
$ rpki-client -vvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json)
Hash identifier: xrWitkUAGvSOuM9+Ko7TKbvlr95MEN1NhkW0ghBA7yQ=
Subject key identifier: F9:D4:87:29:9A:D8:F1:72:7B:06:78:7E:5C:1B:A5:E4:09:F5:3E:A6
Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Certificate serial: 5A9BA1A17BFFAD30721F0C71EFC966687470C46C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:15:58 +0000
Manifest this update: Fri 24 Jul 2026 05:10:58 +0000
Manifest next update: Sat 25 Jul 2026 08:05:58 +0000
Files and hashes: 1: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: OYOwcn3Qvy6Kliq37vdCEMEuw5axQBbyR4oTvPGh7fw=)
2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9b:a1:a1:7b:ff:ad:30:72:1f:0c:71:ef:c9:66:68:74:70:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Validity
Not Before: Jul 24 05:10:58 2026 GMT
Not After : Jul 25 08:05:58 2026 GMT
Subject: CN=F9D487299AD8F1727B06787E5C1BA5E409F53EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0f:b9:cc:b2:b9:b1:eb:0e:4d:ce:69:e1:3d:
5d:4b:0d:64:47:7a:4e:7f:bf:24:7c:1a:4c:1a:20:
be:e2:ff:3d:7a:93:86:69:af:37:5b:32:b2:69:d0:
15:60:33:22:39:e0:81:d7:a6:fa:6c:96:7c:88:74:
f8:4b:dc:2d:ef:fa:63:19:0e:e3:65:74:f6:9b:cb:
f8:4c:22:8f:25:ab:8f:2d:f1:4f:95:32:64:b0:f6:
52:3b:90:db:67:64:12:89:be:64:73:0a:39:fb:12:
49:54:72:1f:a4:52:54:b3:c7:3a:0b:89:6f:ed:ee:
5b:f2:64:03:22:13:be:6c:11:9a:b8:b5:6f:dd:04:
43:d1:13:f6:ae:8b:ee:53:43:8a:0d:f8:91:2a:48:
d8:de:12:cb:85:65:09:95:7e:82:6b:42:f0:21:d0:
70:0e:1d:9b:36:11:34:98:ce:2f:99:87:02:98:95:
69:e2:67:e0:67:d6:15:d9:e3:f3:85:41:2b:5b:93:
56:0e:0a:a3:f1:a2:5a:25:e4:ea:96:2f:e8:e2:79:
02:be:81:1d:ad:32:ea:7c:1f:5e:47:08:50:a1:45:
1c:ca:5d:de:92:aa:ac:4f:a5:2e:dd:d4:bc:85:5f:
2d:3d:70:b4:08:ef:d9:14:c1:75:53:2f:98:8b:39:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:87:29:9A:D8:F1:72:7B:06:78:7E:5C:1B:A5:E4:09:F5:3E:A6
X509v3 Authority Key Identifier:
keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a8:90:91:cd:c3:c9:41:81:00:4d:28:c3:1e:68:a0:8a:89:
47:79:de:2e:cc:31:85:03:a4:28:aa:2e:b6:3c:6c:d7:d6:ed:
b9:46:38:92:82:e5:30:47:43:14:84:2c:c4:12:78:bc:dc:2a:
48:8b:19:33:85:cc:f8:f0:19:d3:c2:56:46:de:40:e9:3d:95:
86:73:fd:63:b0:2c:f7:cf:7a:84:1e:bb:1a:0a:77:e5:fd:3f:
59:ab:af:8e:69:c1:75:97:d5:09:b5:4d:e8:df:53:56:be:0c:
e3:bd:49:68:d6:76:d8:fb:09:6a:93:72:54:da:c3:22:f8:3a:
a2:2b:fd:ea:6a:f5:19:2f:4c:93:aa:10:4c:20:ed:b7:43:80:
48:4e:a4:a8:f0:91:61:5c:60:60:4d:e7:0f:68:53:21:c2:e9:
09:46:7e:1f:81:2d:dd:d1:84:27:e0:9d:f9:8d:fc:38:b8:69:
3c:23:dd:33:a3:dd:2f:2b:d4:18:7e:ba:5a:3c:25:cc:1d:33:
72:25:a6:61:bf:45:83:2d:9c:22:61:69:ae:79:e0:42:cb:05:
f2:54:a8:f6:d4:93:af:65:4d:df:1b:96:40:8e:ad:03:3e:fd:
65:2d:30:e7:28:26:fd:ac:91:7f:e4:b3:f5:d1:04:d8:8c:17:
46:4c:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:20 2026 by rpki-client