
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
File: 762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft (raw, json)
Hash identifier: QJrcC5L5oYybJinrcRmWvrUQoV39NPaDHbME1hHQYEo=
Subject key identifier: 8B:E8:F1:6B:37:FD:AD:1B:C2:06:9D:58:65:DF:3C:12:39:B6:46:D5
Authority key identifier: 76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
Certificate issuer: /CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Certificate serial: 460185E8E6668DBBF6E203581407D13FC09CF33C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:20:43 +0000
Manifest this update: Tue 12 May 2026 05:15:43 +0000
Manifest next update: Wed 13 May 2026 07:16:43 +0000
Files and hashes: 1: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: p00BkNbJWawBKhREwZuAAHQMCf/7KPIeduMF3VQslvA=)
2: 762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl (hash: 2qKSEMwGc9VqrImprGBz4vznrrABoLuCRn728GBmP2w=)
3: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: F9rq8pU2wW/Oa03Jq6P0raRbd+1OsCNjkCP/TyMkA1w=)
4: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: dOOKnsnTlQ5K+rzuczxdM8MwKRcnUh90TPAZNcYMMe0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:01:85:e8:e6:66:8d:bb:f6:e2:03:58:14:07:d1:3f:c0:9c:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Validity
Not Before: May 12 05:15:43 2026 GMT
Not After : May 13 07:16:43 2026 GMT
Subject: CN=8BE8F16B37FDAD1BC2069D5865DF3C1239B646D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:ff:9a:52:10:b2:ae:78:8a:49:c5:72:cf:
d8:8c:d6:6d:98:d3:13:e5:3a:6a:4e:9f:f9:76:19:
fa:09:6b:9f:a7:01:7f:10:ea:12:f0:76:96:6f:56:
92:02:75:f5:c5:0c:05:7b:c3:09:6a:51:a1:ba:c6:
7c:dd:42:3a:ac:3c:70:b9:fc:ab:8f:5a:70:02:74:
14:85:88:8a:11:9e:86:a8:dd:8f:d4:a3:e9:6f:84:
65:49:ec:af:0d:cc:94:7d:e8:72:77:be:cc:a7:49:
6e:c2:48:ff:f3:f9:48:b7:f2:7c:07:72:ed:42:2f:
52:66:f8:4e:40:85:c6:7f:e1:6f:d2:19:30:4f:e8:
9c:0e:6f:16:75:cf:55:1c:ff:98:ac:d7:82:2b:a7:
3f:69:ff:4c:20:f0:58:27:35:fb:ce:e8:0f:12:47:
01:97:7c:42:de:4c:fa:3c:58:5d:aa:4a:3e:96:ab:
7b:0d:b0:46:75:fd:79:7b:50:5b:30:d8:15:e9:95:
60:b4:42:23:74:e7:b0:cf:1c:0e:d1:81:c1:88:41:
7a:48:67:b5:69:0a:b9:cb:53:99:bc:b3:54:31:8b:
0f:45:bd:1d:75:bd:fe:d5:11:b1:84:48:1a:e1:98:
8c:7e:e4:1e:10:32:6c:6f:07:4b:07:c5:cf:26:d9:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:F1:6B:37:FD:AD:1B:C2:06:9D:58:65:DF:3C:12:39:B6:46:D5
X509v3 Authority Key Identifier:
keyid:76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:37:16:53:76:9a:4a:3b:9c:27:40:3c:62:66:90:c9:da:ba:
