
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
File: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft (raw, json)
Hash identifier: +ezsahlvAPboUDOk6IxVua8t+8+NG+Wvl4qgdheSGTQ=
Subject key identifier: 08:EC:29:08:F4:A7:1A:31:E0:CA:A3:F3:A9:70:55:B0:A8:A1:84:B7
Authority key identifier: 20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
Certificate issuer: /CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Certificate serial: 2EC242E57F7E907C32A54AC6C2E3262B6052B1AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 19:54:21 +0000
Manifest this update: Thu 23 Jul 2026 19:49:21 +0000
Manifest next update: Fri 24 Jul 2026 23:45:21 +0000
Files and hashes: 1: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: D52uwwzpgaxCjAFI9GaZMm7APMN7ImtqrU9yyVklPWk=)
2: 2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl (hash: +eiSt58NsE3IlCWh+/a1KmKVP0b0ehPDMH0hUiRIfL0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c2:42:e5:7f:7e:90:7c:32:a5:4a:c6:c2:e3:26:2b:60:52:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2030219AC2D8BDE540B3A06B3E220CC62B6B374E
Validity
Not Before: Jul 23 19:49:21 2026 GMT
Not After : Jul 24 23:45:21 2026 GMT
Subject: CN=08EC2908F4A71A31E0CAA3F3A97055B0A8A184B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:33:9c:63:8f:98:7a:eb:60:e8:1e:43:ea:
8b:cc:4a:2d:47:84:77:5a:b4:7b:b5:22:62:9f:32:
ca:67:4c:a7:cc:7a:7e:28:e7:d8:a4:7d:00:a8:b6:
90:6c:a4:41:23:65:a1:be:0b:b9:31:77:57:27:c7:
59:4d:32:40:e5:53:00:73:a4:ff:8d:2e:01:c0:7e:
c3:93:10:7c:aa:de:d6:64:c8:40:79:2e:e3:e2:76:
83:ee:f8:43:7d:9a:54:a1:93:26:53:c9:c1:48:68:
84:49:c2:cf:f8:70:9c:1f:24:df:5c:a0:64:44:f6:
43:30:26:6c:6d:fa:13:1d:5f:f3:4b:47:98:1a:ee:
71:a0:c7:3d:f5:0a:e5:fd:8f:e9:ca:c6:1f:54:84:
d0:69:c1:7e:2f:e0:f8:d5:1b:3e:3d:da:11:a6:d6:
73:d5:5d:76:c2:ef:1c:d5:81:2e:96:1c:32:51:1b:
1e:ab:8e:15:7a:bf:b5:33:a8:86:3f:11:b0:a4:2a:
03:95:f1:87:11:ce:1f:c1:91:3f:24:ee:9f:0b:c2:
07:cd:5a:ea:b3:77:dc:31:99:88:ce:f9:db:19:0b:
98:a7:65:2f:35:ef:b4:c2:f8:0d:b2:68:20:18:3e:
93:55:ba:33:d4:1c:13:8e:22:6c:d8:14:30:f2:9d:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:29:08:F4:A7:1A:31:E0:CA:A3:F3:A9:70:55:B0:A8:A1:84:B7
X509v3 Authority Key Identifier:
keyid:20:30:21:9A:C2:D8:BD:E5:40:B3:A0:6B:3E:22:0C:C6:2B:6B:37:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/2030219AC2D8BDE540B3A06B3E220CC62B6B374E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:48:61:00:3c:81:5f:dc:52:7e:56:fd:57:6c:60:2e:0e:19:
20:6c:d1:5b:d5:92:5b:19:17:21:ae:a0:7d:24:52:b7:b6:96:
69:72:5d:25:bb:fb:d6:3b:2d:75:21:a0:61:94:ad:06:63:b2:
fc:ae:12:af:be:c6:5e:b1:ce:e7:dd:ac:52:34:60:e2:d7:3b:
78:d2:2f:9f:62:df:74:fc:e8:0f:62:de:24:7b:33:9f:da:fb:
19:82:dc:82:f4:4d:27:a3:4b:f5:e7:fa:30:ce:5c:97:2b:06:
22:d0:6d:b3:75:5e:42:f2:20:0d:d0:e0:9e:b1:f3:9e:ac:1a:
33:f9:9d:51:0b:ee:51:9f:d7:af:5d:29:78:af:8b:85:a8:3a:
1b:12:24:f4:0c:27:b9:50:69:14:c3:59:06:22:c0:03:10:1f:
ad:22:2e:d3:e4:69:38:8c:20:4f:83:c2:c4:fc:47:6a:08:0b:
78:5e:29:2d:3e:fa:81:10:70:59:90:c4:e7:1f:b2:25:b7:fd:
2d:06:00:f9:3b:66:ad:c5:92:3a:53:05:b0:0d:d0:8e:55:36:
ad:10:da:d1:30:cc:3f:09:91:2b:54:50:86:db:7f:0c:ad:99:
14:b9:f7:22:a1:de:f2:45:f4:c3:81:8f:3d:b2:ac:a4:37:30:
41:c8:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:21 2026 by rpki-client