
$ rpki-client -vvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
File: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft (raw, json)
Hash identifier: L10Idb4AneomIgX8MJGa7DKBlR05xKm0D5fYuXQQYQQ=
Subject key identifier: 4D:E5:62:3E:00:68:32:10:FB:D9:D3:4F:1E:03:C3:3A:55:66:FF:7A
Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
Certificate issuer: /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Certificate serial: 504B501AD27D64225462F995BD1A1ABB467EFF4A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:02:13 +0000
Manifest this update: Tue 02 Jun 2026 13:57:12 +0000
Manifest next update: Wed 03 Jun 2026 16:08:12 +0000
Files and hashes: 1: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl (hash: sEF2nP3jCFbjbKLPPyX2uros0laf6Nz3He7ANyh+A2A=)
2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: 71ufcrIpd5/EvIBttOzN/s4e00TuL2D++Ya5GnzoM0s=)
3: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: EEEc99vXoE2Npy/NOJRBMrKblV42yAqKIxiksvrcrrs=)
4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: WYsfpXuk+twMKamB2Cainkplei1Yhkq2SXWGKBJS4oo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4b:50:1a:d2:7d:64:22:54:62:f9:95:bd:1a:1a:bb:46:7e:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Validity
Not Before: Jun 2 13:57:12 2026 GMT
Not After : Jun 3 16:08:12 2026 GMT
Subject: CN=4DE5623E00683210FBD9D34F1E03C33A5566FF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:ef:b3:0d:a2:0d:7b:ce:75:36:7f:00:7e:
21:35:62:4e:6c:58:e2:de:1c:b4:f2:0d:6a:0a:c3:
f1:29:0e:b9:ce:ae:a2:ef:f9:32:59:71:09:f0:46:
93:6c:51:32:f8:32:da:a3:e0:96:8c:a6:74:88:f7:
2a:01:91:1b:26:91:57:58:9e:a9:ca:5a:d8:1b:2b:
c3:bd:25:15:51:9d:20:a1:30:20:96:1d:dd:d7:1a:
47:a7:73:0d:c5:c5:09:98:d3:a8:7c:c2:ee:4e:7d:
e7:6a:e4:97:0a:a8:09:07:93:55:2f:b6:25:9e:3d:
56:4f:ed:7f:67:6a:c7:bf:cb:f5:05:77:85:db:b2:
44:e3:c0:69:6d:3e:48:6a:5a:64:47:09:a6:1e:cb:
45:10:6b:44:4f:64:99:e8:93:09:07:73:3b:dd:1d:
d9:8e:be:2d:58:2c:20:32:23:4c:01:7c:d0:99:59:
3b:af:3c:e5:29:47:24:8c:6c:69:c7:d3:fb:f8:c0:
c8:bf:13:a3:fb:fd:d7:ee:41:c3:15:60:fa:46:9a:
44:73:77:3b:87:a2:a2:04:7f:38:8e:6d:fe:44:dc:
61:58:da:9a:18:95:65:95:a6:14:c2:da:98:e2:09:
93:5a:c7:d2:c8:e5:e1:88:a4:07:0d:e7:9a:73:2a:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E5:62:3E:00:68:32:10:FB:D9:D3:4F:1E:03:C3:3A:55:66:FF:7A
X509v3 Authority Key Identifier:
keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ff:7a:7a:56:20:1c:11:c0:86:3c:10:29:5e:81:a9:0b:88:
66:b3:f7:f8:4f:25:58:2e:7d:f5:1e:0b:ab:3d:55:96:7c:ca:
0e:e7:6f:e6:f3:04:04:f8:25:53:c0:55:88:65:14:c0:ef:87:
d4:24:4e:c7:39:16:1b:d1:af:a2:7d:a7:34:18:19:ff:72:d6:
f1:6a:5c:aa:67:26:69:9e:4b:86:ae:62:66:6e:52:7b:ca:b8:
0c:73:e6:03:54:a8:3a:54:0d:12:7f:05:b5:bf:04:81:05:da:
df:5f:7b:3b:76:64:f5:2e:c1:50:e3:d2:12:bb:d6:55:5c:d6:
2e:53:4e:a2:57:71:df:78:da:f9:41:fc:62:5a:00:53:ee:ed:
03:33:86:d0:68:fa:d5:b3:ee:05:58:d3:c1:af:2d:fe:a5:64:
7d:70:3b:63:e1:b4:d2:cf:87:b6:84:b9:c2:8f:51:cd:80:c5:
63:97:c5:07:7b:4b:33:0b:d9:28:34:39:ed:a4:23:a5:31:fa:
7b:76:9a:cb:e5:65:3b:77:6f:56:17:18:f4:f4:92:02:bf:60:
fd:33:80:70:86:e6:5b:dd:ab:3f:97:46:87:97:5a:13:c5:ee:
94:22:e5:9c:eb:38:94:43:6b:15:55:48:4a:c9:5c:13:e0:95:
80:20:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:52 2026 by rpki-client