
$ rpki-client -vvf rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft (raw, json)
Hash identifier: nuCKBdGQsFV7n+cEmaWrcqDYy4RcHEg0anT1YRk0WF4=
Subject key identifier: 6A:39:5C:11:9E:40:71:4E:19:F7:60:F6:B7:B8:2B:83:50:CF:40:6B
Authority key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
Certificate issuer: /CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Certificate serial: 365BFBDE0081B12E8E6B1B376F1450EEC1084557
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 13:36:19 +0000
Manifest this update: Fri 24 Jul 2026 13:31:19 +0000
Manifest next update: Sat 25 Jul 2026 17:27:19 +0000
Files and hashes: 1: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: Ko5U+LVnoFJ8wmSh7j4Nh6VXRGbHhjpdwU4CqrLXyts=)
2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: DA2FUhM7Kcld/ZOZCHHz4OC3AwFVi9D3hLd64lN6BR0=)
3: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl (hash: UmBTkVoJ72ZYikxkKxqr1tVdEnDGKwbYYFKTur4vHAM=)
4: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: 6UaquuTBkgXh3T9OTxZgNAGf5O5rLTrtkc8NLnoboV0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:fb:de:00:81:b1:2e:8e:6b:1b:37:6f:14:50:ee:c1:08:45:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B
Validity
Not Before: Jul 24 13:31:19 2026 GMT
Not After : Jul 25 17:27:19 2026 GMT
Subject: CN=6A395C119E40714E19F760F6B7B82B8350CF406B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:6e:18:33:66:4c:3d:4c:a4:5c:d9:0a:d0:
0c:4b:09:2b:a6:73:f4:ef:75:89:51:3a:7e:18:a5:
10:cb:29:79:a6:33:44:56:5e:8b:7b:14:42:c7:8e:
d6:bd:75:90:ee:cd:83:8d:ee:32:2a:11:c1:32:4b:
79:ed:48:e6:a3:bf:33:59:17:76:1f:91:80:e5:99:
b6:b5:49:ba:98:e4:8a:14:f1:c0:61:13:df:ff:10:
4b:de:f5:6b:b5:13:20:1b:dd:f1:3f:ab:a8:30:c6:
6b:59:c6:95:8f:68:32:32:da:14:53:c8:55:75:dc:
6b:98:ec:f5:38:64:a0:9f:66:97:f3:5d:22:3e:9b:
c4:a9:7b:42:05:d4:c9:d1:db:e9:27:34:24:1b:ce:
b2:fe:72:de:84:32:2d:43:28:ae:ec:ee:65:30:6b:
3b:e3:30:05:f1:78:91:16:c5:a9:63:96:c6:51:74:
ba:73:4d:94:b1:db:ea:7a:7c:29:1c:6f:68:04:1d:
50:d9:af:3a:c6:00:4f:83:2a:3c:10:47:ed:f3:fe:
de:aa:e6:32:32:26:59:e8:33:74:75:b4:81:57:d4:
dd:42:01:7d:41:0d:ba:2d:16:f1:9a:af:b6:00:45:
1a:bb:0d:90:ec:33:20:81:13:5c:1c:a5:d6:08:e8:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:5C:11:9E:40:71:4E:19:F7:60:F6:B7:B8:2B:83:50:CF:40:6B
X509v3 Authority Key Identifier:
keyid:F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0f:15:af:5f:8c:8b:8e:99:d2:dc:4b:b9:3f:db:e5:13:4d:
7e:cb:eb:b2:dc:0a:a1:2b:8b:32:69:7e:6f:95:68:16:6e:e4:
26:ab:ec:cd:69:e6:93:c8:67:6d:d1:35:f2:87:54:5a:a1:68:
31:2d:e6:90:47:5a:26:22:70:5e:70:14:1f:ae:3e:0e:1f:34:
fe:c9:30:30:da:83:3d:78:0a:9a:1d:d6:eb:d0:b2:15:fd:29:
ac:c7:21:89:88:07:c4:9d:c3:f9:98:d8:0e:8e:67:f2:ca:d7:
05:72:5f:8d:73:10:7e:b5:9e:be:7c:3e:1f:17:f9:38:8f:2d:
4d:4f:38:49:87:ec:e8:a1:bc:e5:0d:62:ba:0a:9e:22:ff:e3:
30:3e:10:e0:07:87:9d:64:1b:f0:c6:d7:b4:30:c2:0e:e7:fd:
50:a4:bd:51:22:f0:d5:d4:33:86:81:7c:bf:a2:55:a8:ea:09:
06:bf:54:4b:b0:97:f6:f9:f9:f0:9f:03:43:fa:23:f6:86:ee:
7e:f3:2b:99:4b:7d:cb:3d:f9:90:70:07:18:ab:a6:b4:0a:43:
c3:43:24:f3:89:74:a7:63:9d:06:c1:d5:d8:35:7f:29:af:6e:
16:0e:b0:a8:3a:9c:db:5c:60:4a:1a:71:ed:16:00:7e:4e:4a:
be:4b:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:27 2026 by rpki-client