
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json)
Hash identifier: sJKZTBsS1kpHNhHK5yAr9JCdcWPwnUPDqopgohTb5FQ=
Subject key identifier: A4:68:3C:FE:12:26:47:CC:66:2A:2A:14:E3:A1:55:D2:40:1A:B6:77
Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Certificate serial: 4E68BF03CF532E0767ABF5361DC0E5EC478F95FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:29:47 +0000
Manifest this update: Fri 24 Jul 2026 00:24:47 +0000
Manifest next update: Sat 25 Jul 2026 04:12:47 +0000
Files and hashes: 1: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: x5dWbY3UjwhffLH7Yu+fpIcGzRxlx21uWg4COjmG2Vs=)
2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:68:bf:03:cf:53:2e:07:67:ab:f5:36:1d:c0:e5:ec:47:8f:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Validity
Not Before: Jul 24 00:24:47 2026 GMT
Not After : Jul 25 04:12:47 2026 GMT
Subject: CN=A4683CFE122647CC662A2A14E3A155D2401AB677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:50:ea:e3:b3:8d:c3:be:11:22:9e:47:ec:
29:61:c7:38:ef:02:5a:5d:53:9b:b6:34:2a:7a:d4:
53:04:c7:9e:6c:c0:34:38:b8:ca:5c:ad:44:05:35:
84:ff:d5:64:f2:63:67:72:3d:1a:de:c0:4d:d3:ac:
e4:37:48:01:96:b2:34:c0:c4:93:5a:a9:6b:05:a7:
ae:57:dd:25:d0:63:59:01:4e:b4:14:7f:76:a5:76:
0e:32:7d:93:84:1a:b3:83:9f:e1:a7:7d:c5:52:86:
fe:8d:6e:0a:4a:32:d0:12:0d:94:8a:7d:7f:bb:e7:
cb:20:2c:2a:a5:a1:7d:e3:90:2a:8d:55:9a:c0:ea:
a0:b6:fc:83:24:ee:e4:d6:84:12:e2:54:e2:ab:85:
a6:7b:32:90:9e:95:92:ea:5a:4a:af:f1:15:46:07:
d9:b6:db:d8:11:c7:06:04:5c:b4:ab:71:6c:28:aa:
e0:5f:1a:5f:89:c4:e0:a0:fc:a7:6f:bd:e7:e8:ad:
0d:b6:5e:cf:87:da:f6:12:0d:c0:a0:b5:e3:70:62:
d6:9a:e7:6a:ce:2e:45:e9:8c:3e:df:02:07:35:d8:
19:d9:6c:f3:01:9a:e3:2a:d0:6d:9e:2f:b5:b8:e7:
a9:58:08:71:ed:4d:36:e6:92:92:a0:52:aa:a6:0c:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:3C:FE:12:26:47:CC:66:2A:2A:14:E3:A1:55:D2:40:1A:B6:77
X509v3 Authority Key Identifier:
keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ce:4e:fd:91:19:da:4e:7a:45:9e:f5:7a:78:ea:d9:cf:90:
1b:b0:fc:98:fe:b2:98:67:5b:98:13:ea:ee:56:ee:ec:64:a3:
34:4f:75:f3:47:45:f9:33:86:27:63:3c:be:ba:75:bf:3d:bb:
70:5a:9a:9b:cc:e2:79:47:c5:46:10:8d:b4:6c:cc:58:44:cc:
7f:6c:17:4a:75:b7:36:8c:10:66:d6:12:33:02:6c:fd:07:ea:
10:1e:40:6a:53:e2:a8:67:39:14:15:8b:c8:30:a0:0e:65:1c:
e5:e6:be:86:d7:3c:02:ad:3f:02:8e:7f:39:b1:84:ba:36:04:
6c:b0:57:8a:54:2f:c8:b5:a6:3e:5f:8c:82:43:4f:e4:97:0f:
49:7d:f7:7e:b2:fc:72:79:8f:d2:94:00:77:4f:e1:04:a6:ae:
cc:77:4f:63:3c:1a:c7:3f:9c:96:6b:e7:fb:f3:4a:0f:07:3e:
54:35:c5:85:21:e2:82:b2:8e:32:a9:87:c3:7e:df:ca:d9:f4:
ee:b4:01:d0:26:2f:a6:18:e0:61:0a:be:45:fb:f2:5c:ac:bf:
16:29:45:d4:5f:1e:43:3f:6a:d7:58:58:67:40:ef:8a:55:91:
8e:3e:20:40:84:48:bc:3f:1f:f8:5d:c7:55:fd:2a:55:30:65:
12:b0:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:31 2026 by rpki-client