
$ rpki-client -vvf rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
File: 33280920734014336A0249C909A38E7BC1B49F29.mft (raw, json)
Hash identifier: /9haBAhAbIL72GBej6OvhdMH5qh+St41dU+toawL06E=
Subject key identifier: F5:17:0F:7A:D6:3F:4E:66:AE:72:90:85:26:94:F6:5C:78:08:64:10
Authority key identifier: 33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29
Certificate issuer: /CN=33280920734014336A0249C909A38E7BC1B49F29
Certificate serial: 0E36528073E297E047CA61D5AF2C589DC36D5109
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 00:19:30 +0000
Manifest this update: Fri 24 Jul 2026 00:14:30 +0000
Manifest next update: Sat 25 Jul 2026 00:49:30 +0000
Files and hashes: 1: 33280920734014336A0249C909A38E7BC1B49F29.crl (hash: TzIthgo8u8E0VlUX5fMoY9PAc8nSd1IabBailUd22A8=)
2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: xR2Y5HZPSCwBzoLVtmjeFWlOGn7Q6tcdXN9P57xpYxw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl
rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:36:52:80:73:e2:97:e0:47:ca:61:d5:af:2c:58:9d:c3:6d:51:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33280920734014336A0249C909A38E7BC1B49F29
Validity
Not Before: Jul 24 00:14:30 2026 GMT
Not After : Jul 25 00:49:30 2026 GMT
Subject: CN=F5170F7AD63F4E66AE7290852694F65C78086410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:98:d2:52:0b:ab:c0:0f:27:e0:32:fc:4a:
59:63:4b:e4:7b:5c:4d:b3:9c:e7:99:e4:21:ed:b1:
60:b3:2e:4d:bf:00:38:f9:67:c9:21:d0:20:0b:a8:
25:7e:dc:a2:02:d5:85:3a:ea:ce:9b:1a:2a:04:37:
09:0c:2b:23:ed:c5:7c:5b:7d:94:90:ad:0b:a3:8b:
19:ea:54:a5:b1:a4:56:ba:94:b2:17:d6:45:45:8e:
ab:57:0d:9a:80:66:a1:e6:0a:83:a2:cb:3d:7f:c3:
4c:30:60:be:6e:dd:d3:3c:3a:e8:c3:c6:0c:ba:8a:
fc:39:1a:5b:bf:f2:51:b9:1c:a4:ca:79:02:c9:72:
95:5b:92:2c:c3:22:b4:81:d5:fa:0d:bd:e9:d0:3f:
08:54:ae:b6:31:fc:b6:03:1f:00:a6:28:79:f6:0e:
ec:af:e4:06:5c:5d:02:33:ed:7b:31:20:04:0f:f6:
e7:87:b6:95:4a:6e:57:4c:55:47:0c:a1:61:f3:22:
15:ba:99:5e:fc:1f:dc:46:0c:98:d0:b7:f8:c6:3e:
5d:59:5b:ee:e2:6d:ce:73:a8:22:2e:3b:e1:40:e7:
f6:0c:d8:f9:d1:cb:93:25:8d:ca:44:27:1a:c3:d5:
90:4b:25:c6:a6:a1:75:d0:b0:9a:d6:cc:f0:65:bc:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:0F:7A:D6:3F:4E:66:AE:72:90:85:26:94:F6:5C:78:08:64:10
X509v3 Authority Key Identifier:
keyid:33:28:09:20:73:40:14:33:6A:02:49:C9:09:A3:8E:7B:C1:B4:9F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/33280920734014336A0249C909A38E7BC1B49F29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/33280920734014336A0249C909A38E7BC1B49F29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:43:3d:c0:3a:f8:dc:d5:1e:fa:10:8a:69:9f:54:da:1a:4d:
73:c3:11:fd:97:55:87:2c:87:c9:75:15:98:85:11:95:47:dd:
07:90:fe:c2:91:3e:c3:40:0a:17:9d:38:63:85:17:c7:31:33:
b5:28:a9:96:4c:29:e9:b3:5d:9d:73:4d:09:94:a5:eb:4b:2a:
95:57:e1:d1:c3:a2:ef:6a:89:ec:d3:3f:2b:af:13:a9:7f:de:
d9:21:71:68:4a:df:80:7c:ed:2a:e3:d0:15:e9:31:c1:a8:7e:
f6:54:f7:a4:a5:59:5d:b1:a1:67:04:f5:2e:b1:f1:19:dd:db:
81:ce:37:e6:99:19:0b:3b:a0:42:80:dc:22:f8:0e:14:5f:00:
4a:6b:85:48:5d:fa:5b:0d:50:7f:d2:5d:9b:5f:b9:19:4f:02:
59:3d:42:7e:cc:a7:dc:c1:7e:95:62:7f:89:89:90:1e:73:cb:
ae:53:15:5b:ad:af:4c:f8:dd:c9:0f:e2:85:ba:a9:ef:9e:f1:
bc:3e:3b:89:39:74:28:2c:df:4f:9a:8d:dc:9b:fc:59:5d:d7:
fb:05:ea:73:e3:80:7d:5a:85:34:d3:4d:4d:c9:24:b5:55:e6:
34:ed:93:99:a3:b0:75:85:f1:2e:6f:17:70:95:9f:1b:e2:b4:
f7:fd:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:24 2026 by rpki-client