
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
File: D760F9F9DA86BCE59400DBE9D811D4482545E268.mft (raw, json)
Hash identifier: m+zyZdEEIt0jEldT5b+WjrkXBxqClTzLEIu1wgaFJ3k=
Subject key identifier: 3D:19:A2:58:61:D7:16:3D:D6:0D:B6:FB:6C:A0:46:B2:D1:D2:85:19
Authority key identifier: D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68
Certificate issuer: /CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
Certificate serial: 6BED879963863EC3960596BA83EC50E55F10B1A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 14:37:11 +0000
Manifest this update: Wed 16 Sep 2026 14:32:11 +0000
Manifest next update: Thu 17 Sep 2026 18:34:11 +0000
Files and hashes: 1: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: DFvC5GTAtylO1fprLd0zKxOM6CHVp0D6cEWiHcQuCS4=)
2: D760F9F9DA86BCE59400DBE9D811D4482545E268.crl (hash: EChv+mspLNuhskfY3OAwrr0xhECEEUGQesL/ys51i3Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl
rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ed:87:99:63:86:3e:c3:96:05:96:ba:83:ec:50:e5:5f:10:b1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D760F9F9DA86BCE59400DBE9D811D4482545E268
Validity
Not Before: Sep 16 14:32:11 2026 GMT
Not After : Sep 17 18:34:11 2026 GMT
Subject: CN=3D19A25861D7163DD60DB6FB6CA046B2D1D28519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:9f:18:2b:1f:91:d8:2a:f8:72:d4:6d:9c:
27:ed:c9:ec:0a:ec:fa:69:13:2e:46:ca:13:bb:0a:
e1:a6:3b:bc:4c:81:d4:a8:6c:c1:9c:d0:e4:f8:a9:
6a:d2:00:76:8c:20:31:58:55:b8:8c:47:cf:0b:80:
6b:d9:f5:ba:fb:49:a7:61:ac:62:da:36:af:b6:2d:
da:79:09:e2:82:bd:9f:ef:10:a8:e8:87:2c:54:d2:
9c:3a:ad:13:30:1e:e7:27:e0:2f:f6:d7:e8:e1:d2:
67:3c:72:0c:d5:53:03:68:58:f8:d6:49:3d:27:37:
99:c1:5c:22:0a:52:5a:04:8c:07:7f:d9:f3:49:c7:
29:fb:e6:57:de:a8:f4:9c:0a:01:1e:95:a6:06:28:
4c:50:bc:74:8c:5b:8a:22:1e:26:cc:a8:5a:b0:0c:
13:99:2b:04:7f:8b:eb:c3:33:04:2e:cf:87:60:a7:
88:e6:c5:5c:98:7f:79:4d:74:da:45:83:70:d7:2b:
f7:ab:23:42:79:ff:fe:0f:88:e9:16:8b:7a:5e:59:
ef:f4:34:4e:c3:b9:a2:29:2f:ba:39:ee:70:e8:f4:
a2:77:e0:da:3c:7d:20:86:bd:c0:9c:5d:ae:6a:4e:
c5:8f:74:ca:f5:23:5d:e8:9f:fa:57:7c:8f:83:93:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:A2:58:61:D7:16:3D:D6:0D:B6:FB:6C:A0:46:B2:D1:D2:85:19
X509v3 Authority Key Identifier:
keyid:D7:60:F9:F9:DA:86:BC:E5:94:00:DB:E9:D8:11:D4:48:25:45:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D760F9F9DA86BCE59400DBE9D811D4482545E268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/D760F9F9DA86BCE59400DBE9D811D4482545E268.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2d:91:59:f7:69:92:01:e5:97:38:55:16:df:fe:71:1b:6e:
aa:a9:3a:06:55:ea:19:75:e4:af:92:d0:40:2a:c9:6c:f4:82:
e3:60:44:7c:2f:0d:1f:2a:a8:fe:0b:2a:b9:13:ab:58:a9:8c:
0c:1b:53:8b:56:61:7f:cf:bb:22:3e:55:a2:03:56:cd:19:6f:
67:bd:7c:61:b3:52:43:3b:49:b8:fc:95:b6:42:f3:52:82:da:
3e:d4:be:ca:92:63:c9:ce:9c:4e:67:0b:46:38:62:db:ff:2e:
ef:34:7f:63:b7:17:a7:cc:df:ca:f9:f7:1b:c7:bf:c7:a7:04:
70:80:a1:07:b9:7b:45:03:98:64:23:18:5a:7e:a4:bc:cb:8e:
d6:b8:05:22:16:e0:b0:61:6f:4d:d7:27:a7:c1:ee:d3:22:41:
01:fa:5f:da:76:05:63:cd:c1:25:89:27:c3:a3:85:88:84:6e:
c3:a3:b6:65:58:72:2a:33:9d:36:28:65:cc:cb:cf:46:fa:e8:
d9:83:b7:5e:b8:a0:21:34:61:17:b5:8e:5e:cf:0c:bd:40:4d:
2e:d2:99:3f:c1:ed:7b:b5:a6:36:2f:de:77:25:b7:58:ab:4d:
7c:85:d0:de:a0:d1:70:53:48:e6:71:d8:9b:37:cb:07:85:6c:
d6:0d:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:52:05 2026 by rpki-client