
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
File: F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft (raw, json)
Hash identifier: O7oYvv1IDXXJLySZsQ2i27E7fBHmjvAvwK3IE2k1FBo=
Subject key identifier: 17:2F:67:88:4B:9F:7B:3C:E2:E1:FD:9D:DA:91:5B:A1:A3:B2:90:6A
Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E
Certificate issuer: /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
Certificate serial: 2E46BCD8DD8DC05604F9C78806BC341CB028605C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 09:36:45 +0000
Manifest this update: Thu 23 Jul 2026 09:31:45 +0000
Manifest next update: Fri 24 Jul 2026 12:50:45 +0000
Files and hashes: 1: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: gX3SrmHuIFxjATXp8t+HZx8aCultQoPEMzsPd4px2h0=)
2: F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl (hash: a2YtS8P09FsL/17YQ+sCE3hItD+LCKCJha2b30zw60s=)
3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: qpcV4Pf7cNXRuQrRMlgmCsKcJG4eLr1f/Ludu6hvhtU=)
4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl
rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:46:bc:d8:dd:8d:c0:56:04:f9:c7:88:06:bc:34:1c:b0:28:60:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
Validity
Not Before: Jul 23 09:31:45 2026 GMT
Not After : Jul 24 12:50:45 2026 GMT
Subject: CN=172F67884B9F7B3CE2E1FD9DDA915BA1A3B2906A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:23:c5:65:67:c6:31:ce:32:60:1b:37:38:
9a:8f:0f:dc:26:0a:70:8a:a6:29:d5:23:ab:a3:68:
8f:65:9e:ae:be:d1:b3:f8:53:06:6f:3e:d0:25:4b:
7b:ac:e1:34:c2:22:c1:a0:5b:11:9c:76:fb:5c:c1:
9e:5b:62:63:ba:fb:d3:85:b6:c8:93:e9:0e:50:91:
54:6f:d8:82:7e:42:82:4f:9a:94:a1:48:4a:be:34:
f0:e2:5f:75:11:16:90:5c:e6:35:96:01:b7:90:43:
9f:92:5f:34:97:f7:61:d0:8c:3c:57:a4:cc:cd:9a:
c1:8a:e5:60:1a:17:de:4f:3f:79:08:9e:da:aa:d5:
3c:32:44:c0:d6:9e:4e:ec:22:6a:2f:06:e6:64:5f:
c8:20:81:ad:63:5e:60:f5:8b:03:d1:2d:2f:1b:5f:
07:2f:f7:9c:23:9a:d2:50:5d:05:9a:de:d8:5e:a6:
ac:7d:49:a9:23:c9:55:44:ef:fa:3e:5f:36:5b:69:
df:05:12:09:57:bd:02:44:01:35:e1:5e:01:11:9a:
18:c9:fd:a7:80:e6:c9:db:c2:f3:d3:49:7f:1c:f9:
5c:14:bc:08:af:97:bc:a9:be:02:ec:de:90:da:f3:
27:5d:3f:a6:8e:0a:7c:a5:9b:dc:29:38:4d:a9:24:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:67:88:4B:9F:7B:3C:E2:E1:FD:9D:DA:91:5B:A1:A3:B2:90:6A
X509v3 Authority Key Identifier:
keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:11:82:3b:1b:57:07:32:53:eb:b3:87:cf:9e:f5:4c:4b:31:
5f:93:27:4c:6f:7a:56:e3:cc:b0:6b:89:c6:23:f7:a0:08:d9:
71:ec:88:56:66:e0:b4:f4:ee:30:da:bd:20:c7:67:ad:a4:48:
d6:47:98:40:07:32:d2:4e:bf:6c:42:5c:d5:ab:d0:d6:37:f0:
a3:0a:77:44:52:15:74:5a:7e:f7:b3:4d:a9:59:f4:d8:92:6c:
fb:b7:ac:3f:e1:a4:97:ba:2a:02:60:0b:d5:2a:7e:b1:be:b0:
e9:a9:94:8d:99:1d:4f:87:b5:43:98:2a:ed:4c:72:5b:96:05:
6b:fd:1c:45:7d:36:51:6f:ea:64:48:eb:d4:01:af:5e:5e:9d:
a3:7b:13:6e:6b:db:cc:96:ed:e2:3c:0c:80:d4:af:d4:d8:1f:
dc:51:64:01:3f:3c:7d:7c:d7:9d:76:a3:97:30:63:dc:a5:79:
5a:3d:5d:dd:dd:78:52:76:f3:b3:57:29:1d:02:42:22:da:9a:
e6:17:dc:de:4c:67:f9:71:2b:73:39:3d:60:93:85:f8:c9:ea:
41:4e:69:d0:82:a2:1d:f3:87:2c:0e:8e:74:44:74:29:48:a2:
2c:55:8e:08:47:91:1a:11:74:b8:b5:ec:13:69:47:19:69:8d:
b1:79:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:45 2026 by rpki-client