
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
File: 764459401ADCADC43CBC178909A7059A11D15CFE.mft (raw, json)
Hash identifier: S0I/vIxMFPYKJHTPA+EJiLgxpZxKuPuT51G5t0Vy+M0=
Subject key identifier: 52:65:FF:D7:74:BB:91:61:B4:7B:F5:5E:35:BB:B1:40:BA:06:7C:AB
Authority key identifier: 76:44:59:40:1A:DC:AD:C4:3C:BC:17:89:09:A7:05:9A:11:D1:5C:FE
Certificate issuer: /CN=764459401ADCADC43CBC178909A7059A11D15CFE
Certificate serial: 32F90264D2F8FA005CFC8EAFFDE2682BDA715F9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 17:22:27 +0000
Manifest this update: Wed 23 Sep 2026 17:17:27 +0000
Manifest next update: Thu 24 Sep 2026 21:14:27 +0000
Files and hashes: 1: 3130332e3138312e3235342e302f32332d3234203d3e20313431313435.roa (hash: 0k0iHga0ooX1dAAS++ohUi7V+YobrgqLZDjxs3/3BT4=)
2: 764459401ADCADC43CBC178909A7059A11D15CFE.crl (hash: /YdTTEHuecWpoyAdomIv7jsuNCytBsN2WV7YxobIvQc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.crl
rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 21:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f9:02:64:d2:f8:fa:00:5c:fc:8e:af:fd:e2:68:2b:da:71:5f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764459401ADCADC43CBC178909A7059A11D15CFE
Validity
Not Before: Sep 23 17:17:27 2026 GMT
Not After : Sep 24 21:14:27 2026 GMT
Subject: CN=5265FFD774BB9161B47BF55E35BBB140BA067CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:ae:31:e8:36:ac:9b:5e:e9:91:49:ee:b1:0b:
a1:ae:d1:f4:c0:43:9e:8a:31:3d:68:80:4b:11:8d:
4b:bd:4a:d4:03:e5:62:99:68:55:e1:e0:03:42:31:
22:df:07:e5:f3:3c:07:86:1b:0c:d3:4d:88:f8:f6:
57:18:ac:87:a0:7c:e8:23:ab:3d:a5:30:d9:cc:5a:
bb:17:07:1a:39:9a:d5:db:e2:f3:24:c1:6c:52:9c:
05:d3:8c:e2:8f:0e:2d:6e:65:be:e1:45:84:ef:15:
fe:3e:2d:cb:c9:6c:59:b1:2a:6b:f9:38:36:c5:34:
65:84:21:a2:f5:02:54:79:69:35:44:d0:ed:f9:78:
a7:de:8e:90:db:03:04:a4:d3:60:7e:d3:ca:4f:d8:
ee:fc:26:68:b4:c6:af:ce:81:e0:c9:d3:56:2e:47:
a8:e4:3c:76:03:82:3e:c6:b0:c5:21:23:3f:ab:b2:
f0:1a:bb:f7:6b:f7:42:11:54:41:5b:62:8b:e6:5b:
fe:96:b5:d9:dc:91:f4:54:a5:5a:7a:e7:de:29:c8:
19:41:d7:82:e0:a6:2f:fc:1b:56:39:48:13:bc:8b:
57:fc:06:d5:1f:68:2b:44:18:45:4e:85:18:f3:c2:
13:94:57:c1:b4:ab:b9:43:be:3b:f0:04:37:69:0d:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:FF:D7:74:BB:91:61:B4:7B:F5:5E:35:BB:B1:40:BA:06:7C:AB
X509v3 Authority Key Identifier:
keyid:76:44:59:40:1A:DC:AD:C4:3C:BC:17:89:09:A7:05:9A:11:D1:5C:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/764459401ADCADC43CBC178909A7059A11D15CFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/764459401ADCADC43CBC178909A7059A11D15CFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c3:85:af:71:8c:03:e9:79:52:04:0c:4c:51:45:0f:eb:f0:
