
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft (raw, json)
Hash identifier: lKUG/VdJihmC08A+K0V4a10CX8qECrmjSzKP47X8i/U=
Subject key identifier: 72:70:83:70:F9:77:4E:25:FB:41:95:C2:D6:16:33:D9:18:73:13:D6
Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Certificate serial: 2FE091EA10A895FA7259A213E0177C9369B921EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
Manifest number: 11
Signing time: Thu 14 May 2026 03:55:24 +0000
Manifest this update: Thu 14 May 2026 03:50:24 +0000
Manifest next update: Fri 15 May 2026 05:18:24 +0000
Files and hashes: 1: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=)
2: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: +LMzTIT3HAm9qO4qM7ZOTI2OEw2Fm2hgpEAqo+PYvZw=)
3: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl (hash: e4ijdhceZ9VLR13s3MkfjficRR5gLuYM8dLCM7ysXsI=)
4: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 03:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e0:91:ea:10:a8:95:fa:72:59:a2:13:e0:17:7c:93:69:b9:21:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03
Validity
Not Before: May 14 03:50:24 2026 GMT
Not After : May 15 05:18:24 2026 GMT
Subject: CN=72708370F9774E25FB4195C2D61633D9187313D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:7a:10:30:a1:66:d8:7c:27:c5:71:3b:ec:
91:4e:82:8d:7c:ed:78:22:a6:13:d8:56:b3:bc:dc:
a9:1a:d4:99:3e:2c:ea:f4:8b:dc:b1:b7:94:c4:ee:
9e:2c:e3:84:be:31:ca:c9:9e:2b:b4:56:6c:bb:51:
a7:81:65:83:d7:5d:55:93:17:54:fc:3b:89:47:12:
a7:6e:7f:69:01:99:52:c3:c9:52:79:ae:a4:d0:54:
9e:b5:61:0b:0a:82:29:47:04:7d:cd:fe:2b:f6:81:
a4:1c:29:45:39:95:b6:2d:6c:ba:22:30:07:ab:ab:
2d:70:d0:7f:8a:56:58:c8:58:0b:de:88:23:f4:ab:
ea:11:e9:7c:41:02:f3:44:8e:ed:9d:93:98:1e:0a:
a9:50:36:62:c4:9c:73:2d:f7:2f:69:d0:d5:4e:91:
51:8a:0d:87:86:44:c3:7f:0d:f6:77:59:4b:c8:af:
63:6d:f7:88:0d:ee:16:ac:9a:c8:8e:37:c8:10:40:
63:6b:7e:9d:16:ba:94:15:69:41:43:21:69:fb:30:
8e:31:d0:8e:5f:a2:c9:f9:7e:b0:e5:61:24:9f:f2:
39:ac:e8:55:92:37:f0:7f:7a:c3:9d:4a:cc:cd:f6:
65:ce:28:9d:cd:97:1c:e2:9e:c3:9d:11:d2:f6:e0:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:83:70:F9:77:4E:25:FB:41:95:C2:D6:16:33:D9:18:73:13:D6
X509v3 Authority Key Identifier:
keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:98:5d:1b:c4:26:4d:e3:67:ee:13:75:84:db:49:0c:70:5c:
db:38:77:79:c0:24:51:46:b2:9b:9e:0a:bb:6d:51:db:08:3e:
91:46:04:e7:72:c2:93:4b:05:ef:79:d9:06:75:82:4b:19:92:
f6:5c:5d:26:56:27:7f:05:53:c9:a5:e8:67:69:30:84:63:e6:
e0:f1:91:c3:f0:f5:a6:c9:bb:28:f6:3c:79:29:d6:ae:a3:36:
4d:b1:e1:01:ff:93:0c:8b:e1:2c:4e:76:10:13:f8:4a:aa:3c:
81:66:d6:6d:bc:7a:b9:29:28:74:a9:c4:0a:e7:0b:fc:3e:98:
08:6a:4e:a4:e9:b6:48:e9:51:f2:4f:b0:d6:af:75:3b:49:8c:
ce:d5:e5:64:8d:57:ae:ed:d1:f7:1c:99:ee:7f:79:07:0b:73:
54:fd:61:85:b1:f8:bf:71:7a:41:15:12:98:28:55:fc:95:e2:
4c:d4:b4:94:e0:55:d2:0d:68:7d:36:c5:42:62:19:d4:ef:dd:
db:6f:0f:fa:66:a7:ee:9e:3a:95:94:71:d8:a4:11:3c:5d:dc:
bf:3d:26:75:75:a6:e5:2f:02:44:ac:ec:c7:8c:6c:70:63:1f:
51:df:65:44:ce:8d:c1:b8:95:da:27:ac:36:c5:ff:e2:a7:34:
de:51:c1:1e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL+CR6hColfpyWaIT4Bd8k2m5IeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNC
RkE5RUYwMzAeFw0yNjA1MTQwMzUwMjRaFw0yNjA1MTUwNTE4MjRaMDMxMTAvBgNV
BAMTKDcyNzA4MzcwRjk3NzRFMjVGQjQxOTVDMkQ2MTYzM0Q5MTg3MzEzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIXoQMKFm2HwnxXE77JFOgo18
7XgiphPYVrO83Kka1Jk+LOr0i9yxt5TE7p4s44S+McrJniu0Vmy7UaeBZYPXXVWT
F1T8O4lHEqduf2kBmVLDyVJ5rqTQVJ61YQsKgilHBH3N/iv2gaQcKUU5lbYtbLoi
MAerqy1w0H+KVljIWAveiCP0q+oR6XxBAvNEju2dk5geCqlQNmLEnHMt9y9p0NVO
kVGKDYeGRMN/DfZ3WUvIr2Nt94gN7hasmsiON8gQQGNrfp0WupQVaUFDIWn7MI4x
0I5fosn5frDlYSSf8jms6FWSN/B/esOdSszN9mXOKJ3NlxzinsOdEdL24PYnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcnCDcPl3TiX7QZXC1hYz2RhzE9YwHwYDVR0j
BBgwFoAU9199jfpg/It3+Ki1m0T1vL+p7wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDkzNjc0YTYtMTE0Zi00YmI1LTg1YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERG
QTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNCRkE5RUYwMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNzVGN0Q4REZBNjBGQzhCNzdGOEE4QjU5QjQ0RjVCQ0JGQTlF
RjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1
YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1
QkNCRkE5RUYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAWYXRvEJk3jZ+4TdYTbSQxwXNs4d3nAJFFG
spueCrttUdsIPpFGBOdywpNLBe952QZ1gksZkvZcXSZWJ38FU8ml6GdpMIRj5uDx
kcPw9abJuyj2PHkp1q6jNk2x4QH/kwyL4SxOdhAT+EqqPIFm1m28erkpKHSpxArn
C/w+mAhqTqTptkjpUfJPsNavdTtJjM7V5WSNV67t0fccme5/eQcLc1T9YYWx+L9x
ekEVEpgoVfyV4kzUtJTgVdINaH02xUJiGdTv3dtvD/pmp+6eOpWUcdikETxd3L89
JnV1puUvAkSs7MeMbHBjH1HfZUTOjcG4ldonrDbF/+KnNN5RwR4=
-----END CERTIFICATE-----
Generated at Thu May 14 06:41:15 2026 by rpki-client