
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
File: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json)
Hash identifier: 80eRn6NfZGsKADPgLllFODZ3jEXp7RKxIKmoy2HHVf8=
Subject key identifier: CE:70:5D:5B:0A:FE:CF:5C:E9:64:02:0F:2E:9A:EE:E0:1E:2E:CE:B1
Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
Certificate issuer: /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Certificate serial: 4EAE9FDB99FA687990E8FB2379725E2402A29E55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 14:42:38 +0000
Manifest this update: Fri 24 Jul 2026 14:37:38 +0000
Manifest next update: Sat 25 Jul 2026 15:21:38 +0000
Files and hashes: 1: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: 1RFuOJKpTOL3cJlr6lHMMid/5emvm65N/g1Obkt2FqI=)
2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ae:9f:db:99:fa:68:79:90:e8:fb:23:79:72:5e:24:02:a2:9e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A
Validity
Not Before: Jul 24 14:37:38 2026 GMT
Not After : Jul 25 15:21:38 2026 GMT
Subject: CN=CE705D5B0AFECF5CE964020F2E9AEEE01E2ECEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:06:63:61:1f:21:26:2c:98:40:6e:78:f7:
f6:7a:51:53:fb:c5:0d:95:0d:35:40:5b:6c:d3:8d:
22:28:02:45:e8:ba:3f:fb:7b:14:23:d2:60:20:5f:
97:41:ea:cd:0a:14:28:70:76:0c:c4:98:7b:bd:a3:
2e:f1:e5:d3:9d:83:55:99:18:9f:d4:f5:3f:53:44:
6c:d0:72:8b:22:f0:ee:9e:a3:ab:06:9e:9c:86:47:
29:09:33:56:5d:85:22:d1:d5:28:34:d7:94:f6:a2:
21:7c:3e:9b:c4:b1:d4:52:11:ed:37:42:cd:a5:6e:
78:fe:fb:0b:69:6d:a8:41:3c:74:16:2a:aa:35:4b:
52:38:e8:c7:4c:f7:cc:c3:f0:29:55:9e:b7:cb:e5:
15:b8:a1:e6:66:64:66:5b:c7:25:a0:75:64:1b:6d:
fa:4b:57:8a:ba:5e:69:fa:5e:e8:33:96:a3:77:9b:
19:c8:3e:49:e9:b5:7c:63:e0:de:76:c1:e5:de:31:
00:9c:b4:40:5d:2d:f3:60:6f:a5:5b:b4:a8:91:ae:
49:1c:f5:42:4d:02:ba:a1:96:a4:7c:09:6e:62:46:
07:20:52:d2:8f:f4:a4:86:8c:9b:bd:67:d8:d4:98:
68:e6:5a:30:cb:c0:d1:de:f4:10:49:6e:87:6c:85:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:5D:5B:0A:FE:CF:5C:E9:64:02:0F:2E:9A:EE:E0:1E:2E:CE:B1
X509v3 Authority Key Identifier:
keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:52:27:23:ac:61:67:8d:06:d8:4c:02:1a:fd:40:b2:60:2d:
3d:a2:79:19:ab:a3:6c:23:1a:59:ff:67:31:48:bd:53:f8:aa:
24:d1:11:6f:d1:92:53:43:08:a6:08:38:f8:b9:24:a9:3e:ca:
f6:a2:d2:a1:6a:e0:d0:1d:9b:4c:f6:db:7d:2e:b0:56:58:21:
a9:36:3f:bb:4f:49:d7:2f:e7:56:f3:ad:03:c4:c6:2b:49:af:
a5:c0:28:8d:08:34:c5:2a:cb:a6:f8:49:6f:57:c1:99:c8:ae:
f8:d5:1b:15:31:e3:63:94:5e:59:10:a2:0f:d9:d2:46:4c:d0:
32:37:0a:69:18:aa:11:0b:d3:72:fe:a5:cb:04:ed:46:25:a4:
0a:d1:14:97:ab:3b:49:54:bf:99:5f:a5:9c:e6:13:8f:1c:e5:
cb:98:a7:cc:07:0a:43:df:5b:12:07:3f:bd:4f:e9:fe:ce:7a:
7a:69:52:41:56:68:25:4e:90:ac:38:da:02:88:b8:74:f1:5a:
02:54:87:92:68:d1:a9:71:f3:95:18:d7:fa:de:6b:f2:35:67:
7c:79:5b:e9:7e:eb:c3:3b:7d:64:79:ce:f5:80:f1:da:da:6a:
aa:ff:1f:a5:cc:ad:af:13:b9:8b:99:a6:33:43:ca:4c:d5:90:
03:34:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:56 2026 by rpki-client