
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft
File: 0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft (raw, json)
Hash identifier: 7RyCBw42XrTA41xyawItBV5dNG4JHQIKvdwPURY6dak=
Subject key identifier: 90:4E:AA:E9:04:0B:99:CE:3E:73:65:4B:97:6C:17:47:28:B5:CA:48
Authority key identifier: 0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81
Certificate issuer: /CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981
Certificate serial: 1F27A5A105F542A83C24E3BE82AB6749BDFC11F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:51:22 +0000
Manifest this update: Tue 12 May 2026 22:46:22 +0000
Manifest next update: Thu 14 May 2026 02:03:22 +0000
Files and hashes: 1: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: lDpAk861UziVhV+qZdtOx0oy+hY07fnOS3IwX22akHw=)
2: 0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl (hash: wZsqxqkTxAuFz2ICAkI/vcM1MotK5C4mjXw8FL7V698=)
3: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: bzbQyehOXR0BUaS8fMBWL/AuVpFlX4q7jGyljHVAKoE=)
4: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: wIhuFppqnRJ2JAAzZM7TLO4GkOIRzd4QY75tQeCzgTM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl
rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:27:a5:a1:05:f5:42:a8:3c:24:e3:be:82:ab:67:49:bd:fc:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981
Validity
Not Before: May 12 22:46:22 2026 GMT
Not After : May 14 02:03:22 2026 GMT
Subject: CN=904EAAE9040B99CE3E73654B976C174728B5CA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:fd:89:19:34:ea:08:ac:57:21:f6:7a:58:
4b:76:c6:78:d1:74:56:5f:f2:fb:70:a2:2e:36:f2:
33:27:2f:9c:dc:17:a5:c9:33:36:97:8f:5f:a1:45:
b7:57:27:43:17:b2:c6:aa:82:61:8c:aa:dd:a7:ad:
0f:3f:c4:ff:77:7c:ff:10:9a:4b:ff:28:be:dd:99:
ef:85:5f:3c:c8:ef:b3:7d:45:e6:98:6a:17:83:46:
48:9f:5c:d6:df:66:e1:20:46:88:f7:51:cb:ea:69:
cb:8a:19:04:f9:63:c1:ae:01:31:ab:47:d4:cb:7f:
5b:c7:84:36:c5:80:d2:bd:55:05:36:45:c3:23:e5:
16:2f:20:e8:62:bd:81:70:d0:d9:3c:ae:2e:53:5c:
a8:c0:b8:88:84:70:78:ed:d0:b5:c4:89:26:6a:68:
1a:3c:12:00:12:8f:1c:65:bb:0e:a2:c4:54:53:e3:
0a:52:a3:0e:e4:66:b7:93:e6:7a:9f:00:8b:19:09:
5c:35:bf:03:23:0f:d3:cb:14:65:6b:eb:22:52:ff:
e2:e2:5a:0b:d2:d6:1b:10:69:e8:6e:78:91:29:c2:
45:b5:b2:f1:cf:67:65:af:ee:ad:01:ca:cb:24:c1:
40:89:14:0a:73:3d:69:75:9b:d0:a1:9c:51:a0:39:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:AA:E9:04:0B:99:CE:3E:73:65:4B:97:6C:17:47:28:B5:CA:48
X509v3 Authority Key Identifier:
keyid:0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:97:03:1a:fe:d6:fc:d6:a6:8f:d7:25:ca:36:15:05:65:
4d:bc:5a:80:1e:aa:d8:64:e7:80:77:e3:c8:eb:21:76:09:14:
46:29:9b:b4:5c:58:8a:b8:cb:21:6f:bb:9c:25:4a:a4:f1:bd:
76:3f:55:e6:3a:f0:22:e5:25:4e:c7:76:f7:c7:fb:e2:a5:b3:
a8:96:ba:a7:a4:8a:45:91:fa:96:cf:8f:8d:51:63:08:76:20:
a1:ae:c6:f4:4e:59:4d:46:9d:37:c7:3d:ee:c4:7f:2c:6d:4a:
8e:58:a5:5f:b5:0c:e2:db:64:45:3d:35:35:8d:d0:11:ee:73:
d9:59:f9:47:16:73:b9:38:86:dc:8f:7b:c8:91:c1:76:77:07:
4c:b8:12:2f:dc:38:06:c3:92:70:96:14:80:27:db:2c:ac:4d:
12:a2:29:a3:c4:72:99:d0:22:aa:00:95:e9:4a:9c:c2:e0:fb:
8a:f8:34:f6:14:26:d1:55:2d:69:1e:be:8f:54:eb:13:8e:6d:
cd:29:69:24:99:5d:0e:2f:ec:7e:a7:11:a5:95:6e:b0:b7:d8:
05:47:be:69:b1:8c:65:7a:f9:2a:ba:6f:77:1f:38:0a:02:ab:
78:54:18:ad:c9:db:dc:ac:24:77:24:63:ab:7b:95:47:2d:99:
f1:f4:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:49:03 2026 by rpki-client