8e:ff:54:c7:
b0:5c:8e:21:ef:1d:4d:83:a8:1e:67:b9:e3:e0:fc:
30:8a:34:ea:22:86:ca:d1:a5:e5:00:f5:ae:07:36:
cd:fc:08:14:1d:e2:81:88:56:3b:8e:84:4d:34:b7:
fd:9e:36:2d:b3:38:54:ff:d1:35:74:e3:79:9b:52:
11:75:4a:00:1f:85:7c:0c:cc:a4:6d:78:f5:2e:d4:
5d:8d:69:39:33:bf:18:3a:cb:5a:3c:0e:d1:2a:54:
f8:e7:c9:ef:e1:ee:c9:e3:fd:ef:4c:7c:4c:c2:f2:
9a:1d:f1:52:28:09:40:2f:e5:1f:43:91:7e:ff:fb:
02:1c:ac:4b:01:39:76:db:3e:16:06:0e:37:61:52:
e5:df:4f:f3:8f:f0:54:a5:52:93:cc:33:14:47:eb:
71:31:7f:e8:a7:78:9e:a3:aa:ac:b4:b3:8b:de:5a:
ba:b8:35:1a:1e:a5:e1:5b:9c:4e:1c:40:c2:f5:96:
e6:2b:76:09:12:4f:99:f2:3c:9c:07:94:a0:09:a5:
67:34:43:d8:f1:2f:07:b2:20:a4:ff:c2:5b:59:ca:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:C8:C2:D4:36:61:A8:99:4B:B7:63:25:5C:B8:F9:D3:A1:D6:96
X509v3 Authority Key Identifier:
keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c1:28:48:ba:4d:8d:7f:f4:6c:20:54:93:47:e3:e9:23:2d:
91:23:38:66:5a:cb:a7:4f:9d:8c:c8:34:2a:91:15:68:33:a9:
b6:db:54:b2:b7:8c:99:12:01:a4:d3:6c:e9:69:32:c5:68:7f:
35:3e:86:f1:8e:dd:fd:54:1d:7b:73:7a:3b:b9:aa:f7:af:f7:
8d:28:5a:01:3c:77:c7:2e:7d:97:06:c9:f5:c9:44:fe:9f:6c:
6b:16:0c:97:dc:99:ba:38:d5:be:6f:d9:07:c5:98:6b:ca:4a:
65:83:1a:45:9e:c8:f0:e3:97:f0:38:66:8d:1d:fc:1e:2d:62:
97:b1:a1:df:14:39:2b:b5:2d:4b:49:3d:25:77:26:d4:21:20:
ed:20:12:49:a3:f3:ce:3a:7b:da:4e:3b:a4:42:87:ab:4d:20:
9d:cc:06:43:ff:6f:27:79:0b:65:4a:00:f3:44:67:3c:1f:d0:
3f:f7:a8:52:ab:f1:73:35:b4:1c:d4:ad:75:81:6a:24:56:4b:
c0:67:3c:c3:7c:7d:fa:69:46:88:32:4c:f3:7c:eb:52:7d:9a:
be:2f:82:4c:be:10:cd:4e:87:2f:95:e7:ee:3b:25:85:7b:e8:
2d:87:f7:c8:c1:72:39:15:fe:a6:c1:69:a3:fc:22:2e:d8:da:
a2:41:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:01 2026 by rpki-client