4c:11:0e:26:1a:18:85:2a:5c:f6:05:8f:17:86:73:63:1b:ed:
b3:58:8b:50:97:c1:d7:ee:a5:8d:48:eb:ba:78:d2:da:14:1b:
ae:fe:ef:05:0c:c2:ec:a6:d1:a9:89:b7:c0:cc:1b:20:e0:4d:
5a:ff:d4:9c:8b:29:a4:62:e9:cd:62:66:d4:24:5f:d3:6a:9e:
36:8b:eb:df:b7:8a:17:1a:c9:3f:5b:b0:3f:7c:c9:5b:63:45:
3f:ff:e6:72:58:4b:31:29:11:b6:8f:95:41:d8:4b:87:3a:86:
53:2c:bd:59:08:23:5d:56:bd:0b:4e:de:79:07:88:be:c6:fb:
29:7e:c9:82:b1:5a:25:c5:71:06:a2:af:10:66:a2:1b:0c:fb:
00:f3:4c:6d:41:ee:61:2e:bf:9a:e2:6b:a8:ca:c8:56:b5:a7:
ae:2a:20:6e:53:cf:88:4b:b0:ce:d0:18:e8:c6:71:03:0d:a0:
53:d1:51:a4:d6:3f:b9:47:4b:b3:0c:2a:80:81:0d:bd:4f:d5:
02:85:cf:97:f3:a8:e0:b6:d6:d1:c9:ea:10:a8:27:8f:78:51:
46:42:49:b7:32:85:37:78:2b:cd:f9:3d:29:bc:e0:ec:ee:1a:
b5:79:c5:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMvkCZNL4+gBc/I6v/eJoK9pxX58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0NDU5NDAxQURDQURDNDNDQkMxNzg5MDlBNzA1OUEx
MUQxNUNGRTAeFw0yNjA5MjMxNzE3MjdaFw0yNjA5MjQyMTE0MjdaMDMxMTAvBgNV
BAMTKDUyNjVGRkQ3NzRCQjkxNjFCNDdCRjU1RTM1QkJCMTQwQkEwNjdDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/rjHoNqybXumRSe6xC6Gu0fTA
Q56KMT1ogEsRjUu9StQD5WKZaFXh4ANCMSLfB+XzPAeGGwzTTYj49lcYrIegfOgj
qz2lMNnMWrsXBxo5mtXb4vMkwWxSnAXTjOKPDi1uZb7hRYTvFf4+LcvJbFmxKmv5
ODbFNGWEIaL1AlR5aTVE0O35eKfejpDbAwSk02B+08pP2O78Jmi0xq/OgeDJ01Yu
R6jkPHYDgj7GsMUhIz+rsvAau/dr90IRVEFbYovmW/6WtdnckfRUpVp6594pyBlB
14Lgpi/8G1Y5SBO8i1f8BtUfaCtEGEVOhRjzwhOUV8G0q7lDvjvwBDdpDQr7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUmX/13S7kWG0e/VeNbuxQLoGfKswHwYDVR0j
BBgwFoAUdkRZQBrcrcQ8vBeJCacFmhHRXP4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTAwYWJiMGEtYTI4ZC00YjRmLWIxYWMtODhmNDllNThlMmExLzAvNzY0NDU5NDAx
QURDQURDNDNDQkMxNzg5MDlBNzA1OUExMUQxNUNGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjQ0NTk0MDFBRENBREM0M0NCQzE3ODkwOUE3MDU5QTExRDE1
Q0ZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAwYWJiMGEtYTI4ZC00YjRmLWIx
YWMtODhmNDllNThlMmExLzAvNzY0NDU5NDAxQURDQURDNDNDQkMxNzg5MDlBNzA1
OUExMUQxNUNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKLDha9xjAPpeVIEDExRRQ/r8EwRDiYaGIUq
XPYFjxeGc2Mb7bNYi1CXwdfupY1I67p40toUG67+7wUMwuym0amJt8DMGyDgTVr/
1JyLKaRi6c1iZtQkX9NqnjaL69+3ihcayT9bsD98yVtjRT//5nJYSzEpEbaPlUHY
S4c6hlMsvVkII11WvQtO3nkHiL7G+yl+yYKxWiXFcQairxBmohsM+wDzTG1B7mEu
v5ria6jKyFa1p64qIG5Tz4hLsM7QGOjGcQMNoFPRUaTWP7lHS7MMKoCBDb1P1QKF
z5fzqOC21tHJ6hCoJ494UUZCSbcyhTd4K835PSm84OzuGrV5xYM=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:03 2026 by rpki-client