
$ rpki-client -vvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File: 74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier: +xbV3XuR4OSU/NEQZsy6Q4EaCC0PaHR6b+JdSw11rEI=
Subject key identifier: 8C:9E:39:8D:47:8F:58:ED:CE:B3:A1:F1:0F:C4:D7:1E:72:3B:6F:59
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer: /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial: 73858C6F2164EA7FF8F0453C611F8C10D8F3B89E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:40:13 +0000
Manifest this update: Tue 12 May 2026 15:35:13 +0000
Manifest next update: Wed 13 May 2026 17:00:13 +0000
Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
2: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: WwqUu9Xm4xP2aRBwCipF11AcZ6JYO3ZIA3iTEvOXQxw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:85:8c:6f:21:64:ea:7f:f8:f0:45:3c:61:1f:8c:10:d8:f3:b8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Validity
Not Before: May 12 15:35:13 2026 GMT
Not After : May 13 17:00:13 2026 GMT
Subject: CN=8C9E398D478F58EDCEB3A1F10FC4D71E723B6F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:86:ec:8b:bb:c4:57:3d:97:c7:ba:4a:18:
44:a7:4c:75:2e:10:f1:1c:00:54:af:51:e7:b5:07:
eb:86:d8:dd:01:1f:ac:00:4f:42:66:59:30:85:8d:
de:9b:e1:43:8b:a9:23:90:23:95:4e:39:7d:73:4b:
60:43:9e:b0:a5:76:4d:a5:51:66:fa:04:aa:63:1b:
d6:7b:92:d1:e9:ae:2b:c9:1a:30:7e:07:25:f6:65:
fc:9c:c8:59:3c:8e:cf:2d:16:28:e2:9c:48:9f:d7:
06:0c:09:66:a9:26:67:2a:94:f9:ae:86:60:f6:f7:
95:4b:a3:51:45:bc:f7:74:67:da:72:ba:94:45:91:
6b:b7:34:0f:40:e4:8a:11:76:95:60:83:b9:e1:75:
bf:2c:9b:c0:44:10:1e:6d:a1:0f:fa:2d:3c:8e:63:
91:bf:07:b2:8b:18:28:26:c8:45:fb:ac:6a:19:20:
d8:6d:85:e3:08:02:cb:1e:67:09:3f:11:7c:55:fa:
5b:8f:8b:cb:99:c8:8a:20:91:7c:7c:9b:81:ba:dc:
38:44:51:a8:b6:c4:e2:f0:83:d5:96:4e:48:9f:ef:
79:b6:e4:17:39:6f:4a:f2:8e:84:98:41:79:d3:ec:
cb:f8:3a:c3:ba:c2:04:a5:54:5b:cf:69:e9:5a:3e:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:39:8D:47:8F:58:ED:CE:B3:A1:F1:0F:C4:D7:1E:72:3B:6F:59
X509v3 Authority Key Identifier:
keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:63:03:a4:87:f2:25:6a:4d:e7:7d:96:58:d0:f3:02:89:
16:bb:f4:89:1b:dc:d6:89:5a:00:a4:e6:a1:08:56:f8:3d:24:
20:f3:3d:11:85:e8:ae:ca:57:f3:99:6e:0f:dd:ff:48:ad:48:
47:85:e2:c1:df:94:12:78:f5:41:89:ed:ec:8f:b0:49:2b:e6:
60:92:e9:3e:a3:fc:1e:f4:25:18:29:2f:a9:64:07:e6:0d:61:
f6:ec:6f:39:3b:ce:6f:4b:71:23:1b:b2:b6:24:5f:c3:d8:0a:
cd:e7:0e:24:a7:1c:e1:61:87:49:75:68:d8:b2:85:b2:ff:93:
f3:52:49:3d:c5:c5:ae:37:28:4c:42:54:6d:bb:75:44:c6:82:
ab:7c:fa:e0:46:0f:13:e1:e5:db:1f:6d:32:23:92:88:b1:f1:
3f:49:c7:87:3d:c8:73:c1:34:3a:b8:52:bf:8a:6a:23:f8:6b:
68:17:95:78:a1:6b:43:72:b7:4a:ba:52:cb:20:bf:f8:6a:0b:
e1:12:cb:c8:d0:c1:60:d5:29:c5:3d:ed:aa:90:44:bd:6c:23:
b9:2e:12:9e:cf:22:d2:3a:73:b5:7c:c0:e1:0a:74:57:67:8f:
ac:c6:84:c8:90:5e:4d:65:c2:10:a7:fa:d2:f2:1a:ff:5b:9f:
b5:32:65:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc4WMbyFk6n/48EU8YR+MENjzuJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0ODdC
MEVBQTcyRjAeFw0yNjA1MTIxNTM1MTNaFw0yNjA1MTMxNzAwMTNaMDMxMTAvBgNV
BAMTKDhDOUUzOThENDc4RjU4RURDRUIzQTFGMTBGQzRENzFFNzIzQjZGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGp4bsi7vEVz2Xx7pKGESnTHUu
EPEcAFSvUee1B+uG2N0BH6wAT0JmWTCFjd6b4UOLqSOQI5VOOX1zS2BDnrCldk2l
UWb6BKpjG9Z7ktHprivJGjB+ByX2ZfycyFk8js8tFijinEif1wYMCWapJmcqlPmu
hmD295VLo1FFvPd0Z9pyupRFkWu3NA9A5IoRdpVgg7nhdb8sm8BEEB5toQ/6LTyO
Y5G/B7KLGCgmyEX7rGoZINhtheMIAsseZwk/EXxV+luPi8uZyIogkXx8m4G63DhE
Uai2xOLwg9WWTkif73m25Bc5b0ryjoSYQXnT7Mv4OsO6wgSlVFvPaelaPnXrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjJ45jUePWO3Os6HxD8TXHnI7b1kwHwYDVR0j
BBgwFoAUdJaNI35NKMwScll13+vkh7Dqpy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjM5ZWFkODEtYWMxMi00NDc5LWIyZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3
RTREMjhDQzEyNzI1OTc1REZFQkU0ODdCMEVBQTcyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NDk2OEQyMzdFNEQyOENDMTI3MjU5NzVERkVCRTQ4N0IwRUFB
NzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy
ZmItOTk4ZTAxODU0NTUxLzAvNzQ5NjhEMjM3RTREMjhDQzEyNzI1OTc1REZFQkU0
ODdCMEVBQTcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA01YwOkh/Ilak3nfZZY0PMCiRa79Ikb3NaJ
WgCk5qEIVvg9JCDzPRGF6K7KV/OZbg/d/0itSEeF4sHflBJ49UGJ7eyPsEkr5mCS
6T6j/B70JRgpL6lkB+YNYfbsbzk7zm9LcSMbsrYkX8PYCs3nDiSnHOFhh0l1aNiy
hbL/k/NSST3Fxa43KExCVG27dUTGgqt8+uBGDxPh5dsfbTIjkoix8T9Jx4c9yHPB
NDq4Ur+KaiP4a2gXlXiha0Nyt0q6Ussgv/hqC+ESy8jQwWDVKcU97aqQRL1sI7ku
Ep7PItI6c7V8wOEKdFdnj6zGhMiQXk1lwhCn+tLyGv9bn7UyZfE=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:44 2026 by rpki-client