
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft (raw, json)
Hash identifier: Hqwhho+217j/WFO5ostZzJOTjRtwUr0OElEhRDfPxJY=
Subject key identifier: 41:AC:92:51:35:45:EE:C4:FD:04:AC:28:61:58:8D:E0:22:A1:90:BE
Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Certificate serial: 2F5859C8345B8CB355B3DE62FB36625032D07CCE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:59:38 +0000
Manifest this update: Tue 12 May 2026 14:54:38 +0000
Manifest next update: Wed 13 May 2026 17:24:38 +0000
Files and hashes: 1: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: +LMzTIT3HAm9qO4qM7ZOTI2OEw2Fm2hgpEAqo+PYvZw=)
2: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=)
3: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=)
4: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl (hash: ZbeEdn6nZYK5kq51L0/T/kwi3BX/XGsUDMrINkG3D7Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:58:59:c8:34:5b:8c:b3:55:b3:de:62:fb:36:62:50:32:d0:7c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Validity
Not Before: May 12 14:54:38 2026 GMT
Not After : May 13 17:24:38 2026 GMT
Subject: CN=41AC92513545EEC4FD04AC2861588DE022A190BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:35:e6:4a:87:25:85:85:cf:85:22:ed:da:
45:a9:e8:4a:04:89:27:90:f6:b3:5d:71:ef:6f:29:
2f:97:a5:13:90:f6:75:9b:1c:2b:e7:64:33:21:ab:
7e:6b:ab:1e:e7:9e:a9:4d:09:c4:2c:c1:79:e4:3e:
48:3b:1a:7c:ed:e2:b9:d2:06:b6:3d:e8:68:3b:f8:
04:59:41:f5:10:86:42:24:f0:10:66:cd:d5:eb:18:
8c:14:86:e2:d1:4a:8a:08:1b:01:37:78:60:79:69:
dd:d1:88:d4:13:e9:b8:61:35:9a:87:e2:66:99:e0:
31:62:39:5d:eb:1d:39:6c:6d:3b:0e:f2:b2:b2:4c:
73:86:f6:d9:73:e2:f0:f0:b9:b6:a5:08:d0:25:d4:
0d:33:7f:4d:56:c5:77:fa:27:c8:29:c4:43:ab:46:
63:73:5e:e7:8a:c9:64:e9:36:63:e3:93:34:14:60:
db:c2:b6:0c:ea:09:23:93:c6:ea:0e:d1:88:8a:d4:
8e:4b:55:7b:bc:60:88:89:f0:53:2c:89:15:b8:b5:
7a:58:cb:e4:03:7d:6b:1f:16:05:2b:f0:06:99:92:
99:de:40:6f:5b:05:51:f2:49:15:32:26:1e:27:36:
15:d4:10:38:17:be:d0:0d:d9:ae:5d:78:e8:32:71:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AC:92:51:35:45:EE:C4:FD:04:AC:28:61:58:8D:E0:22:A1:90:BE
X509v3 Authority Key Identifier:
keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:e8:9d:b4:19:34:ef:9e:34:78:87:48:b6:35:51:da:c7:
f4:2a:93:38:4a:06:9f:ae:26:4b:68:6f:66:69:87:08:81:b2:
66:bd:ba:ab:fc:1f:39:5b:0f:90:4d:93:6c:4f:21:9c:24:20:
f8:2a:22:6d:d1:0f:ce:43:3c:d7:32:0a:c8:db:f1:10:5b:45:
ba:54:64:a2:c2:3c:53:db:7c:08:a6:1d:b2:f4:6a:c4:77:a4:
0c:25:f7:cc:17:bd:eb:f6:44:ad:5c:06:d1:09:d3:d1:dd:c0:
fd:13:e5:7b:47:c0:32:e4:33:32:15:61:60:b6:0e:bc:20:74:
ec:fb:c6:2b:92:f6:cc:52:14:a5:aa:84:dc:41:63:a9:25:57:
41:07:f4:81:e2:12:7b:82:a9:0e:9a:0f:1f:33:a3:1a:26:d3:
46:08:5c:c9:71:ad:46:30:ef:a1:36:ae:51:0b:90:88:a1:b6:
55:e0:e2:f2:00:54:d0:82:a0:8a:70:71:94:0a:ad:a6:18:8c:
ea:50:d5:22:d2:9a:fa:d4:e9:9e:c1:cb:12:f5:b1:e0:01:cf:
83:7d:01:67:b5:e8:76:37:23:7a:97:ac:1f:b8:13:f0:5b:47:
78:39:8a:1a:a3:1c:1b:cc:a0:c2:b1:89:be:e0:16:17:bf:1e:
30:d2:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:37 2026 by rpki-client