
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
File: AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft (raw, json)
Hash identifier: vo5aBDO4aYG0BBl3i41Z9FvZ2+p4VVak+pW2TZVgwIw=
Subject key identifier: 9C:65:7B:0E:01:DA:75:A1:BB:43:41:89:0A:89:60:23:64:7E:D3:1B
Authority key identifier: AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B
Certificate issuer: /CN=AD75BCED2E3406C9BAAE2A04EDA7609BB790840B
Certificate serial: 1BFD7CDA40C4CA2796AE3D6D53F04FABF1DDFDB0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 18:43:49 +0000
Manifest this update: Thu 24 Sep 2026 18:38:49 +0000
Manifest next update: Fri 25 Sep 2026 19:57:49 +0000
Files and hashes: 1: AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl (hash: B/A8ysFc1bDMVCWTW7yc7W9+zDKELwssQ7dZ3ShFYXk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl
rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fd:7c:da:40:c4:ca:27:96:ae:3d:6d:53:f0:4f:ab:f1:dd:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD75BCED2E3406C9BAAE2A04EDA7609BB790840B
Validity
Not Before: Sep 24 18:38:49 2026 GMT
Not After : Sep 25 19:57:49 2026 GMT
Subject: CN=9C657B0E01DA75A1BB4341890A896023647ED31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:fe:0a:dc:3d:fd:b0:17:02:9e:19:88:55:
83:01:5c:51:45:35:3e:36:f3:b3:a2:8f:72:ff:16:
ea:ba:c4:d8:da:26:40:d4:38:4e:b0:1f:b4:56:71:
0d:73:d0:81:78:62:b9:7d:8c:50:ab:52:1e:85:26:
6b:23:09:03:40:61:66:bb:2f:d2:5d:52:8f:ee:5e:
8c:cf:19:b2:26:0d:96:cd:f6:5f:3e:b1:31:22:75:
ef:d1:08:ab:d0:c1:8a:27:c6:4c:fc:01:bd:9d:bc:
0f:03:b1:a3:76:50:b2:ec:54:29:2c:dc:de:da:94:
ec:2f:8b:d6:f3:37:02:e2:8b:5a:d2:72:49:e4:9d:
51:f2:ff:eb:24:23:69:84:31:2c:71:34:07:60:f4:
55:7c:35:eb:18:7d:83:d9:74:48:63:c1:e8:c9:c1:
c7:17:9e:ab:a1:cc:12:65:77:d5:8c:db:c3:96:51:
a3:19:4c:6e:d4:22:25:d3:b7:5e:83:71:ef:7e:37:
fe:bf:e9:57:9f:36:dd:07:8b:36:88:18:c9:10:1e:
09:f5:fb:b6:74:b8:58:98:5c:09:6e:40:39:82:66:
86:5d:4a:ec:5e:25:33:ce:b3:f9:9c:f0:7e:8a:8e:
14:9a:f6:30:b5:9b:5c:77:8c:2e:3e:90:b6:bb:92:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:7B:0E:01:DA:75:A1:BB:43:41:89:0A:89:60:23:64:7E:D3:1B
X509v3 Authority Key Identifier:
keyid:AD:75:BC:ED:2E:34:06:C9:BA:AE:2A:04:ED:A7:60:9B:B7:90:84:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/AD75BCED2E3406C9BAAE2A04EDA7609BB790840B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:29:1c:60:68:b7:5e:cb:d9:d1:cc:53:82:23:3f:25:e5:
