
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
File: 74968D237E4D28CC12725975DFEBE487B0EAA72F.mft (raw, json)
Hash identifier: RFWUw95tpCY9/0JfkyvZGv9Y5+LQXi9Oy+iNkH1Qb2w=
Subject key identifier: 43:91:BE:C6:D5:F0:A4:26:1F:AE:70:C4:25:48:EE:5E:85:10:93:CB
Authority key identifier: 74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
Certificate issuer: /CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Certificate serial: 034D7E50279F31568D13937AF8462554CB18197D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 17:28:50 +0000
Manifest this update: Thu 03 Sep 2026 17:23:50 +0000
Manifest next update: Fri 04 Sep 2026 17:55:50 +0000
Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: AWLeqSIPPGZYHKfAsY5sORe/thUthJhR3mD21mk84m8=)
2: 74968D237E4D28CC12725975DFEBE487B0EAA72F.crl (hash: Wo5eXR8iZvmIYYCFwtWz68/j9LOpBAlbEv/1KreCVI8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4d:7e:50:27:9f:31:56:8d:13:93:7a:f8:46:25:54:cb:18:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74968D237E4D28CC12725975DFEBE487B0EAA72F
Validity
Not Before: Sep 3 17:23:50 2026 GMT
Not After : Sep 4 17:55:50 2026 GMT
Subject: CN=4391BEC6D5F0A4261FAE70C42548EE5E851093CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:90:92:f6:6b:21:c6:69:9c:6e:25:1c:61:
67:43:b7:ac:16:95:94:44:30:8f:cd:6f:c6:36:ee:
88:b4:bb:b4:1c:2f:a5:f0:bf:4e:17:f0:89:d0:fc:
b5:54:7c:a4:64:9d:88:85:fa:21:22:50:3f:13:c8:
7e:59:94:38:d1:ad:cf:ec:88:79:36:9e:eb:b8:ff:
80:55:d1:24:ea:91:4a:94:a7:e9:32:9e:25:5e:63:
74:e6:5b:70:c7:d0:f0:87:6f:e5:2f:d5:27:55:32:
61:dc:2c:7f:21:67:ee:e5:4b:35:5d:7b:38:48:4f:
82:d4:a1:97:1f:f7:c5:7a:a7:6b:cb:9c:7d:a0:ce:
81:39:cc:2f:b9:ef:05:bb:0a:b6:29:db:e8:3f:35:
20:d6:c2:07:de:b9:18:87:d1:ff:57:54:6d:62:b8:
33:31:77:d5:32:8a:05:e2:3f:98:a3:50:08:81:c2:
76:82:03:37:33:7b:6a:c6:6f:d9:5b:a8:0a:09:67:
1f:db:c5:7a:2b:5c:5e:5e:dd:21:29:6d:11:1c:61:
06:b8:af:df:6a:2b:6c:38:60:a8:8c:dd:10:ca:b5:
78:e8:1f:53:f0:40:c8:6e:99:44:9d:57:f8:e3:11:
29:ff:05:72:59:0e:62:d0:93:5d:c5:3c:cb:03:be:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:BE:C6:D5:F0:A4:26:1F:AE:70:C4:25:48:EE:5E:85:10:93:CB
X509v3 Authority Key Identifier:
keyid:74:96:8D:23:7E:4D:28:CC:12:72:59:75:DF:EB:E4:87:B0:EA:A7:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/74968D237E4D28CC12725975DFEBE487B0EAA72F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/74968D237E4D28CC12725975DFEBE487B0EAA72F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:47:2d:47:f0:5c:96:68:c0:c6:2a:1f:ba:c8:93:34:50:1a:
aa:80:51:67:5a:60:2f:8f:34:83:c9:95:01:ba:76:8d:4e:01:
37:e5:63:6d:09:e6:7e:f0:f7:0c:ea:e3:f1:9c:41:a4:b4:f4:
62:52:8b:0e:7a:a5:3a:3e:c2:b1:04:52:29:81:0f:9d:db:94:
93:5a:10:22:13:a7:39:bb:d7:80:56:de:b1:d3:c2:e5:29:b8:
19:bd:01:4b:88:cd:be:ff:01:07:bf:c5:bf:77:3c:a6:23:c7:
49:4e:3c:1c:cd:78:e6:2d:7d:e9:3d:6a:84:de:a6:de:a9:07:
12:68:b2:bc:bb:2f:28:ed:6d:90:10:dd:50:66:f4:ad:63:00:
3c:64:89:b0:35:7c:4b:bc:6a:74:99:08:84:05:ad:0d:df:62:
99:bc:bc:7f:f9:1d:fe:ba:90:49:37:a9:cd:cc:bd:a5:40:69:
cc:f7:3d:42:7f:47:f7:88:96:fc:cf:6c:07:f9:87:f7:84:f4:
c8:4a:aa:f6:71:f7:9d:ca:5e:e6:30:4a:4f:f7:3d:06:e1:40:
c1:a9:06:f3:6d:63:06:81:c1:22:66:5e:2b:4a:74:cb:c6:fb:
ef:11:af:08:ee:45:e9:91:a1:62:91:60:2e:ec:15:82:90:54:
3e:a5:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:43:49 2026 by rpki-client