
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json)
Hash identifier: wLmfWdZaun5svoXiX1+T/gbargvo+Ssjqn2MszSv1dM=
Subject key identifier: BF:F3:3D:FA:BB:CF:6E:3A:C0:CB:FF:4F:5B:54:CA:CC:6D:4B:63:6D
Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Certificate serial: 5455743CE56BE69D9200D7E3E3594F11F81C7B92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:49:24 +0000
Manifest this update: Tue 12 May 2026 18:44:24 +0000
Manifest next update: Wed 13 May 2026 21:27:24 +0000
Files and hashes: 1: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=)
2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=)
3: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: nWn+eShIqS4pn8vhMZlWxN9teAWuuV7xNk9S4eqvrjo=)
4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=)
5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:55:74:3c:e5:6b:e6:9d:92:00:d7:e3:e3:59:4f:11:f8:1c:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Validity
Not Before: May 12 18:44:24 2026 GMT
Not After : May 13 21:27:24 2026 GMT
Subject: CN=BFF33DFABBCF6E3AC0CBFF4F5B54CACC6D4B636D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:ff:f6:42:ee:b6:ca:c9:a0:7c:b1:2a:d7:
8e:f3:9d:7b:71:08:b7:d0:6e:62:f6:68:3d:f4:22:
37:e3:86:6f:59:a4:ec:7a:fc:cb:58:9d:4f:c6:1d:
ea:31:a9:44:d7:13:24:ff:a8:23:b7:9f:69:0f:f7:
ae:3a:d6:7c:a7:94:09:32:f1:a0:51:d5:5e:1d:15:
bc:a9:4d:f4:f2:c4:52:7e:03:3e:f8:4c:4a:df:a0:
9d:3a:47:de:ae:45:86:53:d5:07:bb:6e:f7:c7:ec:
cd:a3:d2:3c:b2:1e:1f:e7:fd:48:7b:13:4e:e3:c6:
fa:3a:bf:7a:69:57:6c:cd:cf:a7:ee:b9:70:88:b1:
87:be:d8:cd:d3:d8:e4:cf:ea:87:d4:76:19:67:f1:
58:8d:e7:2e:a2:e6:d5:c4:e3:91:15:cf:51:ee:21:
b4:eb:c9:f8:39:3f:58:1b:dc:42:d4:ab:8b:a5:f8:
4f:e7:e0:5d:0a:67:2d:88:b5:cf:92:93:a8:0d:85:
d8:f5:9a:8b:8b:e4:ad:2d:27:33:15:84:18:8a:b5:
76:b4:8d:03:b5:4a:44:76:7f:b1:84:93:f4:41:58:
93:b3:00:54:1e:37:01:18:98:f3:32:96:87:c6:62:
90:06:75:95:a1:82:1c:63:d3:bb:44:7d:33:3c:42:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:3D:FA:BB:CF:6E:3A:C0:CB:FF:4F:5B:54:CA:CC:6D:4B:63:6D
X509v3 Authority Key Identifier:
keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:ef:ee:39:d5:fe:71:56:89:30:7b:6d:21:ba:7c:f4:73:
cd:7f:2a:05:58:4c:af:7d:ba:17:a2:11:93:49:1d:65:7c:85:
48:e8:73:e7:df:66:8c:12:99:59:85:31:a7:86:cd:3a:f9:68:
21:f4:f6:39:05:39:5a:83:8e:79:ce:bf:73:4f:d5:b6:85:f5:
36:aa:fc:93:74:00:47:1e:8f:ef:cf:60:08:0b:30:6e:67:69:
50:76:09:4c:b4:2a:3c:db:88:66:02:7e:ca:db:fe:f0:38:af:
01:f5:d2:9c:df:fc:ff:b5:07:d9:8b:d9:ca:67:1d:f6:32:71:
59:22:f3:58:7b:fc:8e:95:d3:de:d0:bf:d5:09:e8:84:77:bf:
2f:ed:e2:f6:c4:6d:f6:03:ee:34:a8:71:5d:b6:9b:d7:49:b4:
36:15:37:1f:5b:7c:6d:d8:31:7c:18:5f:2f:65:91:b3:fe:3b:
e6:47:71:00:a6:fd:ae:91:75:50:3e:52:11:f5:72:65:1b:5a:
88:9f:bd:5e:6d:3b:0f:e1:46:da:06:21:04:99:ab:67:d9:a8:
bc:51:b1:65:d1:cd:8e:af:51:eb:41:a9:ba:91:cf:fb:22:04:
9c:57:63:1c:68:14:63:3a:c0:c7:7b:26:b7:c3:ec:2e:44:64:
5d:6b:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:12:58 2026 by rpki-client