
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
File: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft (raw, json)
Hash identifier: cOvz80rMlUk4mGvkcMIj3QzrLa8ytc+UwWRjq5YMuVg=
Subject key identifier: 08:98:E7:FD:98:CD:66:6D:BE:C4:8D:9D:9A:DB:5B:1C:11:22:E6:5F
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial: 109316CCDB21AFF20FA926912E0E0128772F6675
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:32:22 +0000
Manifest this update: Tue 12 May 2026 17:27:22 +0000
Manifest next update: Wed 13 May 2026 17:48:22 +0000
Files and hashes: 1: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl (hash: jNjbCtDmOnVk9YAHWp7n97BosjyWyKmZbelltZx72n4=)
2: 3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (hash: YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=)
3: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (hash: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=)
4: 3130332e3232382e3131382e302f32332d3233203d3e203536323432.roa (hash: ykRVY1EBIN+ucKdlxDLDuc2SEVpBAQD0eYMAZuEgryE=)
5: 3133372e35392e3136312e302f32342d3234203d3e203536323432.roa (hash: 9h4BjIyizuthkQUuXWWv2bNzQm5B95LJDNd0MLV8X24=)
6: 3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (hash: GPynHByObMVja2DkXkj4DTeAw6Zu/eMPLF3FIx9zUPw=)
7: 3133372e35392e3136332e302f32342d3234203d3e203536323432.roa (hash: g2Ud6J6HCNFfVncrEeujGYDFgaSbLTIo6wU1RvlC+Tc=)
8: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (hash: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=)
9: 3130332e3232382e3131362e302f32332d3233203d3e203536323432.roa (hash: YRJhcs0eQNvvPgXOg+gQPByywRt+Knf6CLtlmsMwkjM=)
10: 323430303a636438303a3a2f33322d3438203d3e203536323432.roa (hash: fi/7+4zEIqvSpKlVqvbMDeqY2YCrGnjUpksCJ4fAKrA=)
11: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (hash: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=)
12: 3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (hash: RkOZ4BqJISFweILCm3wRYadHRRUC1NJILvlksQQiLxk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:93:16:cc:db:21:af:f2:0f:a9:26:91:2e:0e:01:28:77:2f:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Validity
Not Before: May 12 17:27:22 2026 GMT
Not After : May 13 17:48:22 2026 GMT
Subject: CN=0898E7FD98CD666DBEC48D9D9ADB5B1C1122E65F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:64:da:85:d4:7a:f7:ac:1d:ac:8a:f3:f5:
a0:e3:b6:01:eb:de:01:2d:dd:e2:b9:0d:3e:98:5e:
38:e5:0c:03:cc:14:17:26:fb:0b:84:34:d8:77:24:
25:e5:11:eb:e0:60:bd:ed:c4:ac:32:58:fd:27:7e:
f6:cd:96:26:26:34:83:6e:61:fa:01:1d:d5:c1:8e:
3b:fd:6d:a2:39:7c:61:21:2a:22:4a:b9:04:81:a8:
0b:88:6d:12:e6:2c:d6:2a:f3:50:6a:24:07:0a:18:
fa:f3:cd:83:ef:4c:35:4c:c7:0c:68:4f:c5:f3:8c:
37:35:dd:26:64:d5:1e:a3:c6:83:d6:c4:7e:2d:c4:
f2:8c:51:2f:b6:52:bd:77:a0:05:30:43:44:73:0f:
9b:2f:4c:42:ac:27:64:87:a5:40:9f:45:6d:f1:85:
fd:43:27:0a:b9:b2:24:78:3f:9c:ea:e7:7a:ae:da:
fd:83:e1:2e:ff:2d:0e:5c:58:08:5a:10:3b:14:2e:
6c:7c:e5:eb:d2:92:0b:c2:f6:3d:9a:54:61:90:a0:
1f:3e:94:c1:b6:2b:e0:af:83:c4:6e:b0:82:84:b9:
df:5d:ad:2b:d4:7a:14:cb:62:51:89:49:f1:19:37:
48:30:a3:fd:f3:9c:25:e0:15:73:b7:b8:4c:3f:ca:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:98:E7:FD:98:CD:66:6D:BE:C4:8D:9D:9A:DB:5B:1C:11:22:E6:5F
X509v3 Authority Key Identifier:
keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:92:bf:e1:1f:3d:18:41:e6:e0:39:53:a0:dc:3b:2c:2c:4b:
34:ef:43:63:7e:e3:17:75:71:b7:0e:6a:38:c0:2f:cf:80:b2:
db:dd:3d:a9:2e:d0:83:08:ab:c8:9b:93:ee:19:0d:ce:0c:3c:
f4:0f:5c:84:f4:d9:67:65:38:01:8a:d0:de:a9:70:9d:39:a5:
e1:3c:30:06:8e:d9:1b:14:89:88:2c:2a:b6:16:7f:6f:d0:fd:
69:e9:e0:14:0e:69:f5:f3:68:36:bf:1c:8d:01:2a:0a:a8:5d:
03:81:ed:c3:3d:f4:fe:86:5c:45:a5:29:eb:28:8f:97:3a:c4:
51:12:f5:50:d3:7e:69:49:7b:dd:b0:eb:a3:c2:b4:bb:c6:70:
80:46:d4:4f:cd:98:ae:3f:8d:f9:fa:3f:fd:43:82:cb:50:39:
13:1a:16:4c:39:34:ea:cc:0a:07:e3:92:ea:04:88:99:78:17:
2e:e7:54:33:8e:10:22:48:79:9a:46:44:2b:89:8f:fb:cc:b2:
df:d7:09:87:6b:df:2e:be:e8:6f:32:d0:e4:d5:e3:fd:19:80:
b5:6c:ac:9a:d0:f8:be:54:91:38:5c:ec:c1:67:3c:15:bc:a7:
cc:cf:a1:b8:c6:4c:d9:cb:e2:b1:e4:44:6b:5a:a9:d3:c0:6f:
a7:32:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:06 2026 by rpki-client