
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json)
Hash identifier: JNRHQ2GCij11FZvezhcrHDYPnqZICreYyHq0wzINTIs=
Subject key identifier: 76:2C:71:D8:7F:EE:EB:4C:98:4B:89:93:80:98:D6:93:70:C1:CE:BF
Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Certificate serial: 1500F1E3E4407AD775447D50916AFC69962DE47A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 17:33:36 +0000
Manifest this update: Sun 25 Oct 2026 17:28:36 +0000
Manifest next update: Mon 26 Oct 2026 20:56:36 +0000
Files and hashes: 1: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=)
2: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=)
3: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=)
4: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=)
5: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: 1dKs5CtiaURX0awxegzsuVP3ZdpNPZXxM5T6SIAuib0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:f1:e3:e4:40:7a:d7:75:44:7d:50:91:6a:fc:69:96:2d:e4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42
Validity
Not Before: Oct 25 17:28:36 2026 GMT
Not After : Oct 26 20:56:36 2026 GMT
Subject: CN=762C71D87FEEEB4C984B89938098D69370C1CEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:13:ee:33:d4:a5:b7:92:d1:6c:5a:d4:13:
65:f3:1f:e0:f3:49:8d:5f:40:c5:27:92:5f:48:62:
7f:f9:35:b7:3b:9e:e2:ca:05:11:30:69:ec:95:4e:
22:c1:11:7e:f2:1b:04:a2:38:c8:e5:73:d3:8e:83:
2f:4d:f2:8b:82:68:e4:9d:7f:13:5f:f5:8e:0f:fa:
88:cd:91:b6:e9:13:c4:95:aa:a7:15:c7:a7:fc:f0:
e3:af:c0:66:4b:4d:6b:89:44:dc:44:19:bd:f1:b7:
0b:87:81:53:52:20:15:61:55:43:1e:0a:28:31:ed:
28:b0:a2:5e:41:62:dc:56:51:b6:74:e9:ef:49:d0:
86:0e:ec:b7:9d:9f:c9:e4:9c:d0:d4:93:c6:7f:a6:
68:02:d4:38:dc:7c:a8:00:b9:fb:83:c3:98:c3:d2:
9e:d1:fe:08:75:84:d5:f5:50:ea:5f:5c:dc:f4:d4:
b7:71:44:35:f4:02:dc:a6:b3:58:8e:da:22:98:47:
98:c7:6d:8e:21:1e:ad:51:66:de:2d:b8:89:e8:83:
06:e8:51:04:b9:db:ef:72:54:19:16:83:25:2c:6f:
ce:4e:40:3f:71:fa:ce:d6:35:f3:2d:8e:10:b0:1e:
e4:28:65:82:69:d6:ca:6c:44:b0:3d:36:d1:fb:9e:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:71:D8:7F:EE:EB:4C:98:4B:89:93:80:98:D6:93:70:C1:CE:BF
X509v3 Authority Key Identifier:
keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:1e:35:89:da:e8:dc:6d:ca:76:b7:8b:f2:fb:25:be:cf:
8f:4f:0b:7e:62:11:13:c4:47:ab:9b:7a:fb:37:ec:8a:95:f2:
67:c6:cc:89:d1:0f:d8:b7:ca:c6:c5:de:50:23:7e:fc:f5:2e:
1a:a9:f2:80:19:46:b6:98:8a:d9:ed:66:b3:87:a7:f8:33:d8:
6e:90:3d:71:12:3e:9c:20:20:a5:fc:ee:69:2b:3b:21:d9:9a:
59:a2:57:c2:8c:68:0f:fc:6e:57:a3:e6:e5:e4:8a:54:ec:08:
a8:98:74:f0:00:76:cb:54:45:12:d3:9f:d0:76:22:a0:8e:d2:
30:02:e8:d8:cb:e7:46:87:f1:0d:1a:50:ca:36:f9:94:e1:3e:
00:66:c9:8e:ff:b1:07:2a:1e:32:e5:3b:36:2a:c3:49:bd:21:
44:d9:f6:12:4b:9d:31:8e:fc:dc:05:76:48:23:df:88:b9:42:
1e:28:aa:98:82:88:72:16:6d:1f:08:00:8e:06:c8:64:c0:d3:
34:79:fc:0f:0c:c0:7a:61:cc:40:28:6e:3d:cb:d7:d4:ea:1d:
d9:99:99:a2:9f:51:f4:d5:a1:c2:f4:e3:e0:e5:22:e7:34:e4:
43:47:c7:ac:1f:c4:52:ca:5d:9e:b5:9d:4f:50:f6:c6:1a:fc:
f9:8e:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:21 2026 by rpki-client