
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
File: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft (raw, json)
Hash identifier: Thzxem52ChDyUGquokGGfmv2JaTSSDUpMVnulVIXrhU=
Subject key identifier: D2:6A:CA:A8:22:FB:A0:78:0E:AE:F7:5A:DB:CB:5E:D4:9D:F9:17:64
Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
Certificate issuer: /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Certificate serial: 47DA52B9DD94E3C0690BC9BD9E17A102FBC395B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 06:28:44 +0000
Manifest this update: Thu 24 Sep 2026 06:23:44 +0000
Manifest next update: Fri 25 Sep 2026 09:41:44 +0000
Files and hashes: 1: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl (hash: fDryAiiLIs3yhUDnWL89dXv/LMnAjWoFKNRvS3/S05Q=)
2: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: WYsfpXuk+twMKamB2Cainkplei1Yhkq2SXWGKBJS4oo=)
3: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: 71ufcrIpd5/EvIBttOzN/s4e00TuL2D++Ya5GnzoM0s=)
4: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: EEEc99vXoE2Npy/NOJRBMrKblV42yAqKIxiksvrcrrs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 09:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:da:52:b9:dd:94:e3:c0:69:0b:c9:bd:9e:17:a1:02:fb:c3:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Validity
Not Before: Sep 24 06:23:44 2026 GMT
Not After : Sep 25 09:41:44 2026 GMT
Subject: CN=D26ACAA822FBA0780EAEF75ADBCB5ED49DF91764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:13:43:1d:fc:41:3b:46:d9:ec:8a:c4:93:
33:ab:0e:79:6b:b4:89:ef:73:2e:34:3b:ea:a4:22:
1d:86:9f:d4:dc:99:0c:dc:67:8b:10:b0:03:a6:9d:
c9:d2:2e:fb:86:20:37:48:b6:db:96:20:8b:46:03:
88:bf:c6:51:da:cc:b3:56:7a:36:a7:99:bf:57:37:
88:8d:29:07:ff:d5:ad:27:d3:ac:12:33:6a:1d:b0:
94:07:e1:af:1c:b7:09:4b:57:16:f0:ed:6f:93:eb:
21:20:54:25:b4:35:78:97:36:94:91:07:89:69:e7:
2f:0d:5f:d3:39:04:8f:ce:66:a1:07:98:14:bf:d1:
11:75:7c:94:96:ac:49:81:dc:a3:cb:b2:16:35:95:
89:2f:5b:61:13:e3:86:ef:2b:b8:f7:82:ff:6b:7f:
b7:20:b8:fc:9c:7b:c1:27:2e:a1:50:d0:3f:78:99:
de:ef:0f:6b:00:90:91:73:f6:94:7a:38:a8:09:60:
d6:b4:fc:dc:95:fe:4b:08:89:74:10:39:3d:16:f5:
3e:a5:bf:56:98:1c:8e:2a:5a:70:98:4a:19:c7:e5:
80:3f:18:9f:eb:0b:b4:2f:c1:a8:f9:06:7f:b0:74:
fe:79:5b:c2:d7:63:57:31:6b:8b:df:9d:55:53:96:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:CA:A8:22:FB:A0:78:0E:AE:F7:5A:DB:CB:5E:D4:9D:F9:17:64
X509v3 Authority Key Identifier:
keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:0f:a1:36:44:6c:91:21:47:15:b9:d7:6a:4d:04:36:b6:
3e:36:7b:8f:3c:17:e3:a7:61:39:4b:78:85:7b:07:e4:b9:aa:
f9:ed:de:45:8f:ca:3e:2e:46:93:14:e2:b6:90:05:1d:ed:eb:
9a:14:7a:aa:b8:5b:29:fa:f5:74:e9:86:03:f5:98:cd:9e:c1:
88:29:2e:cf:a2:45:9a:31:0f:80:71:4c:c5:c9:b2:cb:2e:ed:
c9:8c:73:20:35:cb:ae:06:9e:a4:2a:9f:1c:e8:76:56:5d:ab:
8f:48:3d:50:3b:f3:79:f2:db:9a:11:47:bc:f0:55:67:6c:29:
98:18:49:2a:85:63:b8:b1:2a:a7:e5:bd:60:cd:f5:88:91:56:
af:62:24:21:cf:70:2f:72:f3:0f:5a:ad:e8:b2:87:ec:58:7d:
b8:ca:18:4b:a3:07:fc:21:75:23:14:57:54:1e:68:f1:3c:c3:
dd:cd:a2:b2:af:76:1a:a8:a4:8b:79:84:16:f9:67:b2:6e:b0:
31:5f:ac:a4:73:2f:d8:8a:17:15:3b:6d:b3:fb:20:15:90:e9:
91:3a:0a:ee:d6:9c:4c:39:6f:21:ad:24:85:f3:5a:ea:e5:b9:
30:56:ca:bd:9e:bd:33:7d:1a:27:90:8c:26:5d:77:92:a9:8d:
71:09:e2:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUR9pSud2U48BpC8m9nhehAvvDlbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVB
MkMwQjMwRTAeFw0yNjA5MjQwNjIzNDRaFw0yNjA5MjUwOTQxNDRaMDMxMTAvBgNV
BAMTKEQyNkFDQUE4MjJGQkEwNzgwRUFFRjc1QURCQ0I1RUQ0OURGOTE3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uRNDHfxBO0bZ7IrEkzOrDnlr
tInvcy40O+qkIh2Gn9TcmQzcZ4sQsAOmncnSLvuGIDdIttuWIItGA4i/xlHazLNW
ejanmb9XN4iNKQf/1a0n06wSM2odsJQH4a8ctwlLVxbw7W+T6yEgVCW0NXiXNpSR
B4lp5y8NX9M5BI/OZqEHmBS/0RF1fJSWrEmB3KPLshY1lYkvW2ET44bvK7j3gv9r
f7cguPyce8EnLqFQ0D94md7vD2sAkJFz9pR6OKgJYNa0/NyV/ksIiXQQOT0W9T6l
v1aYHI4qWnCYShnH5YA/GJ/rC7Qvwaj5Bn+wdP55W8LXY1cxa4vfnVVTlqVHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0mrKqCL7oHgOrvda28te1J35F2QwHwYDVR0j
BBgwFoAUdZkcRj/Hlh7TBe2YmqpMDqLAsw4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzQ5ZGM1ZWItMzI2MC00MjhhLWE2YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYz
RkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVBMkMwQjMwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NTk5MUM0NjNGQzc5NjFFRDMwNUVEOTg5QUFBNEMwRUEyQzBC
MzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2
YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRD
MEVBMkMwQjMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJCmD6E2RGyRIUcVuddqTQQ2tj42e488F+On
YTlLeIV7B+S5qvnt3kWPyj4uRpMU4raQBR3t65oUeqq4Wyn69XTphgP1mM2ewYgp
Ls+iRZoxD4BxTMXJsssu7cmMcyA1y64GnqQqnxzodlZdq49IPVA783ny25oRR7zw
VWdsKZgYSSqFY7ixKqflvWDN9YiRVq9iJCHPcC9y8w9areiyh+xYfbjKGEujB/wh
dSMUV1QeaPE8w93NorKvdhqopIt5hBb5Z7JusDFfrKRzL9iKFxU7bbP7IBWQ6ZE6
Cu7WnEw5byGtJIXzWurluTBWyr2evTN9GieQjCZdd5KpjXEJ4hg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:04 2026 by rpki-client