
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json)
Hash identifier: I6GWPQVPZNvSyylO/DCU1j8v35iEVa1YxEuX1ImB31E=
Subject key identifier: 75:38:AE:E8:E9:01:5E:84:6B:A5:BE:00:CA:30:84:52:40:24:FC:38
Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED
Certificate serial: 369992FC8E8AE22943CBFCA35C390522A71CE1D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
Manifest number: 60
Signing time: Mon 13 Jul 2026 23:23:48 +0000
Manifest this update: Mon 13 Jul 2026 23:18:48 +0000
Manifest next update: Wed 15 Jul 2026 01:39:48 +0000
Files and hashes: 1: D88374740C8E344956042586CFB98762292C9BED.crl (hash: DjcEZ5IUmwwATuFHAm0iuhVzaDxqABUX6etvh6XY51U=)
2: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=)
3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=)
4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 22:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:99:92:fc:8e:8a:e2:29:43:cb:fc:a3:5c:39:05:22:a7:1c:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D88374740C8E344956042586CFB98762292C9BED
Validity
Not Before: Jul 13 23:18:48 2026 GMT
Not After : Jul 15 01:39:48 2026 GMT
Subject: CN=7538AEE8E9015E846BA5BE00CA3084524024FC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:32:df:16:a2:81:cc:f0:f2:60:d9:7f:f3:
7d:a0:60:33:68:ee:67:52:ed:4f:a2:5b:06:83:a9:
e0:b5:27:7f:d5:55:14:9d:e5:3a:6f:a5:4d:5e:da:
a1:70:ff:f0:53:2c:fd:3b:51:9a:79:3e:9c:5f:83:
07:1a:73:31:71:7e:5a:85:9c:41:43:3f:e4:62:8b:
c8:c2:be:a2:dd:e2:f2:cb:2b:a3:55:4d:ee:b4:f6:
28:c3:a2:d0:5a:df:98:42:7e:19:68:0c:84:e0:19:
89:c3:77:31:0e:b5:b8:97:7c:96:1a:1e:d2:dc:03:
fb:e9:24:60:90:a9:4d:51:a5:ad:6b:49:d1:12:8c:
e4:e7:84:ff:01:d4:4c:5b:8f:2a:8b:36:f0:57:86:
b0:c2:39:82:d4:c3:19:d1:64:78:88:a8:94:4c:cd:
ff:21:b0:8c:a8:11:90:37:31:dd:36:f5:7b:a6:c5:
48:fc:99:25:d9:bb:79:c3:e8:6e:46:7e:52:cc:05:
d9:4b:19:b4:66:e4:6d:d1:bb:75:3a:2c:80:2c:c3:
6f:11:7c:c4:62:fc:2b:4f:d5:21:85:6d:64:6f:bf:
55:f8:49:6e:6e:20:44:77:0b:72:b2:5c:36:c5:02:
5c:e7:a2:ae:ad:67:c7:4b:1f:e3:dc:6f:a2:8f:83:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:AE:E8:E9:01:5E:84:6B:A5:BE:00:CA:30:84:52:40:24:FC:38
X509v3 Authority Key Identifier:
keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ce:ef:d6:be:2b:01:bc:4c:76:8c:c2:e2:aa:07:44:c7:b4:
32:bf:63:0d:23:02:8a:16:6f:64:13:7c:22:3a:73:1f:53:01:
cc:47:b9:3c:d5:d1:1d:fb:1b:28:35:a6:d1:1b:cb:be:16:18:
04:d1:cb:d4:b2:3b:b3:3d:14:69:c9:ed:fd:21:ab:cb:84:02:
ce:76:93:6f:db:2b:fa:fa:0c:ce:ae:42:ff:d3:c2:13:3d:cb:
61:c3:4f:5c:49:34:26:33:b9:72:e3:5c:69:e5:77:0e:ad:40:
84:e4:fb:3a:8d:8d:a1:51:04:55:07:0f:73:ea:8f:04:ce:7a:
17:4e:fa:8b:73:94:55:94:b1:4c:9c:b6:b2:b0:f5:af:94:5e:
6f:53:cd:9a:55:a0:11:54:82:e6:3e:e6:4d:57:c7:4d:80:e6:
5e:ca:4c:f0:9d:72:d1:02:47:f4:89:a1:bb:6a:54:c1:98:51:
c7:c7:38:d6:9d:89:cd:09:23:32:a7:16:c0:14:7f:4b:66:0f:
a9:cd:4f:ad:3e:47:2a:5c:69:a2:a2:6e:3b:00:c9:13:15:e3:
e5:e9:c7:c0:e5:85:98:02:0b:dd:e6:fd:3a:71:f0:e5:58:a8:
23:f3:cd:fc:28:02:39:41:ae:0d:49:e5:5d:16:4b:d4:5d:07:
3c:91:46:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNpmS/I6K4ilDy/yjXDkFIqcc4dAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy
OTJDOUJFRDAeFw0yNjA3MTMyMzE4NDhaFw0yNjA3MTUwMTM5NDhaMDMxMTAvBgNV
BAMTKDc1MzhBRUU4RTkwMTVFODQ2QkE1QkUwMENBMzA4NDUyNDAyNEZDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8TLfFqKBzPDyYNl/832gYDNo
7mdS7U+iWwaDqeC1J3/VVRSd5TpvpU1e2qFw//BTLP07UZp5PpxfgwcaczFxflqF
nEFDP+Rii8jCvqLd4vLLK6NVTe609ijDotBa35hCfhloDITgGYnDdzEOtbiXfJYa
HtLcA/vpJGCQqU1Rpa1rSdESjOTnhP8B1ExbjyqLNvBXhrDCOYLUwxnRZHiIqJRM
zf8hsIyoEZA3Md029XumxUj8mSXZu3nD6G5GflLMBdlLGbRm5G3Ru3U6LIAsw28R
fMRi/CtP1SGFbWRvv1X4SW5uIER3C3KyXDbFAlznoq6tZ8dLH+Pcb6KPg8BlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdTiu6OkBXoRrpb4AyjCEUkAk/DgwHwYDVR0j
BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw
QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5
QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm
YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3
NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAALO79a+KwG8THaMwuKqB0THtDK/Yw0jAooW
b2QTfCI6cx9TAcxHuTzV0R37Gyg1ptEby74WGATRy9SyO7M9FGnJ7f0hq8uEAs52
k2/bK/r6DM6uQv/TwhM9y2HDT1xJNCYzuXLjXGnldw6tQITk+zqNjaFRBFUHD3Pq
jwTOehdO+otzlFWUsUyctrKw9a+UXm9TzZpVoBFUguY+5k1Xx02A5l7KTPCdctEC
R/SJobtqVMGYUcfHONadic0JIzKnFsAUf0tmD6nNT60+RypcaaKibjsAyRMV4+Xp
x8DlhZgCC93m/Tpx8OVYqCPzzfwoAjlBrg1J5V0WS9RdBzyRRtk=
-----END CERTIFICATE-----
Generated at Tue Jul 14 03:40:24 2026 by rpki-client