
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
File: 762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft (raw, json)
Hash identifier: 3C8VM2EKpuHZcX/rFqgGWqLCGBwi2SZgB5aBa7wNer0=
Subject key identifier: 5E:75:F4:20:BB:2A:99:B6:25:82:2B:D4:14:45:F2:2A:B4:CC:75:2A
Authority key identifier: 76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
Certificate issuer: /CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Certificate serial: 2D8F82EA3C00085815164E9F3A4C0C5D5564F373
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 10:38:51 +0000
Manifest this update: Thu 24 Sep 2026 10:33:51 +0000
Manifest next update: Fri 25 Sep 2026 14:14:51 +0000
Files and hashes: 1: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: dOOKnsnTlQ5K+rzuczxdM8MwKRcnUh90TPAZNcYMMe0=)
2: 762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl (hash: w4xLDy41Jg/FQCX/OtsOIswoLY0W0D9v8rxM5KCOYEI=)
3: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: F9rq8pU2wW/Oa03Jq6P0raRbd+1OsCNjkCP/TyMkA1w=)
4: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: p00BkNbJWawBKhREwZuAAHQMCf/7KPIeduMF3VQslvA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8f:82:ea:3c:00:08:58:15:16:4e:9f:3a:4c:0c:5d:55:64:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311
Validity
Not Before: Sep 24 10:33:51 2026 GMT
Not After : Sep 25 14:14:51 2026 GMT
Subject: CN=5E75F420BB2A99B625822BD41445F22AB4CC752A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:8c:09:df:8f:1e:0b:4f:8a:b1:f3:10:f4:
3b:28:2d:bc:5d:ed:62:4b:e3:40:a1:7c:91:b2:7e:
58:70:cb:7f:80:cf:19:fe:be:8b:6b:f6:1d:39:fe:
aa:77:4b:69:d9:c4:45:d8:b6:17:a8:4e:4a:91:85:
71:38:8b:71:9e:d0:a7:7b:cc:7f:d2:a7:c2:c0:33:
f3:db:39:ec:19:f6:8c:86:10:3b:2b:93:fc:9c:76:
32:76:2a:2e:f4:97:29:ad:a2:88:e1:f0:0b:24:39:
a3:50:d0:c5:6c:07:b9:43:7e:a5:e2:c4:36:57:29:
20:67:0e:42:68:7e:f4:d6:93:97:8a:e6:88:0b:48:
92:e3:51:94:48:fb:7d:5a:c9:b8:51:54:59:df:ce:
ad:7c:e3:a6:0d:96:fb:4f:a8:18:23:c2:cf:95:bd:
2f:2d:3b:26:e4:ba:4a:7e:8f:7a:44:61:d3:53:d8:
db:30:66:b0:12:86:8e:67:72:8a:9e:a6:57:bb:25:
0a:d9:a2:f7:a7:e8:98:02:8d:10:5c:53:1d:85:8f:
b2:6e:71:bf:b1:56:c7:be:42:2a:ae:a9:60:c8:61:
e7:90:d4:ac:67:da:b1:af:64:a0:b7:b8:16:28:fb:
36:e6:9a:c9:27:7c:c5:db:ce:db:8e:60:6b:62:ef:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:F4:20:BB:2A:99:B6:25:82:2B:D4:14:45:F2:2A:B4:CC:75:2A
X509v3 Authority Key Identifier:
keyid:76:2D:DF:A9:6C:CF:A5:1E:66:E5:F8:88:33:DA:AF:3C:CC:EB:43:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/762DDFA96CCFA51E66E5F88833DAAF3CCCEB4311.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:ce:55:35:78:a8:ee:3b:02:05:81:c5:3c:49:76:29:19:
b5:14:e0:d8:79:9b:9c:96:a3:ce:dd:56:4c:6b:b2:19:ad:1f:
0f:2e:54:b3:a7:fe:61:a9:37:3a:d4:e6:79:87:81:c0:da:ab:
4e:38:d1:88:34:22:ff:bd:f6:f8:25:2e:24:bf:64:49:ab:68:
cd:3d:7a:f8:6a:7b:de:d3:13:a6:42:65:bc:d0:d2:11:58:6c:
d6:7b:90:46:4e:95:23:77:1c:90:97:38:06:79:ff:73:1a:f8:
5c:70:66:3e:b7:a7:27:25:0b:34:fe:8a:5d:88:d7:2d:83:e8:
a5:29:bb:59:05:6d:a5:fd:5f:1f:b2:81:24:b5:35:e0:70:d8:
5d:95:9d:63:bf:fd:a2:09:32:ac:7c:3b:45:98:b4:3b:96:f2:
f0:c1:12:c8:46:16:25:2b:7b:52:2e:ba:93:99:bf:7b:bb:26:
00:eb:b5:2a:94:28:72:a0:5f:f9:b2:65:72:ec:97:65:15:2f:
cb:38:91:37:eb:0c:96:2c:73:85:e4:c7:5f:f5:65:f6:76:cc:
fa:a2:15:04:60:01:e6:02:91:0d:8f:2d:46:22:24:d0:48:9e:
dc:16:02:ae:6f:3c:4a:d6:91:12:1c:50:5a:42:85:0b:53:84:
cc:96:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:03 2026 by rpki-client