
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json)
Hash identifier: 2ao/1JL23ecNASbQDM07RSmLO0zBg6PQLEy7f9sbivQ=
Subject key identifier: FF:B5:E8:15:43:CE:9A:CD:C0:C3:40:28:E7:68:31:ED:6C:15:E9:83
Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80
Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280
Certificate serial: 22688C4CE2551F26C276C88B910A61176A48CB6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:56:36 +0000
Manifest this update: Tue 12 May 2026 05:51:36 +0000
Manifest next update: Wed 13 May 2026 08:47:36 +0000
Files and hashes: 1: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: jFqorBcccb+7jYwTs4jlzMRBk2RlcB99tAkLZd88pzs=)
2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl
rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:68:8c:4c:e2:55:1f:26:c2:76:c8:8b:91:0a:61:17:6a:48:cb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280
Validity
Not Before: May 12 05:51:36 2026 GMT
Not After : May 13 08:47:36 2026 GMT
Subject: CN=FFB5E81543CE9ACDC0C34028E76831ED6C15E983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:7f:e9:93:30:f6:aa:9e:f8:2e:61:f0:ba:
8c:1c:da:13:b5:d9:4b:19:89:72:26:0c:d3:4b:d1:
eb:1d:a9:58:bf:46:fc:38:00:9e:06:44:14:47:26:
15:e0:2b:d7:1a:72:79:95:44:f8:fc:48:fd:37:d8:
6f:2b:fc:06:f7:2c:c6:1c:fe:19:46:ec:00:da:db:
65:7b:95:32:67:61:8e:27:5f:e8:36:ec:13:bd:3f:
82:10:de:d5:e3:f4:66:21:c5:f3:80:cf:60:6d:8e:
25:0c:52:0c:d3:ef:03:92:ac:14:64:1f:13:31:cb:
d7:53:27:55:de:aa:e0:86:f0:2d:8d:71:fc:87:20:
ed:66:c8:f2:97:09:ce:cf:d4:a8:e1:4a:ba:fb:d1:
e4:9a:12:37:b2:e0:9d:8d:da:ef:1d:ae:59:5a:2d:
52:c1:65:35:f0:c4:36:51:ce:13:e4:27:bf:51:27:
7b:33:88:ae:4c:8c:07:04:55:ac:5f:0b:c2:4e:43:
77:50:81:8d:cb:7f:ba:05:79:de:dc:95:11:4f:05:
58:70:e1:d6:6f:32:ea:05:ea:bf:4a:68:fc:fe:c4:
2a:ce:11:c5:d3:f7:58:07:4d:b0:ae:4d:4d:66:dc:
8d:6c:32:00:ca:46:ca:dc:1a:89:09:c2:46:ee:dd:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:E8:15:43:CE:9A:CD:C0:C3:40:28:E7:68:31:ED:6C:15:E9:83
X509v3 Authority Key Identifier:
keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:e8:62:67:84:f9:79:69:a3:f2:3c:e7:9f:08:31:27:d8:
13:3a:e1:b1:e7:c1:42:7d:59:9a:e2:fc:8e:e6:57:ae:81:a7:
df:20:68:27:7f:41:72:66:87:61:4e:94:88:8f:4b:6b:25:9b:
fc:c5:b0:8d:e9:e6:82:a9:6a:df:a0:22:2e:64:7a:6a:34:c2:
f0:28:ed:34:ab:0f:e9:82:cb:6d:38:2d:a4:89:31:49:7f:80:
4e:8f:bd:19:40:4c:bd:69:a5:63:22:3f:34:75:6c:c6:ce:f9:
03:39:82:6a:80:91:f7:04:5a:eb:09:5d:ad:70:51:e7:56:d9:
04:cc:63:76:64:bd:32:e6:c3:d3:04:37:26:75:9b:ef:0e:3b:
ce:9b:69:6c:37:f9:7e:a2:9d:0d:59:d3:4e:48:e3:7c:d7:81:
67:cc:05:8d:78:10:db:cd:f8:c0:1b:67:51:6c:e7:b2:79:1f:
ae:18:7b:1d:bd:d8:94:30:a8:5c:41:64:0e:1b:8a:12:1d:d8:
63:ef:f3:c4:38:ee:53:a2:8e:23:ec:fd:1f:5d:a1:03:0e:43:
7c:26:b5:da:9c:a1:f4:88:5f:b2:2b:a0:bd:36:11:4b:26:c8:
6f:8f:21:43:29:40:7b:45:44:59:dd:dc:90:c2:cb:1f:69:93:
2d:67:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:01 2026 by rpki-client