
$ rpki-client -vvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
File: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft (raw, json)
Hash identifier: yvSsDLVfocQGrq+Ivfd/rL+aZWsb0l5sVYNiIiqRs1M=
Subject key identifier: A2:8A:F8:F7:1E:C6:0A:42:C2:FE:3E:D1:37:C9:8A:99:EA:20:83:2E
Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
Certificate issuer: /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Certificate serial: 7E5ABD60D6F16FA0F94264C81230F943E8A4A548
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
Manifest number: 6C
Signing time: Mon 20 Jul 2026 18:59:54 +0000
Manifest this update: Mon 20 Jul 2026 18:54:54 +0000
Manifest next update: Tue 21 Jul 2026 21:43:54 +0000
Files and hashes: 1: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl (hash: ce7L3qGQYMZf+qswx0lVdJ8z/PGyLXSylCuzuEJ6PpM=)
2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: 71ufcrIpd5/EvIBttOzN/s4e00TuL2D++Ya5GnzoM0s=)
3: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: EEEc99vXoE2Npy/NOJRBMrKblV42yAqKIxiksvrcrrs=)
4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: WYsfpXuk+twMKamB2Cainkplei1Yhkq2SXWGKBJS4oo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5a:bd:60:d6:f1:6f:a0:f9:42:64:c8:12:30:f9:43:e8:a4:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Validity
Not Before: Jul 20 18:54:54 2026 GMT
Not After : Jul 21 21:43:54 2026 GMT
Subject: CN=A28AF8F71EC60A42C2FE3ED137C98A99EA20832E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:87:ad:8b:31:ba:cd:df:9e:6a:e5:03:63:
55:fe:c7:33:40:e8:7c:c8:1c:e0:97:85:b7:b1:58:
61:f4:46:fc:32:22:68:40:5c:cd:eb:8d:57:a4:a9:
07:1a:9d:11:57:9f:71:90:f4:3c:82:48:72:78:8e:
25:a7:b2:6f:45:b2:cb:93:c3:09:0e:34:17:b6:74:
35:d8:13:3e:3e:f4:68:8c:ab:41:2e:e5:14:d6:58:
b1:1f:f0:b1:5f:7b:38:ae:d0:f6:a0:40:16:f4:6f:
77:64:d4:c7:93:de:a6:25:4c:5c:5a:bf:37:c7:af:
00:34:2b:05:76:4d:4f:1b:e2:41:0a:43:89:3a:dc:
35:21:fd:f8:83:8d:98:eb:c7:75:0d:6e:3e:22:17:
5e:2f:8f:fe:6e:32:86:50:f6:4d:c1:53:58:9b:e3:
7d:1f:51:31:f8:1f:38:e4:1d:5f:16:bf:20:c6:85:
89:b4:0d:d7:51:a0:ad:a7:dd:7d:59:95:0c:be:cd:
96:1f:27:17:48:8d:b0:78:fa:36:bf:47:46:6b:fa:
2c:02:0e:ee:47:63:58:b6:69:e6:a5:3a:43:11:36:
96:22:05:93:7d:fc:dd:d3:ae:91:2a:b4:3b:b5:2c:
86:ba:8d:40:e1:0e:65:97:34:a7:42:7f:cf:15:eb:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:F8:F7:1E:C6:0A:42:C2:FE:3E:D1:37:C9:8A:99:EA:20:83:2E
X509v3 Authority Key Identifier:
keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:27:c4:ae:59:ea:98:70:93:af:78:ff:e6:ed:fc:4f:13:
9c:d1:15:6a:15:36:89:67:2e:d6:49:02:3b:3b:98:30:68:99:
ca:54:9d:9d:c9:f2:99:49:3e:95:9d:19:68:db:ac:3d:2f:22:
50:5f:cb:dd:26:e3:8c:b9:ff:1d:6b:1c:2e:29:9c:2d:38:53:
aa:54:be:d0:d6:d0:ea:58:05:12:01:d8:23:aa:48:7a:ce:b2:
cd:cc:44:fb:a3:4a:da:8e:c2:28:cb:ba:7b:af:3e:61:f9:e1:
ed:ab:80:21:46:01:23:92:1e:4d:27:c9:6c:0e:d2:63:e1:07:
ab:95:a9:85:e4:b5:47:24:cf:2c:14:56:12:95:84:59:ba:84:
46:bd:9d:df:01:00:0f:d4:46:89:59:db:fc:dc:de:16:27:10:
ed:bd:6c:c4:6f:87:48:34:c2:49:6d:7f:c6:80:ff:b4:cf:ab:
e5:a0:09:e2:7e:86:05:57:cc:a4:d0:b7:99:2a:b3:a6:cd:4c:
c9:94:48:b9:06:53:37:da:43:18:35:e3:a7:db:ed:0a:3a:64:
a7:82:b8:7b:bf:f1:26:10:c4:de:b7:81:bc:1a:67:f6:3a:fa:
9d:9f:bf:3c:e9:fe:2f:8d:06:8f:d7:b4:5b:4f:4e:40:92:fc:
b3:0d:0e:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUflq9YNbxb6D5QmTIEjD5Q+ikpUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVB
MkMwQjMwRTAeFw0yNjA3MjAxODU0NTRaFw0yNjA3MjEyMTQzNTRaMDMxMTAvBgNV
BAMTKEEyOEFGOEY3MUVDNjBBNDJDMkZFM0VEMTM3Qzk4QTk5RUEyMDgzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnYetizG6zd+eauUDY1X+xzNA
6HzIHOCXhbexWGH0RvwyImhAXM3rjVekqQcanRFXn3GQ9DyCSHJ4jiWnsm9FssuT
wwkONBe2dDXYEz4+9GiMq0Eu5RTWWLEf8LFfeziu0PagQBb0b3dk1MeT3qYlTFxa
vzfHrwA0KwV2TU8b4kEKQ4k63DUh/fiDjZjrx3UNbj4iF14vj/5uMoZQ9k3BU1ib
430fUTH4HzjkHV8WvyDGhYm0DddRoK2n3X1ZlQy+zZYfJxdIjbB4+ja/R0Zr+iwC
Du5HY1i2aealOkMRNpYiBZN9/N3TrpEqtDu1LIa6jUDhDmWXNKdCf88V614BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoor49x7GCkLC/j7RN8mKmeoggy4wHwYDVR0j
BBgwFoAUdZkcRj/Hlh7TBe2YmqpMDqLAsw4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzQ5ZGM1ZWItMzI2MC00MjhhLWE2YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYz
RkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVBMkMwQjMwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NTk5MUM0NjNGQzc5NjFFRDMwNUVEOTg5QUFBNEMwRUEyQzBC
MzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2
YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRD
MEVBMkMwQjMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAVNJ8SuWeqYcJOveP/m7fxPE5zRFWoVNoln
LtZJAjs7mDBomcpUnZ3J8plJPpWdGWjbrD0vIlBfy90m44y5/x1rHC4pnC04U6pU
vtDW0OpYBRIB2COqSHrOss3MRPujStqOwijLunuvPmH54e2rgCFGASOSHk0nyWwO
0mPhB6uVqYXktUckzywUVhKVhFm6hEa9nd8BAA/URolZ2/zc3hYnEO29bMRvh0g0
wkltf8aA/7TPq+WgCeJ+hgVXzKTQt5kqs6bNTMmUSLkGUzfaQxg146fb7Qo6ZKeC
uHu/8SYQxN63gbwaZ/Y6+p2fvzzp/i+NBo/XtFtPTkCS/LMNDjY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:02 2026 by rpki-client