
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
File: 0C75F355F1722A2E5EB758DF502B8C46518996E9.mft (raw, json)
Hash identifier: ilALbU7PGBdPZV7gFL4gdu0TfrXwedBOFKpH/Tm019k=
Subject key identifier: 2E:B7:47:00:06:1B:92:78:35:FE:7B:B7:C3:BB:4F:24:9C:C3:D9:C1
Authority key identifier: 0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9
Certificate issuer: /CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
Certificate serial: 6B17F2970DE292BE2FE98F5BFA7C94C22F20193D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
Manifest number: E9
Signing time: Fri 23 Oct 2026 20:24:27 +0000
Manifest this update: Fri 23 Oct 2026 20:19:27 +0000
Manifest next update: Sat 24 Oct 2026 22:59:27 +0000
Files and hashes: 1: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: YcFbm0cjMQXhSHXz+D7KTmt9+oLCtHoQnn3BM3lUHaM=)
2: 0C75F355F1722A2E5EB758DF502B8C46518996E9.crl (hash: q8exb12ahfbNpzsDAXszPqoiVAXVq1N0ePE7GR1i0dw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl
rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 22:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:17:f2:97:0d:e2:92:be:2f:e9:8f:5b:fa:7c:94:c2:2f:20:19:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
Validity
Not Before: Oct 23 20:19:27 2026 GMT
Not After : Oct 24 22:59:27 2026 GMT
Subject: CN=2EB74700061B927835FE7BB7C3BB4F249CC3D9C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:5a:cc:2e:4a:db:eb:e8:52:f6:66:b5:ad:
55:4c:0e:25:aa:0e:0b:4a:65:7c:55:8a:64:c8:d1:
cb:c6:67:5c:18:09:1b:d6:6c:26:7c:f0:24:29:5c:
6e:12:bb:3d:e4:31:10:f1:8e:55:87:87:88:2c:87:
c3:2f:63:0c:43:ff:0e:a4:9c:bc:13:fd:dc:f6:0c:
21:56:08:cc:cc:73:dc:81:7a:f8:a5:ee:4e:69:b7:
0e:25:0d:a9:69:6c:82:d3:17:a9:ec:b3:2b:5b:b2:
4c:20:bc:d4:f7:a2:d0:a7:ee:dd:9a:09:9f:af:52:
bf:6e:da:b1:97:cc:35:1b:fd:71:18:e6:28:5c:58:
e8:65:b4:2c:8f:14:37:eb:8e:c5:bf:19:c7:ab:dd:
51:ce:92:82:cc:d0:15:7a:55:b7:14:85:ce:ca:17:
e1:af:3b:0f:9b:b3:d7:ba:4b:1f:f7:0f:3f:ae:e1:
1b:18:55:87:b8:68:45:7b:87:4d:65:40:29:11:b9:
f4:87:bf:ad:39:e0:bc:f6:5f:a5:4f:05:07:12:50:
6b:ab:59:bf:b0:ad:8b:b7:f6:1d:05:27:03:18:46:
50:82:54:15:33:23:d7:fc:0a:8f:2d:fd:4a:33:53:
fc:79:b8:bf:4d:1d:fc:41:d2:4c:a7:f2:bd:0d:3e:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:47:00:06:1B:92:78:35:FE:7B:B7:C3:BB:4F:24:9C:C3:D9:C1
X509v3 Authority Key Identifier:
keyid:0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:dd:83:bb:05:d2:1f:4f:46:cd:b8:2c:51:b9:4a:47:6a:b4:
82:ae:23:89:6d:d7:ae:38:2c:46:f4:46:4f:e6:02:ea:e6:c2:
e7:6c:26:ea:45:81:f1:3c:1b:2c:d9:a6:3c:fc:c5:7d:7f:55:
76:09:2f:1a:ca:f2:ba:29:81:63:ee:1c:f9:42:d7:2f:20:52:
81:61:ba:e3:bb:98:9a:0b:cb:80:52:8e:6e:e5:4a:7a:04:8f:
44:57:cc:13:fa:6e:0f:f4:64:42:fa:01:99:c0:cb:da:bf:da:
33:bf:d3:90:b9:5a:36:0d:5f:c6:61:2c:de:3c:39:b2:b7:60:
96:8f:99:fb:2f:0c:e9:d9:d8:81:85:f4:98:3b:fd:f1:62:92:
3d:53:b7:4f:25:90:6e:4d:d5:29:5c:1b:35:90:63:99:d9:34:
a7:7d:c5:09:18:fa:db:3f:55:d5:b2:96:87:88:59:da:54:b9:
ef:44:3b:11:a8:ad:3c:f6:08:6a:28:d0:35:91:29:e4:f0:42:
42:65:d1:bb:68:1a:b2:61:bd:64:33:23:60:fe:69:27:67:2e:
89:72:f8:8d:d3:3d:65:af:57:f0:f5:6f:57:26:37:16:c5:d3:
a0:fe:bd:10:13:72:f6:2c:5b:70:2d:e2:6f:12:82:c3:80:d0:
6c:d2:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:10 2026 by rpki-client