
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json)
Hash identifier: FF9a9UMtxmRXXY26wOEaLgM8lx9vHyfAGt6yBRHGlt8=
Subject key identifier: 78:13:BE:51:24:31:CE:D4:AD:F4:71:A3:D5:DF:41:CD:F1:11:68:80
Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303
Certificate serial: 1FE09C41616A1256C0A3AD6F224EBE5CC34A37B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 05:15:52 +0000
Manifest this update: Fri 24 Jul 2026 05:10:52 +0000
Manifest next update: Sat 25 Jul 2026 09:12:52 +0000
Files and hashes: 1: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: jX8PfXsKkDv6NEdCzDw7LZoONfvSVIiz1KzDvU0M75Y=)
2: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=)
3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e0:9c:41:61:6a:12:56:c0:a3:ad:6f:22:4e:be:5c:c3:4a:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303
Validity
Not Before: Jul 24 05:10:52 2026 GMT
Not After : Jul 25 09:12:52 2026 GMT
Subject: CN=7813BE512431CED4ADF471A3D5DF41CDF1116880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:e0:dd:29:b7:9a:a5:62:6b:2b:1f:bc:20:
83:1e:95:2c:03:4d:f3:17:3c:33:81:c2:0b:fd:43:
7e:f8:bd:5f:fd:9e:fd:7e:1f:08:00:7e:14:f5:9d:
2a:6b:ad:66:56:40:6b:ff:cb:41:7a:e4:47:7f:27:
f7:3e:e7:18:ac:71:57:56:f0:7c:66:cd:67:15:93:
02:23:43:1c:8f:a4:32:b7:ed:c6:74:87:b7:49:f9:
b4:fd:08:26:ed:6d:66:4d:83:88:47:a7:ec:eb:ea:
67:4f:4f:9a:97:0b:13:ef:b7:03:87:0d:22:a5:72:
db:66:d4:26:09:97:60:c3:e9:f8:d4:08:11:3b:70:
95:98:f2:4c:8c:f9:ae:e3:57:6c:d3:09:75:ec:84:
9a:c2:d4:27:bf:8a:cb:b0:10:72:3d:0b:1e:5e:0e:
fe:3c:8e:bf:87:1f:6a:81:a1:26:0b:c3:8d:5d:dc:
3c:72:2a:44:13:84:fd:72:0b:4f:9a:40:38:2b:4c:
33:57:74:6a:f8:62:d1:f9:fd:4c:f1:a7:d0:34:7c:
55:cf:3c:e8:f5:b2:f1:5c:b0:6f:82:71:22:25:4d:
54:06:f9:56:9e:ba:0c:fc:7f:df:9c:94:98:88:40:
e5:33:05:65:1a:c0:39:18:7e:33:a4:7a:f4:55:22:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:BE:51:24:31:CE:D4:AD:F4:71:A3:D5:DF:41:CD:F1:11:68:80
X509v3 Authority Key Identifier:
keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:c9:26:44:30:fe:0c:c0:b5:e1:45:17:db:ad:e5:ea:4e:
64:d9:dd:bc:3f:f2:40:60:d2:6f:50:24:03:38:7b:52:cd:a1:
3f:48:e1:c8:64:fd:bd:66:5f:14:27:eb:0f:d3:7e:dd:ce:35:
6a:e9:e7:b6:05:32:75:31:39:92:28:45:02:3d:b9:ca:69:fe:
ab:c3:a6:99:b7:ad:42:51:34:26:bc:79:4f:e4:3f:65:32:69:
e6:3b:06:8a:30:4c:8a:65:58:fb:03:46:8a:71:9c:8a:c3:00:
46:68:5f:55:de:0f:5b:f5:34:7e:af:17:33:eb:f6:f3:8b:3b:
96:a9:2e:9c:28:a8:33:7d:77:fa:aa:03:63:52:50:2e:17:4b:
d2:3a:7f:16:05:1a:8d:03:0d:bb:73:87:e0:b3:74:21:35:4a:
97:cf:1e:0d:be:d2:47:51:9e:35:36:ec:b1:fa:a5:3e:e4:41:
c9:49:b3:63:fe:c6:d7:a8:f2:36:d7:12:fe:9d:f1:7d:73:21:
55:71:68:97:ca:29:cb:bf:38:50:76:22:ff:18:9a:3c:d3:f5:
df:a0:f4:05:74:4b:73:01:d8:ce:55:cb:1e:14:ae:06:8c:e9:
99:ea:fc:18:3a:40:3a:bf:cd:83:85:ff:71:62:24:65:3c:b8:
eb:55:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:32 2026 by rpki-client