
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
File: 24B340250EB1D6C83128750AD8B2299EF1300112.mft (raw, json)
Hash identifier: apNRjc//hIj3rGIQbQ57GVGq3tFpB1D0b+g+C8oB9G4=
Subject key identifier: EA:2C:26:6E:A5:3E:92:63:5E:2C:51:86:9C:7A:EC:F8:2C:B7:0F:97
Authority key identifier: 24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12
Certificate issuer: /CN=24B340250EB1D6C83128750AD8B2299EF1300112
Certificate serial: 7D16883FD38FDDF1F26A0D2BCAE9456D6633BE5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
Manifest number: 6D
Signing time: Fri 24 Jul 2026 00:09:17 +0000
Manifest this update: Fri 24 Jul 2026 00:04:17 +0000
Manifest next update: Sat 25 Jul 2026 01:12:17 +0000
Files and hashes: 1: 24B340250EB1D6C83128750AD8B2299EF1300112.crl (hash: YyB9lE1pmD8yKvClq55pRuYt3nBSz00gcUznoWykduM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl
rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:16:88:3f:d3:8f:dd:f1:f2:6a:0d:2b:ca:e9:45:6d:66:33:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24B340250EB1D6C83128750AD8B2299EF1300112
Validity
Not Before: Jul 24 00:04:17 2026 GMT
Not After : Jul 25 01:12:17 2026 GMT
Subject: CN=EA2C266EA53E92635E2C51869C7AECF82CB70F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:50:35:65:66:06:8d:74:d8:40:8b:e7:cc:
07:4c:17:ac:14:b4:50:10:57:20:65:63:f1:da:26:
f1:30:50:9b:1c:1f:c0:5d:9b:a4:21:f4:61:5f:0e:
1d:32:1a:1a:7e:7a:09:6f:a5:86:fe:7a:86:ea:89:
65:57:b5:11:a7:00:5c:f3:dc:48:98:9d:01:a8:ce:
ec:8b:0d:91:41:9b:eb:6d:ee:65:21:5b:8d:cb:ad:
36:30:0b:01:5b:27:2d:5a:f2:fe:6c:31:ec:86:55:
65:16:1d:f9:7f:a0:2d:aa:e2:4a:ba:58:8d:86:59:
63:e4:63:f5:50:cb:ad:0b:97:58:ee:0e:70:65:7b:
79:75:ae:5c:40:78:22:e8:6c:50:bf:36:3f:53:78:
38:23:f7:06:c1:89:58:33:a7:01:22:c9:4c:14:9b:
a9:23:ae:18:fc:b6:b2:33:19:60:75:ea:84:8d:33:
7f:01:13:df:c7:61:ee:71:09:9c:d7:cb:05:f2:17:
5f:04:d2:1c:ad:91:43:ff:99:96:c0:f1:94:39:9f:
7d:5e:c6:57:76:44:71:19:6d:53:bb:3a:01:3e:94:
2f:48:f4:4c:44:e8:01:72:24:dd:64:cd:da:64:1b:
68:98:02:f9:9f:dc:e4:ee:76:12:96:e2:d3:97:63:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:26:6E:A5:3E:92:63:5E:2C:51:86:9C:7A:EC:F8:2C:B7:0F:97
X509v3 Authority Key Identifier:
keyid:24:B3:40:25:0E:B1:D6:C8:31:28:75:0A:D8:B2:29:9E:F1:30:01:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24B340250EB1D6C83128750AD8B2299EF1300112.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/24B340250EB1D6C83128750AD8B2299EF1300112.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:9a:64:e3:0b:f9:85:e0:c3:27:35:8d:2d:5e:05:1d:b8:
bc:05:87:8e:76:d2:8b:46:6a:ab:5a:0d:b0:04:15:7c:9b:05:
02:60:51:56:55:67:cb:1f:fc:4b:e2:38:31:70:df:15:9a:00:
33:2c:ba:f0:fd:0b:05:05:36:7d:29:49:a3:d5:35:f0:50:79:
ff:14:86:b9:69:76:b0:77:28:9d:51:34:ec:11:00:65:84:c8:
93:bd:19:fe:45:13:81:ac:91:5a:a0:c0:04:2d:63:45:8a:67:
97:9e:27:f0:4c:f9:c4:2b:cd:fe:23:dc:e1:9c:19:32:3d:8c:
48:4f:92:f3:17:c2:50:e3:92:cd:3f:9a:a9:c6:a6:5e:e0:b8:
09:be:3c:b7:03:77:b9:83:4f:42:24:06:ee:b8:15:63:ca:22:
e5:95:62:f5:1f:5a:60:55:9a:c1:ef:ce:5a:5f:b5:8c:33:8d:
da:26:42:90:c3:a9:70:6a:be:18:fd:0a:2f:37:77:f2:ac:42:
26:4d:d4:17:3e:41:57:71:1c:58:af:35:5e:51:c5:c9:d7:79:
15:71:37:a4:4b:ef:a9:b7:50:bc:22:61:cb:0d:5b:5e:ae:31:
9d:81:0c:28:98:0a:cf:eb:62:9c:8e:68:98:87:82:fc:ba:cd:
04:cb:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:19 2026 by rpki-client