
$ rpki-client -vvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json)
Hash identifier: i5AlPlH6Hl9zqkm/0nqE7MHBaWucEYS7zJ3XSQjjwsc=
Subject key identifier: AE:0C:C3:A6:C5:50:1B:D2:FF:BA:A5:A3:54:81:5D:F3:A9:98:F4:E1
Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97
Certificate issuer: /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
Certificate serial: 391E17D2F8EAB939966397F313F2877F4378C739
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 13:36:17 +0000
Manifest this update: Fri 24 Jul 2026 13:31:17 +0000
Manifest next update: Sat 25 Jul 2026 16:18:17 +0000
Files and hashes: 1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: Ua4xLewzijPEUHjX6gCvlsiP/0+vaZVWs9x3lvGnc/k=)
2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl
rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1e:17:d2:f8:ea:b9:39:96:63:97:f3:13:f2:87:7f:43:78:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97
Validity
Not Before: Jul 24 13:31:17 2026 GMT
Not After : Jul 25 16:18:17 2026 GMT
Subject: CN=AE0CC3A6C5501BD2FFBAA5A354815DF3A998F4E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:a2:bc:ba:b3:9b:24:5f:32:a3:e5:ed:dd:
13:70:a2:fa:eb:c7:ab:3f:5a:13:9e:1a:4a:54:84:
e2:35:ff:06:3d:fe:3f:49:17:7f:c5:b7:60:e4:d8:
27:bf:b1:c8:45:b5:65:79:94:29:f2:91:ec:c8:c0:
06:62:70:5f:a5:57:c2:1c:dd:c8:5f:98:cb:1c:92:
cb:85:eb:4b:e8:0c:96:a0:e2:85:95:93:03:17:f8:
5b:2c:c5:30:98:50:5b:07:89:6b:9f:c8:86:db:dd:
a7:6f:51:cd:da:52:de:b6:a9:e3:b0:4a:8a:1e:d8:
96:f0:48:d1:07:1b:30:ae:19:44:1f:d7:73:c0:a3:
00:af:f9:63:8b:9b:89:fb:62:05:5a:bf:50:4f:f2:
db:2f:8c:5d:2a:a8:af:13:48:a5:0f:47:39:55:65:
da:ca:d3:85:fc:bb:cc:e2:7a:d0:72:8d:8d:15:78:
a5:ef:7b:7d:60:d9:af:23:16:fc:d4:5b:20:20:b6:
92:fa:6b:38:bf:08:a7:30:54:87:8c:ef:82:34:77:
36:11:9a:a0:7c:82:85:8d:39:c4:3c:57:40:00:b3:
2f:e1:0c:ff:27:87:f5:e4:21:bc:6c:72:03:0f:67:
58:93:ed:9a:4c:1c:35:ab:0d:94:d3:94:7d:44:b3:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:C3:A6:C5:50:1B:D2:FF:BA:A5:A3:54:81:5D:F3:A9:98:F4:E1
X509v3 Authority Key Identifier:
keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f5:de:7c:0b:cf:67:32:6b:d9:c5:07:79:35:20:8a:63:38:
99:bf:c1:de:5f:ea:2d:a9:db:09:0e:e8:0a:45:0e:69:57:65:
3e:24:ef:c6:5a:55:b7:13:b9:3c:7b:3b:e6:09:90:68:98:7a:
b8:fc:c8:d7:95:b4:b0:86:f0:c7:e2:30:2a:33:d9:e8:b8:fa:
3f:ad:33:f9:27:8f:98:14:b0:d2:37:41:3e:94:5c:fa:53:69:
ff:63:e7:b8:df:ab:93:cf:4a:5f:30:95:c9:04:c8:0f:df:4f:
b1:34:5f:83:8d:96:11:aa:07:fc:d5:65:d1:c4:30:7e:31:10:
2b:05:97:a2:f6:9f:f0:c0:dc:7b:17:76:5f:8b:d9:05:a7:2e:
6e:c7:69:cd:dc:06:e9:79:b1:0c:7a:a3:61:f6:b3:8d:81:db:
7b:e0:58:fd:ee:4e:11:7d:8c:b5:e7:db:c1:02:7e:94:5c:4b:
11:1b:de:ee:31:08:83:6b:7d:e3:45:2f:f1:bb:09:65:21:c7:
98:15:e5:3f:46:a9:5c:4b:28:f9:43:11:da:9e:38:ad:21:5f:
90:9e:b4:17:ec:8c:db:bb:73:c6:ef:24:74:af:75:e3:3c:e6:
1d:9d:41:b8:6c:54:73:ee:a8:b9:24:a6:d5:10:3c:55:a3:9e:
09:d3:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:39 2026 by rpki-client