
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json)
Hash identifier: pKL4aLkKzmcqYf7wjZ8i6xNPRyxbxYjGFGL/dzT1KuY=
Subject key identifier: 9E:28:A6:86:74:47:BE:9B:EE:67:52:59:11:96:A2:58:01:18:B6:68
Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35
Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135
Certificate serial: 2D3A7B7B8664299D9EA0786BFF121D2938582827
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:43:53 +0000
Manifest this update: Fri 24 Jul 2026 03:38:53 +0000
Manifest next update: Sat 25 Jul 2026 05:47:53 +0000
Files and hashes: 1: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: a4hlOZfKWaAGKD2n49TJlQgGYxZ4vgRKHpOwIk2ZlbM=)
2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl
rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3a:7b:7b:86:64:29:9d:9e:a0:78:6b:ff:12:1d:29:38:58:28:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135
Validity
Not Before: Jul 24 03:38:53 2026 GMT
Not After : Jul 25 05:47:53 2026 GMT
Subject: CN=9E28A6867447BE9BEE6752591196A2580118B668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:d8:a8:cd:ee:65:cf:39:c5:63:af:a1:39:
eb:d5:b1:12:57:19:d6:25:6f:77:ff:a8:9e:30:23:
00:b1:1a:d7:22:89:a6:73:18:96:dd:a2:40:6c:e2:
e7:88:62:a0:83:39:9e:4f:d4:01:81:7f:f6:40:b3:
74:d5:ec:85:15:84:6d:34:87:c9:44:ed:9f:28:e0:
63:90:70:fc:cf:31:80:a7:a9:7e:e1:ed:3f:d3:4b:
dd:76:11:82:49:93:58:81:88:79:5e:3d:51:1f:d8:
d3:d9:91:a8:df:23:b2:bf:ee:2e:a1:bb:ec:fe:2f:
48:cd:75:b4:1b:99:b7:7a:f8:e6:ed:57:88:62:e2:
1e:f0:16:34:04:d0:37:3b:05:bb:af:bb:3f:09:37:
a3:47:bd:af:dd:87:7a:15:81:b0:fc:fe:42:ce:78:
c8:be:c0:b4:db:7d:b8:c4:a9:25:a3:35:23:41:8f:
15:9b:f5:43:49:83:21:b6:82:a4:e1:04:0f:98:c3:
37:b1:83:14:ee:56:99:00:9b:66:6a:27:38:cd:b5:
5b:48:5a:71:d2:27:4e:fd:de:9d:a7:20:34:11:10:
a4:8f:9f:5b:f3:82:73:d1:8e:a9:72:a0:77:ba:1f:
7c:1a:2f:1a:ce:6f:dc:9f:ee:99:e0:96:5c:d5:89:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:A6:86:74:47:BE:9B:EE:67:52:59:11:96:A2:58:01:18:B6:68
X509v3 Authority Key Identifier:
keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c8:9d:4b:77:9f:c7:03:ca:6c:bd:44:2c:9b:a5:3d:32:cd:
aa:7e:fe:28:f1:62:97:b4:f6:cc:d8:74:4c:7e:b6:9f:b4:5f:
84:43:3d:a7:d7:e4:28:66:60:ef:ae:3f:f5:f2:82:29:22:70:
80:55:cb:bd:cf:02:01:46:44:a0:7f:9c:d6:9d:c6:97:95:de:
6d:2b:98:10:40:17:23:e9:d2:72:88:0e:3d:ca:65:64:2f:26:
de:9b:26:2b:5c:ff:97:66:a9:d7:28:35:b8:8b:e7:31:45:1f:
43:a9:fc:51:62:3a:81:a9:d7:5b:a4:17:39:04:f7:f6:81:72:
e7:6a:07:f5:bb:67:17:73:00:72:f9:27:08:46:6b:0c:46:23:
40:98:ea:d6:5f:d0:c2:8d:b7:c1:14:fc:37:dd:e5:a1:df:a0:
64:e3:4f:c2:47:40:19:d8:08:bc:80:e9:06:1f:9c:89:67:ee:
a8:cc:e1:02:a4:72:c6:1f:eb:13:8a:bd:34:32:bd:b5:6c:58:
5d:b0:d4:d3:ad:80:94:9b:be:d1:28:cd:af:c0:a7:1f:c3:7a:
5e:e1:bb:13:69:68:d8:aa:a0:d1:6f:d6:88:1d:b9:f3:62:fa:
f3:fa:d3:5c:99:62:c2:0e:2a:b6:5e:4a:11:39:b5:7f:cc:29:
49:0e:5d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:26 2026 by rpki-client