
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json)
Hash identifier: ihdLcrlPf9DMgZX1VEyqNdUwMw9Pz84B60M3BxTahRQ=
Subject key identifier: 37:57:3F:D6:73:1E:B6:F3:7F:00:36:E8:41:06:B9:B9:AC:C3:49:8D
Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Certificate serial: 249218076D673AF869F21AC65C31E40AFA3D6867
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 05:01:23 +0000
Manifest this update: Sat 26 Sep 2026 04:56:23 +0000
Manifest next update: Sun 27 Sep 2026 07:55:23 +0000
Files and hashes: 1: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: CU4fhxpTSoWALPjRqNjvNxnVIzYrldn92pW7hcwCMHE=)
2: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=)
3: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=)
4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=)
5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 07:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:92:18:07:6d:67:3a:f8:69:f2:1a:c6:5c:31:e4:0a:fa:3d:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Validity
Not Before: Sep 26 04:56:23 2026 GMT
Not After : Sep 27 07:55:23 2026 GMT
Subject: CN=37573FD6731EB6F37F0036E84106B9B9ACC3498D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:97:84:47:bc:e5:8b:9e:fd:79:d9:0c:43:
32:ea:34:98:26:25:c6:ca:0f:59:cf:b4:a1:a6:f3:
5e:31:4a:20:83:11:f3:d6:2d:10:e8:12:93:21:21:
40:7e:5f:7b:14:b6:9d:1b:0f:a3:6e:c2:8d:11:8c:
a9:af:26:eb:62:ca:5e:05:fe:99:04:a3:f1:e3:0e:
c2:25:78:45:a9:29:cb:0b:e1:f2:a0:13:53:65:95:
d1:08:c2:af:6a:50:a6:6f:58:7f:be:67:96:57:1a:
da:9d:22:eb:67:50:34:92:c8:59:31:6b:24:89:0a:
dd:29:d4:4c:0e:71:0c:c0:83:26:7e:41:70:62:1f:
44:eb:66:03:30:e0:43:71:da:85:36:0f:f0:c3:58:
a0:df:72:dd:11:53:4f:63:4f:8d:8f:d1:b8:d1:3f:
e6:35:8b:5c:f2:bd:e4:61:aa:c6:f2:8d:40:5a:a0:
a2:52:67:5c:18:13:1d:bc:0a:b2:60:3d:a9:23:be:
ff:88:ec:b0:ce:fe:e3:01:3b:dd:47:55:b8:17:e6:
5d:16:5e:83:41:29:85:d8:3a:36:cc:8d:28:49:2c:
21:db:2d:55:1e:08:99:9e:11:ba:6d:2a:fd:88:31:
12:01:56:9e:91:08:35:6b:32:cf:1e:de:77:c1:b7:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:3F:D6:73:1E:B6:F3:7F:00:36:E8:41:06:B9:B9:AC:C3:49:8D
X509v3 Authority Key Identifier:
keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:cb:23:15:f0:ea:1a:ea:cb:52:c0:fa:af:2f:ce:36:09:
25:ad:9c:17:64:4c:46:78:6b:ca:46:45:2f:d2:21:67:04:08:
ac:8b:4e:b7:ff:f7:e3:e7:4d:e8:9f:c3:ae:c0:ae:5b:02:f8:
e7:f2:86:f9:5d:03:ce:4d:37:3e:93:b5:99:c7:09:ad:7e:61:
62:e6:e2:4c:be:34:19:2a:a4:77:7f:03:cd:e2:19:59:83:66:
05:5d:18:a2:3f:14:1a:03:70:e4:91:7b:6f:58:52:87:fb:7f:
c4:56:de:4e:94:f2:d8:d4:98:10:38:eb:7e:8d:08:f3:3d:c8:
57:b4:5d:e4:5f:d2:02:b0:60:3f:87:11:a4:50:3b:56:d6:00:
36:7f:1b:03:b8:0f:0e:f7:84:cc:1f:91:d2:6d:3c:8b:84:e2:
74:9e:4c:16:53:a0:88:4f:0c:e0:54:c3:b6:e3:9e:ff:ce:c1:
5b:64:73:5b:bc:91:97:cd:da:78:3e:a6:5e:2a:60:14:a2:57:
f9:81:d6:5e:d7:b9:d3:b9:c6:c6:a2:10:50:9f:0d:3c:4b:9b:
9e:e3:fa:9c:22:f3:c6:89:d3:f2:2a:e7:a1:31:56:63:41:16:
46:14:98:18:82:de:5e:8e:c2:19:ab:6d:09:85:fc:b1:d4:f4:
7f:e8:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:16 2026 by rpki-client