
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
File: 000F2B21BC5C00475E698BA18880BB67B774EC97.mft (raw, json)
Hash identifier: VgqONVymGNeaL2tel1mkd1ywgEZsLHzkCZIIhB3DMAo=
Subject key identifier: 0A:DE:16:0D:51:09:34:27:51:29:80:BE:9A:15:1A:51:84:61:DA:57
Authority key identifier: 00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97
Certificate issuer: /CN=000F2B21BC5C00475E698BA18880BB67B774EC97
Certificate serial: 0891ECE3D8037D8D82FDDC4238363B15597C9E34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 20:35:05 +0000
Manifest this update: Thu 23 Jul 2026 20:30:05 +0000
Manifest next update: Sat 25 Jul 2026 00:31:05 +0000
Files and hashes: 1: 000F2B21BC5C00475E698BA18880BB67B774EC97.crl (hash: B3ZO6J/fgpurESECacq6hs7rWmiLrcheKTfQ5NT0XlY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl
rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:ec:e3:d8:03:7d:8d:82:fd:dc:42:38:36:3b:15:59:7c:9e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000F2B21BC5C00475E698BA18880BB67B774EC97
Validity
Not Before: Jul 23 20:30:05 2026 GMT
Not After : Jul 25 00:31:05 2026 GMT
Subject: CN=0ADE160D51093427512980BE9A151A518461DA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:c5:bf:5d:b4:17:78:e7:62:dd:cc:b5:95:
bf:cc:65:40:b0:b3:43:90:57:0d:02:ea:9d:ad:87:
14:e1:95:bf:61:84:31:8a:68:03:b0:f9:3e:cb:32:
42:fc:55:b3:7e:a0:ef:49:58:59:2a:c3:5d:41:36:
7f:fc:d8:cf:98:16:6b:65:0c:a4:c3:64:8e:ad:46:
58:c3:21:6d:76:af:8b:8a:df:5d:e7:10:b8:e0:d7:
6f:55:bf:79:46:87:b2:41:a9:dd:a1:1f:82:d6:98:
19:f3:1f:35:11:01:c8:de:45:0f:d7:e5:8d:02:86:
71:8e:bf:78:96:78:2f:9a:12:b1:31:ad:3d:8f:fb:
49:cc:79:00:99:21:af:49:12:47:89:5c:58:6c:d8:
3c:67:57:5f:7a:7c:16:91:87:9c:42:ea:e0:39:6c:
c9:e8:31:0d:9c:9c:41:d5:c7:cb:15:c8:9f:33:d6:
81:3b:6d:52:ef:0f:e2:50:65:2b:42:1f:b2:ef:23:
0f:e6:ca:9e:76:92:9f:11:e5:92:bb:55:85:ea:24:
dd:a9:10:9d:32:57:5c:5a:25:80:7d:5a:80:05:41:
9f:a7:17:ae:1a:0e:06:71:54:f1:81:86:1e:0e:36:
d7:af:38:49:ee:aa:57:28:fc:14:0e:84:43:a8:1a:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:16:0D:51:09:34:27:51:29:80:BE:9A:15:1A:51:84:61:DA:57
X509v3 Authority Key Identifier:
keyid:00:0F:2B:21:BC:5C:00:47:5E:69:8B:A1:88:80:BB:67:B7:74:EC:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000F2B21BC5C00475E698BA18880BB67B774EC97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/000F2B21BC5C00475E698BA18880BB67B774EC97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:22:f2:a6:ef:99:15:7a:15:33:25:a6:aa:92:1e:81:4f:1f:
e8:71:7d:36:5b:97:50:26:66:2f:a8:01:28:b2:18:2f:f3:3d:
85:c1:15:b5:04:bd:f5:c7:cc:81:98:a9:57:4a:ed:4c:f5:66:
5a:6c:ad:ce:aa:ea:1d:36:83:7a:46:ea:fd:6f:38:f7:10:df:
3a:c5:03:dd:9f:9e:b2:56:5e:3d:64:21:6f:91:39:19:bf:99:
1d:74:30:cf:1d:df:45:66:47:f5:7b:f1:75:fb:ee:38:a4:2a:
37:47:ad:e9:57:0b:df:08:ac:de:cc:fd:2b:5f:3c:a6:ea:a3:
e6:a3:89:3a:78:fc:35:bb:61:c8:4b:e7:95:08:bf:55:2b:64:
7c:bd:cb:0c:47:49:b4:af:8e:e6:7d:a6:b6:21:13:7b:49:2c:
4b:7e:06:bf:86:23:9a:d2:f1:52:4c:84:d4:ca:fb:49:92:16:
29:4c:9f:22:b6:ab:0e:8e:1a:3a:e1:e0:c9:b3:88:8e:ce:75:
28:80:03:de:73:de:81:3c:3a:8b:88:67:56:2a:8b:5e:27:f3:
97:5f:46:b1:73:d5:09:de:f5:64:8d:30:25:a9:e8:f9:14:73:
17:32:0f:fd:49:ac:68:7f:f5:76:e4:f7:0e:df:ae:e2:c7:fb:
84:4f:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:19 2026 by rpki-client