
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
File: D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft (raw, json)
Hash identifier: /FeHxnE3e9axs9GJsmnLPOB63hLHYmlzAlUq8x67EFI=
Subject key identifier: 10:BD:FD:FF:95:8B:F5:56:50:F7:32:7E:35:EB:0F:2B:85:28:A6:A6
Authority key identifier: D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80
Certificate issuer: /CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280
Certificate serial: 6AF1FFACAE38F7A61969F869105D51A1860A8A8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 16:29:26 +0000
Manifest this update: Wed 16 Sep 2026 16:24:26 +0000
Manifest next update: Thu 17 Sep 2026 20:17:26 +0000
Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 6xlY6BkzLkqd/N9VB1huC6lhu8FPlH61fiI7wLd83Qc=)
2: D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl (hash: T/ucZ6We3cgMLIQgGUHhHPojzC1GXJ+Tzt9SKtAYlQo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl
rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f1:ff:ac:ae:38:f7:a6:19:69:f8:69:10:5d:51:a1:86:0a:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D761C44ABE9AA989F7048B4D3E561489C4DA8280
Validity
Not Before: Sep 16 16:24:26 2026 GMT
Not After : Sep 17 20:17:26 2026 GMT
Subject: CN=10BDFDFF958BF55650F7327E35EB0F2B8528A6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0d:b9:db:63:6b:6e:1a:23:5d:b1:58:a2:0e:
13:ff:ac:c3:10:61:65:80:0b:7b:14:0c:12:32:5a:
29:ff:82:1b:cd:96:df:bc:f9:4a:4e:6d:0c:51:f7:
81:9a:50:f5:dc:b0:dd:22:e8:5a:65:2e:c1:b4:13:
4f:d2:b2:92:67:07:fc:1c:cb:37:1d:13:b1:7f:36:
61:6c:72:b2:df:41:d4:02:11:bc:fc:d3:3c:08:cd:
43:24:20:4b:c1:35:50:68:cc:db:de:47:3e:a7:ca:
3c:06:ee:ab:51:52:3b:a2:dc:c0:fe:d7:02:e4:f3:
27:18:e0:f1:f7:a5:67:51:46:f0:5b:7a:25:ae:43:
62:e6:4a:07:fe:74:dd:5c:8a:00:cd:40:30:0f:4d:
9b:49:ae:eb:5f:66:4d:d4:77:c1:25:d5:60:0e:74:
8e:61:cf:83:fe:41:71:fd:57:7e:20:54:6b:d8:b2:
c6:53:e8:8c:4a:66:75:ba:88:f3:5c:b2:49:40:0e:
33:0d:44:55:e4:d4:9a:22:38:6f:ed:04:9c:b3:4e:
50:0e:36:17:55:4b:59:40:13:39:d7:50:aa:8b:be:
e9:48:c3:1d:b2:68:53:16:61:9a:40:a7:c0:98:a1:
a0:cb:0b:24:b6:6d:fb:9d:8c:e0:ea:f2:d2:bc:d5:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:FD:FF:95:8B:F5:56:50:F7:32:7E:35:EB:0F:2B:85:28:A6:A6
X509v3 Authority Key Identifier:
keyid:D7:61:C4:4A:BE:9A:A9:89:F7:04:8B:4D:3E:56:14:89:C4:DA:82:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/D761C44ABE9AA989F7048B4D3E561489C4DA8280.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f7:5f:a5:ee:00:f5:7b:7b:18:08:85:ac:4a:8d:01:2e:56:
86:cc:a7:3b:7d:3f:de:23:dc:1e:0c:48:5f:0f:1e:6b:50:6c:
bd:82:57:4f:56:f9:1a:31:2a:1d:87:f0:3b:8f:f4:88:d9:1d:
cf:de:57:79:7c:42:d9:79:a3:f5:4a:4b:8b:ce:b3:a5:0f:2f:
1e:b0:d0:28:1d:52:22:33:64:41:84:90:dc:4d:96:0c:03:a7:
48:44:6a:c6:07:0a:9a:8c:5a:a7:4b:4f:47:13:ba:79:46:86:
48:7c:48:9e:69:1f:2f:6f:f7:f8:71:5e:a1:f0:fd:98:4a:66:
43:7a:1a:dc:b9:a6:bc:ff:5f:1f:ba:7b:f9:e7:20:70:4d:b6:
21:67:5e:e9:50:43:f1:e3:9e:56:ea:6a:13:17:1d:c1:f6:a7:
49:69:da:f8:1b:e6:5d:b5:ee:fa:87:bf:24:41:14:4c:62:b6:
48:ef:3e:bb:4e:15:40:6a:c6:9b:01:fa:4c:77:31:31:07:60:
0f:18:eb:3c:a3:74:c3:07:e5:d8:0e:9b:05:51:bb:84:17:ec:
d5:0c:2d:f9:08:be:e9:fd:fc:fa:2c:d1:ea:e4:04:2b:07:3f:
9f:f4:c6:25:b5:53:af:f5:90:61:b2:fe:46:fc:22:d3:79:a2:
44:20:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:28 2026 by rpki-client