4c:af:be:ba:d4:84:ab:b4:a5:b2:7a:a2:51:07:e1:1c:1b:60:
bb:0f:01:54:61:f0:0e:48:62:d9:c2:c7:07:52:9c:9b:e2:45:
40:45:ff:e1:21:f7:75:04:91:8d:88:2e:e8:f8:e2:9a:4c:37:
44:97:05:3b:93:fe:8d:05:3f:6a:bc:b2:6e:ba:a8:8e:56:c2:
5c:b5:e5:37:28:15:7d:68:c3:4e:c0:78:f4:15:05:76:49:e2:
0c:e9:57:76:37:28:a1:ee:cc:20:ac:03:bc:51:1c:70:12:46:
9e:8b:66:81:53:6b:19:d8:d3:24:89:1a:26:87:64:fa:47:69:
95:00:07:ef:dd:9b:0d:27:ad:93:1e:72:d2:7a:4e:8e:fa:84:
62:dc:67:21:fe:54:2c:45:22:d7:58:65:8b:76:5c:a4:e6:96:
82:08:52:f7:96:07:4a:ff:6e:a0:9c:90:3f:45:dd:aa:30:40:
db:1e:42:38:d5:05:7c:cc:0f:2e:c0:8d:a9:3d:94:34:5c:3f:
a1:4d:16:23:ed:e4:ee:e2:c3:9f:9c:2f:78:1c:33:1c:47:ca:
42:25:65:cc:82:8e:8e:0a:1a:f5:d8:db:57:8a:5e:ff:a2:70:
41:97:83:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG/182kDEyieWrj1tU/BPq/Hd/bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3NUJDRUQyRTM0MDZDOUJBQUUyQTA0RURBNzYwOUJC
NzkwODQwQjAeFw0yNjA5MjQxODM4NDlaFw0yNjA5MjUxOTU3NDlaMDMxMTAvBgNV
BAMTKDlDNjU3QjBFMDFEQTc1QTFCQjQzNDE4OTBBODk2MDIzNjQ3RUQzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5/4K3D39sBcCnhmIVYMBXFFF
NT4287Oij3L/Fuq6xNjaJkDUOE6wH7RWcQ1z0IF4Yrl9jFCrUh6FJmsjCQNAYWa7
L9JdUo/uXozPGbImDZbN9l8+sTEide/RCKvQwYonxkz8Ab2dvA8DsaN2ULLsVCks
3N7alOwvi9bzNwLii1rScknknVHy/+skI2mEMSxxNAdg9FV8NesYfYPZdEhjwejJ
wccXnquhzBJld9WM28OWUaMZTG7UIiXTt16Dce9+N/6/6VefNt0HizaIGMkQHgn1
+7Z0uFiYXAluQDmCZoZdSuxeJTPOs/mc8H6KjhSa9jC1m1x3jC4+kLa7kpTRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnGV7DgHadaG7Q0GJColgI2R+0xswHwYDVR0j
BBgwFoAUrXW87S40Bsm6rioE7adgm7eQhAswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGZkMDhiMzgtM2Y1Zi00MDE5LWIyYTMtMjM2MDRmOTQyYzg3LzAvQUQ3NUJDRUQy
RTM0MDZDOUJBQUUyQTA0RURBNzYwOUJCNzkwODQwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRDc1QkNFRDJFMzQwNkM5QkFBRTJBMDRFREE3NjA5QkI3OTA4
NDBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZkMDhiMzgtM2Y1Zi00MDE5LWIy
YTMtMjM2MDRmOTQyYzg3LzAvQUQ3NUJDRUQyRTM0MDZDOUJBQUUyQTA0RURBNzYw
OUJCNzkwODQwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGSBKRxgaLdey9nRzFOCIz8l5UyvvrrUhKu0
pbJ6olEH4RwbYLsPAVRh8A5IYtnCxwdSnJviRUBF/+Eh93UEkY2ILuj44ppMN0SX
BTuT/o0FP2q8sm66qI5Wwly15TcoFX1ow07AePQVBXZJ4gzpV3Y3KKHuzCCsA7xR
HHASRp6LZoFTaxnY0ySJGiaHZPpHaZUAB+/dmw0nrZMectJ6To76hGLcZyH+VCxF
ItdYZYt2XKTmloIIUveWB0r/bqCckD9F3aowQNseQjjVBXzMDy7Ajak9lDRcP6FN
FiPt5O7iw5+cL3gcMxxHykIlZcyCjo4KGvXY21eKXv+icEGXg8o=
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:03 2026 by rpki-client