
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft
File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json)
Hash identifier: 2IYPeg5uiHadC3eA1tT2MN6H4Pu0qvlj50kqZv2TsEA=
Subject key identifier: 44:CB:E3:E4:DB:E4:E2:A7:69:19:8F:05:4C:F8:6E:6B:18:5D:15:62
Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B
Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B
Certificate serial: 53F817E21E396CC8496AC220E33394231B9FBB21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:57:50 +0000
Manifest this update: Thu 23 Jul 2026 22:52:50 +0000
Manifest next update: Sat 25 Jul 2026 02:17:50 +0000
Files and hashes: 1: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=)
2: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=)
3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=)
4: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: BMVOfhq6dJL+Qsxh4oyw0w72q++yTmYFkIUlChOoKNs=)
5: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=)
6: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=)
7: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl
rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f8:17:e2:1e:39:6c:c8:49:6a:c2:20:e3:33:94:23:1b:9f:bb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B
Validity
Not Before: Jul 23 22:52:50 2026 GMT
Not After : Jul 25 02:17:50 2026 GMT
Subject: CN=44CBE3E4DBE4E2A769198F054CF86E6B185D1562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:01:30:31:a0:0d:b8:44:83:be:a9:ca:e8:
4c:25:1a:5e:a8:7c:b1:18:2e:5c:5f:6d:da:ff:c7:
46:48:83:f3:fb:d8:39:31:ea:04:95:12:6f:77:12:
3a:c7:45:ed:ad:8b:32:fe:f8:cc:a0:cc:e3:c1:96:
75:62:35:bc:bf:8e:60:4d:2f:96:e3:1a:a7:9b:56:
e9:a1:9b:92:8e:48:ec:fa:45:2e:31:9e:aa:9a:0c:
f1:e6:65:38:5b:c5:fb:2f:24:11:26:46:f6:d7:98:
25:bf:f8:c1:4e:64:10:98:52:1f:41:cd:f6:d6:da:
8a:0d:e6:7b:2b:06:6e:d2:46:05:34:e2:39:69:81:
48:e0:e9:81:02:d7:72:ac:a7:6e:af:07:30:a0:21:
47:87:45:34:59:23:d2:b8:34:ed:82:15:8e:c8:b6:
a2:7b:17:fb:88:c6:5f:d6:71:7c:81:20:74:bf:05:
37:64:17:c1:6a:40:85:72:80:65:80:0d:58:4d:98:
05:29:90:a4:b8:b4:b3:8a:63:aa:92:4a:04:4c:22:
14:b7:ae:d5:83:5c:62:4d:09:14:cc:6f:b6:be:00:
89:b3:1b:40:d6:c1:07:00:1c:c6:2c:b4:11:f3:ac:
13:9f:d9:75:17:80:7c:83:e6:dc:25:62:0f:1f:67:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:E3:E4:DB:E4:E2:A7:69:19:8F:05:4C:F8:6E:6B:18:5D:15:62
X509v3 Authority Key Identifier:
keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:ac:d2:64:b3:e1:96:75:c0:0c:d3:97:3d:8f:d3:4b:87:
37:25:42:2b:d9:d2:77:8a:96:25:4d:ff:fb:d5:20:95:28:66:
be:16:5e:4f:32:6c:18:30:30:db:66:9e:3a:10:46:46:fa:c5:
9d:a5:6b:b8:e6:ae:7f:37:93:a2:7f:e1:7e:88:78:34:cb:95:
b1:77:dc:a5:53:ad:5f:34:f7:9c:ef:37:f7:4c:b9:6a:f3:cd:
2c:b1:02:26:1d:c7:ba:5e:af:fc:59:00:83:b8:5a:62:a8:8e:
30:e0:be:48:95:a3:6a:4d:8e:51:c4:62:6f:dd:7b:66:51:1d:
d2:dd:94:c9:70:f9:68:89:2e:58:f8:1d:d9:79:a4:e2:fe:ba:
78:36:d7:18:ec:df:6f:61:9e:ba:95:42:a5:bf:61:89:fb:5a:
21:3f:47:ef:79:9a:cf:d7:b8:46:0c:5f:0a:5d:26:b6:4e:ee:
eb:84:d6:94:02:51:24:b1:93:33:e8:99:a1:c5:1b:75:03:d5:
de:79:d4:3c:a9:9f:51:6b:0c:bd:fc:eb:03:55:e2:cf:79:71:
e6:8a:e6:a7:61:3e:07:e6:53:e1:6e:89:88:d3:05:15:13:55:
4f:c8:9b:da:4f:60:16:fb:0e:89:cc:16:15:5e:52:14:d5:f0:
6d:66:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:40 2026 by rpki-client