
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json)
Hash identifier: aYxFvDwAm5aAmdPsK6ZEKtPMIvvI3M5C9EbMly6l4MM=
Subject key identifier: 26:3F:5A:82:1A:B6:0C:7E:3B:47:38:75:7E:86:2B:65:08:CD:B4:D7
Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303
Certificate serial: 0738862C1CA8F23AEA07AABECBF67C73F83B801A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:27:36 +0000
Manifest this update: Tue 12 May 2026 03:22:36 +0000
Manifest next update: Wed 13 May 2026 05:09:36 +0000
Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=)
2: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: xsXykOI/TCSUMVbA43D0Aj8VodJG6aYhx0leHiMhALg=)
3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:38:86:2c:1c:a8:f2:3a:ea:07:aa:be:cb:f6:7c:73:f8:3b:80:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303
Validity
Not Before: May 12 03:22:36 2026 GMT
Not After : May 13 05:09:36 2026 GMT
Subject: CN=263F5A821AB60C7E3B4738757E862B6508CDB4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:47:9c:6a:8e:b4:45:ee:3c:50:2a:65:70:
da:fe:ae:75:d0:96:01:98:16:9c:d6:ca:f6:a0:10:
e4:a0:33:63:36:cb:5c:ad:ac:c6:fa:8b:f9:ae:df:
1c:dc:c2:12:f0:d1:76:49:5f:6c:98:95:bd:b1:93:
da:3b:48:e5:47:45:68:93:30:f6:1a:d1:b1:3d:49:
1f:dd:e3:03:d9:7c:3c:8e:13:e0:5b:7d:5a:0d:63:
d4:aa:c4:ef:1e:1a:c2:cb:f7:4b:02:e7:1e:5f:19:
d8:f1:e0:49:f1:c4:74:b8:ad:4b:7c:f3:b4:19:95:
b8:2f:8d:87:b1:ff:16:c5:ce:83:cb:97:c9:c0:ef:
40:db:08:d5:3b:b0:4f:74:57:32:93:94:5d:4c:7a:
01:26:77:6d:cb:1a:39:8e:bc:e3:d8:f1:f0:f9:1b:
3e:c7:27:a5:25:37:b4:64:47:32:97:6b:42:be:0f:
2f:b9:4e:99:82:95:7f:29:11:24:6a:cb:12:38:e2:
d4:4c:70:21:17:b3:ac:45:fb:a7:f0:60:83:29:39:
62:fb:2a:dd:98:ee:0f:cc:5c:01:0d:f0:76:9e:2d:
24:d6:14:31:14:b9:ea:9c:71:b5:71:65:b7:44:58:
c5:d7:94:76:80:fe:f2:22:93:93:e0:cc:3e:8a:b8:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:5A:82:1A:B6:0C:7E:3B:47:38:75:7E:86:2B:65:08:CD:B4:D7
X509v3 Authority Key Identifier:
keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:75:49:1a:0d:78:61:97:c3:ea:e9:84:1b:8e:ed:73:62:ca:
84:ee:4c:51:81:65:f8:7f:dd:6d:8c:97:3a:2b:e8:53:11:60:
83:4d:14:05:aa:49:e0:02:2f:2c:ab:ec:08:58:3c:d6:dd:00:
e4:71:9d:0c:32:39:81:c3:92:59:1f:19:52:e8:ac:01:c6:d1:
0a:3a:3d:6d:7a:4a:b6:95:75:c3:99:47:50:67:23:8a:b1:ee:
04:a6:a2:45:d1:79:cd:9f:25:d9:08:de:96:46:01:1a:bd:be:
52:54:da:d5:ce:7d:34:26:49:82:4a:f1:77:dd:f8:33:05:2e:
97:b6:9e:79:a9:76:0e:d1:25:8f:08:89:11:73:31:6a:e6:1e:
74:c0:2b:4d:e9:b3:ac:ad:fd:ac:f8:aa:2f:8e:28:79:74:c9:
16:8a:8d:13:cf:7d:b5:4e:be:ca:7d:9d:5a:78:24:87:f9:62:
04:78:2f:f6:7d:0b:c7:96:df:bf:1a:8f:4d:ee:f0:b6:c6:5a:
a9:e6:e0:28:d2:43:b8:73:bb:06:79:e1:39:06:67:5b:5e:9f:
99:f3:bb:34:e6:40:2b:2c:ed:4e:11:f6:a7:66:65:ba:00:ba:
45:06:c6:f8:f2:2f:08:68:fe:a7:ed:6a:4b:1f:4e:4b:04:0f:
18:f0:53:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:55 2026 by rpki-client