35:88:d6:dd:3b:6a:b3:d4:b2:61:a8:ee:da:b5:e2:5b:ed:3a:
21:0a:84:42:96:04:50:2c:b4:f0:2e:ec:93:9d:48:ab:06:0e:
85:92:5a:d8:65:58:51:de:cb:a8:80:1e:be:5a:8a:79:ce:66:
54:cd:6e:16:b0:48:8e:c0:54:75:62:58:d4:f7:5c:54:b3:4a:
3f:bb:c4:ee:b5:14:49:f6:0e:89:e8:37:ff:12:91:bb:56:5c:
38:7e:93:bf:7f:05:e0:fa:04:d8:92:12:37:91:bb:87:7c:0f:
97:ad:5a:80:d3:7f:2b:6c:07:0b:b9:07:a2:2d:96:c9:d0:d9:
e1:29:c6:b5:3d:33:fa:bc:29:02:be:c4:7d:8a:08:31:cc:33:
7e:2d:d0:43:b8:61:a1:d2:c9:32:ef:53:09:04:92:ac:ab:78:
c9:94:db:c3:89:e1:b4:e0:de:20:d6:97:f9:0d:70:05:31:7e:
81:03:a4:b7:81:45:6f:d2:64:e4:34:74:71:9f:e4:e4:6c:46:
e2:f5:41:18:a5:d6:a1:f5:97:fa:33:b2:8c:bb:04:94:47:3c:
3d:d4:c2:7f:16:0d:53:83:06:94:47:89:c2:ff:b8:be:74:cd:
60:a8:66:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURgGF6OZmjbv24gNYFAfRP8Cc8zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYyRERGQTk2Q0NGQTUxRTY2RTVGODg4MzNEQUFGM0ND
Q0VCNDMxMTAeFw0yNjA1MTIwNTE1NDNaFw0yNjA1MTMwNzE2NDNaMDMxMTAvBgNV
BAMTKDhCRThGMTZCMzdGREFEMUJDMjA2OUQ1ODY1REYzQzEyMzlCNjQ2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYP+aUhCyrniKScVyz9iM1m2Y
0xPlOmpOn/l2GfoJa5+nAX8Q6hLwdpZvVpICdfXFDAV7wwlqUaG6xnzdQjqsPHC5
/KuPWnACdBSFiIoRnoao3Y/Uo+lvhGVJ7K8NzJR96HJ3vsynSW7CSP/z+Ui38nwH
cu1CL1Jm+E5AhcZ/4W/SGTBP6JwObxZ1z1Uc/5is14Irpz9p/0wg8FgnNfvO6A8S
RwGXfELeTPo8WF2qSj6Wq3sNsEZ1/Xl7UFsw2BXplWC0QiN057DPHA7RgcGIQXpI
Z7VpCrnLU5m8s1Qxiw9FvR11vf7VEbGESBrhmIx+5B4QMmxvB0sHxc8m2Qq3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi+jxazf9rRvCBp1YZd88Ejm2RtUwHwYDVR0j
BBgwFoAUdi3fqWzPpR5m5fiIM9qvPMzrQxEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTJhYzllNjMtOTg5MC00MjJlLTg4ZGMtN2NiNmRkYWMyMmZhLzAvNzYyRERGQTk2
Q0NGQTUxRTY2RTVGODg4MzNEQUFGM0NDQ0VCNDMxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NjJEREZBOTZDQ0ZBNTFFNjZFNUY4ODgzM0RBQUYzQ0NDRUI0
MzExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4
ZGMtN2NiNmRkYWMyMmZhLzAvNzYyRERGQTk2Q0NGQTUxRTY2RTVGODg4MzNEQUFG
M0NDQ0VCNDMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKk3FlN2mko7nCdAPGJmkMnaujWI1t07arPU
smGo7tq14lvtOiEKhEKWBFAstPAu7JOdSKsGDoWSWthlWFHey6iAHr5ainnOZlTN
bhawSI7AVHViWNT3XFSzSj+7xO61FEn2DonoN/8SkbtWXDh+k79/BeD6BNiSEjeR
u4d8D5etWoDTfytsBwu5B6ItlsnQ2eEpxrU9M/q8KQK+xH2KCDHMM34t0EO4YaHS
yTLvUwkEkqyreMmU28OJ4bTg3iDWl/kNcAUxfoEDpLeBRW/SZOQ0dHGf5ORsRuL1
QRil1qH1l/ozsoy7BJRHPD3Uwn8WDVODBpRHicL/uL50zWCoZjU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:30 2026 by rpki-client