
$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
File: 0421C76E96397265BFB6174D98D3541B99E072CD.mft (raw, json)
Hash identifier: TFzcZw1SaCww6QGAh6LDSdqc9wmIhWzOdLJjaD3OjV8=
Subject key identifier: 1A:B2:52:14:6E:FC:55:0C:48:1F:C6:B7:A3:5D:95:26:96:7C:42:64
Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD
Certificate issuer: /CN=0421C76E96397265BFB6174D98D3541B99E072CD
Certificate serial: 5F9E782FB2D02A755C01ABA34AD7FBF57A6FAD1D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 07:54:07 +0000
Manifest this update: Fri 24 Jul 2026 07:49:07 +0000
Manifest next update: Sat 25 Jul 2026 08:00:07 +0000
Files and hashes: 1: 0421C76E96397265BFB6174D98D3541B99E072CD.crl (hash: fKdlhggXMUmJ63hca1bacj6CHkxbuf/q2qAEf6zt31Y=)
2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: 0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=)
3: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: Y7agMFCP1s+K4yRJyu210NdRUbb5vImEolOryGgfgKc=)
4: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl
rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9e:78:2f:b2:d0:2a:75:5c:01:ab:a3:4a:d7:fb:f5:7a:6f:ad:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD
Validity
Not Before: Jul 24 07:49:07 2026 GMT
Not After : Jul 25 08:00:07 2026 GMT
Subject: CN=1AB252146EFC550C481FC6B7A35D9526967C4264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:77:05:c4:46:ad:25:c2:7a:5a:e2:b3:2c:
8a:43:b8:41:12:ba:49:2d:69:29:11:53:85:e4:be:
58:bf:f2:8c:6a:8f:79:c1:3e:42:bf:2e:67:fc:e0:
55:86:ba:8d:fd:a0:a0:cf:60:26:77:45:e9:cf:4f:
47:e1:10:d3:d2:5c:cc:c9:2d:dc:36:86:cf:5c:dd:
fb:a8:ec:66:16:2d:94:51:10:e8:68:2e:e0:fd:fd:
1e:10:d6:ef:fa:40:00:0d:2f:fd:80:70:7c:77:37:
00:e8:1b:e0:96:c6:1b:ba:04:a2:d3:d7:7d:00:5e:
a9:4f:15:ff:25:5a:b2:de:a8:64:d3:df:77:f6:39:
f4:12:7c:dd:33:b3:15:75:b7:e4:64:dd:cc:a8:9a:
8e:e9:b7:db:5a:c0:35:a7:10:c6:52:b7:ea:98:89:
13:10:27:5a:19:27:c6:6e:ec:48:87:d6:0a:24:5f:
23:9e:1d:e0:0b:73:40:72:4c:b1:23:ef:51:bb:c0:
98:e5:8a:0b:32:ee:b7:96:35:38:5a:29:89:5a:53:
8d:04:6c:90:bd:17:d6:e1:04:dc:b7:7d:a5:77:d5:
d0:d4:b6:54:49:63:46:10:23:bf:63:65:04:91:78:
8a:76:52:1d:7e:aa:ab:63:a4:f4:ca:68:9a:98:96:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:52:14:6E:FC:55:0C:48:1F:C6:B7:A3:5D:95:26:96:7C:42:64
X509v3 Authority Key Identifier:
keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:58:aa:34:04:f5:fa:9a:a7:93:df:a3:6c:3f:4e:05:e4:d0:
5e:fc:94:b8:db:2c:52:d8:3e:08:c9:52:d9:65:98:fb:46:65:
95:dc:92:71:46:ed:85:51:e5:5e:b5:b6:df:4f:c2:50:15:60:
78:2c:ef:0d:c5:9a:4b:5a:9d:40:cd:dc:70:68:17:49:b6:cf:
8b:db:c9:49:b8:71:fe:22:e5:c8:f4:dc:a1:4d:48:91:f1:d4:
dc:f3:8a:87:00:3b:fd:89:f7:1a:02:5a:a0:56:0f:a6:e8:92:
6f:69:76:50:ce:ce:cb:fc:2f:14:b8:8a:33:6c:77:8d:ec:95:
52:11:2d:73:fc:84:62:14:5a:a8:c1:e5:65:a7:c0:f1:5e:1e:
55:f0:1f:c6:af:cd:f6:3f:15:d3:91:fc:68:07:1c:bf:63:b0:
43:76:aa:d0:6e:22:2e:ba:e9:d9:32:4a:34:de:15:9c:88:58:
48:ef:06:56:cf:84:bc:b9:19:ac:c7:d3:00:43:22:9c:aa:03:
1d:9b:05:17:14:a7:8f:e7:98:7f:47:1e:72:19:30:0c:7b:9d:
ce:8f:cf:31:0a:10:5c:e4:14:80:bf:3b:0b:15:04:58:9e:f5:
21:9e:be:c2:ee:de:da:23:e7:44:81:ed:cf:61:c0:39:c7:e7:
29:39:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:13 2026 by rpki-client