
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
File: 7D748C9993BD612EB4DED86D78A542650C0739D2.mft (raw, json)
Hash identifier: LJsTy5XxNOckV20OeNd9le3i/xFYnSjbGXB0PJ57IC4=
Subject key identifier: 6E:F6:62:F6:37:5D:76:60:96:63:63:68:69:9A:68:8D:E4:48:D3:2D
Authority key identifier: 7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2
Certificate issuer: /CN=7D748C9993BD612EB4DED86D78A542650C0739D2
Certificate serial: 7D1B29434D3F26605DC589E31F1B6184B6A23015
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 05:27:31 +0000
Manifest this update: Thu 24 Sep 2026 05:22:31 +0000
Manifest next update: Fri 25 Sep 2026 07:43:31 +0000
Files and hashes: 1: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: F4nsqoozGK4NB7nZpkqT2Hnvk+Lf+l5FrVBWD/7xIok=)
2: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: 8hxKIphl2RuDK+xff1DI7cxGB0tqauW81xIpHuvLInE=)
3: 7D748C9993BD612EB4DED86D78A542650C0739D2.crl (hash: uPhKFXwRRfilniYyyzq/GlaBr9omY64RysHfeI4JgQI=)
4: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: snzhp1flNHDzfwgs9QpaPIIaMwshl5sSyA4vnDdYKDg=)
5: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: nZpFFdv+h1rTWhfuw6ZS6/7x9CDvhNusGoKBRBaU3O4=)
6: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: Qng22t+/fZctwuGfY/oz7Ui18hIgTE9U9nLKddDnqOw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl
rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 07:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1b:29:43:4d:3f:26:60:5d:c5:89:e3:1f:1b:61:84:b6:a2:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D748C9993BD612EB4DED86D78A542650C0739D2
Validity
Not Before: Sep 24 05:22:31 2026 GMT
Not After : Sep 25 07:43:31 2026 GMT
Subject: CN=6EF662F6375D766096636368699A688DE448D32D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:9b:33:9b:8f:30:58:a9:7f:88:d4:eb:66:
f8:f6:9c:93:81:71:5f:f5:f7:6f:93:ff:c0:66:42:
96:bc:2c:cf:7f:6f:c1:94:06:1a:66:09:99:d4:6c:
70:a9:d2:fc:e6:8a:cd:98:7c:88:ab:5a:bc:57:fe:
80:40:49:8c:49:c9:39:74:c7:e3:66:a4:a7:43:c9:
cb:47:aa:05:ae:a9:98:56:9c:77:62:68:87:8d:a9:
40:86:f7:ac:c3:ec:df:5f:d5:7c:c4:10:e2:9a:84:
74:ca:c9:66:54:fd:51:06:92:c6:67:32:32:68:c4:
f0:fa:a3:2e:68:77:8d:e7:5c:13:76:44:84:b5:66:
b4:71:c4:60:40:ee:b6:83:2c:a0:0c:be:d6:fd:6d:
cc:99:f9:41:06:4d:0e:4f:49:4b:4f:8b:e2:3c:f1:
3a:18:10:b5:80:47:11:5f:81:13:fd:15:74:1d:39:
00:ca:c0:18:92:e7:ee:6c:87:83:81:b4:1d:ea:a8:
0e:cd:a9:9d:f0:89:29:ea:62:47:9f:1b:c7:24:6e:
55:8e:25:48:28:90:0d:cc:70:5d:12:e6:94:94:2c:
a8:39:6c:d4:06:2d:48:ae:29:49:22:a2:e3:f4:6c:
27:c7:5c:fc:47:31:97:f5:8f:7e:5f:df:42:70:3c:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F6:62:F6:37:5D:76:60:96:63:63:68:69:9A:68:8D:E4:48:D3:2D
X509v3 Authority Key Identifier:
keyid:7D:74:8C:99:93:BD:61:2E:B4:DE:D8:6D:78:A5:42:65:0C:07:39:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D748C9993BD612EB4DED86D78A542650C0739D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/7D748C9993BD612EB4DED86D78A542650C0739D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:b3:17:bd:c4:de:ef:49:a3:a2:a9:13:c0:99:f5:26:ed:
8a:5b:ef:ab:cc:44:92:2c:06:9a:f8:6a:d4:a0:c9:d2:ad:16:
81:71:c4:33:8c:1d:35:92:ed:33:48:f1:93:0f:b7:dc:28:39:
5b:de:80:ea:d6:f5:db:ed:25:e8:02:f6:dc:49:76:fd:e4:ed:
51:91:13:ed:43:c4:e4:39:9a:1b:36:f1:b2:7c:79:85:ec:89:
f2:28:8a:ed:a0:5e:26:7b:02:ed:fc:35:50:8b:81:bc:2c:9e:
db:0d:83:40:38:eb:cd:49:5e:f9:2c:05:c5:f9:de:cc:f5:ec:
c2:62:3c:51:5b:8f:33:da:03:5a:5a:d9:fa:bf:53:66:a6:ee:
19:95:81:11:f0:44:bf:1f:c4:7b:3c:ec:7b:f1:38:b8:40:ea:
56:3e:3f:2f:0b:c8:6d:c0:79:33:b2:54:52:99:4d:19:8f:ff:
3b:ef:5a:26:18:82:b1:aa:ed:d0:a6:d2:e6:80:f5:45:5c:21:
f2:ef:89:2d:35:dd:59:c9:fe:6d:7d:9c:e4:30:4e:a8:0d:da:
cd:d1:4b:b9:46:03:c7:2b:c7:58:82:28:d6:7c:7e:54:b9:f9:
57:3b:e3:d5:26:ce:65:3f:56:b6:78:65:b9:57:d6:94:2d:04:
70:1d:d4:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfRspQ00/JmBdxYnjHxthhLaiMBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQyNjUw
QzA3MzlEMjAeFw0yNjA5MjQwNTIyMzFaFw0yNjA5MjUwNzQzMzFaMDMxMTAvBgNV
BAMTKDZFRjY2MkY2Mzc1RDc2NjA5NjYzNjM2ODY5OUE2ODhERTQ0OEQzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mpszm48wWKl/iNTrZvj2nJOB
cV/192+T/8BmQpa8LM9/b8GUBhpmCZnUbHCp0vzmis2YfIirWrxX/oBASYxJyTl0
x+NmpKdDyctHqgWuqZhWnHdiaIeNqUCG96zD7N9f1XzEEOKahHTKyWZU/VEGksZn
MjJoxPD6oy5od43nXBN2RIS1ZrRxxGBA7raDLKAMvtb9bcyZ+UEGTQ5PSUtPi+I8
8ToYELWARxFfgRP9FXQdOQDKwBiS5+5sh4OBtB3qqA7NqZ3wiSnqYkefG8ckblWO
JUgokA3McF0S5pSULKg5bNQGLUiuKUkiouP0bCfHXPxHMZf1j35f30JwPCfNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbvZi9jdddmCWY2NoaZpojeRI0y0wHwYDVR0j
BBgwFoAUfXSMmZO9YS603thteKVCZQwHOdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmFkZDdjMGYtMDJkMy00MjE3LTlmYzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5
M0JENjEyRUI0REVEODZENzhBNTQyNjUwQzA3MzlEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RDc0OEM5OTkzQkQ2MTJFQjRERUQ4NkQ3OEE1NDI2NTBDMDcz
OUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm
YzMtMDA0N2FlMTgzNmRjLzAvN0Q3NDhDOTk5M0JENjEyRUI0REVEODZENzhBNTQy
NjUwQzA3MzlEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG5Isxe9xN7vSaOiqRPAmfUm7Ypb76vMRJIs
Bpr4atSgydKtFoFxxDOMHTWS7TNI8ZMPt9woOVvegOrW9dvtJegC9txJdv3k7VGR
E+1DxOQ5mhs28bJ8eYXsifIoiu2gXiZ7Au38NVCLgbwsntsNg0A4681JXvksBcX5
3sz17MJiPFFbjzPaA1pa2fq/U2am7hmVgRHwRL8fxHs87HvxOLhA6lY+Py8LyG3A
eTOyVFKZTRmP/zvvWiYYgrGq7dCm0uaA9UVcIfLviS013VnJ/m19nOQwTqgN2s3R
S7lGA8crx1iCKNZ8flS5+Vc749UmzmU/VrZ4ZblX1pQtBHAd1Hk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:24:20 2026 by rpki-client