
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft
File: F24F92FEE32EF3FD89B142D403B664674EC45F20.mft (raw, json)
Hash identifier: 6bumaVf1XQyxQRyrWxSe7MRudQA9VOAXHllKhXWsm8M=
Subject key identifier: 4E:F5:3E:FF:C8:42:4E:C2:85:04:35:8D:99:CC:0B:A5:96:60:82:8C
Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20
Certificate issuer: /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20
Certificate serial: 4E718A3073FA546DF027ADF273CB7E9931194F7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 13:43:03 +0000
Manifest this update: Wed 23 Sep 2026 13:38:03 +0000
Manifest next update: Thu 24 Sep 2026 15:44:03 +0000
Files and hashes: 1: F24F92FEE32EF3FD89B142D403B664674EC45F20.crl (hash: q5ygB1hNnwt/T0wziq1uR6zR9IeZzRtsI0tyveCd1TI=)
2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=)
3: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: bxuJHdBQ29ujm6ZiEr/payUgkQDlp15FaGJqOvION0Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl
rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:71:8a:30:73:fa:54:6d:f0:27:ad:f2:73:cb:7e:99:31:19:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20
Validity
Not Before: Sep 23 13:38:03 2026 GMT
Not After : Sep 24 15:44:03 2026 GMT
Subject: CN=4EF53EFFC8424EC28504358D99CC0BA59660828C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:f4:1a:fe:c3:60:22:e0:5d:3e:0d:a6:07:
5f:7e:a8:c0:d5:cd:55:2f:86:3a:96:10:9f:09:a9:
19:02:39:79:81:a4:f5:f4:42:3d:21:c1:43:1e:b6:
f1:c7:ef:c0:fc:84:7a:95:f2:4b:a4:22:1e:ab:6b:
a7:cf:f8:9e:ca:4d:44:b9:a6:8b:56:64:39:1e:44:
b3:5e:31:38:59:62:26:ee:90:67:18:27:60:d2:e0:
3e:25:bb:fa:74:3c:81:6a:ae:33:50:ad:93:71:9b:
3b:b9:a5:8b:df:33:49:e7:e5:c6:cd:95:6e:35:d5:
77:24:bf:67:9f:bc:66:6b:58:e0:e2:5f:d4:ff:50:
64:8a:e8:27:ea:bf:87:60:89:5f:5d:29:4c:cf:36:
eb:d3:78:ac:be:a9:dc:88:d2:85:7c:af:ce:cc:45:
a5:6e:a1:94:e4:cd:7c:39:ca:3b:11:2f:9b:d8:0b:
d2:2c:12:2a:63:e2:9e:e1:f7:29:f4:02:df:cc:c2:
79:f9:0e:95:06:eb:7f:59:2e:56:61:22:c1:68:df:
fe:1a:4a:07:54:04:2a:06:6b:b4:07:3c:f1:4c:c8:
23:49:f6:27:c2:6c:93:1a:82:79:74:93:f6:23:fe:
20:c3:ce:db:0b:e3:cd:af:c9:6e:0a:91:10:f0:8f:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F5:3E:FF:C8:42:4E:C2:85:04:35:8D:99:CC:0B:A5:96:60:82:8C
X509v3 Authority Key Identifier:
keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:33:df:bb:1f:95:d8:60:49:97:44:df:a2:20:77:25:82:
ef:30:19:aa:b1:7d:58:03:70:a6:37:61:a4:d2:09:2a:47:4e:
37:c8:f5:58:5a:07:df:9c:05:fd:5d:d3:2e:7e:38:2b:60:8f:
ba:40:7a:59:9c:f5:56:6b:5b:3c:9c:22:f7:d9:d7:9c:8a:9b:
ef:0b:19:38:12:22:5f:c1:d7:24:62:1b:03:38:cb:bc:cc:eb:
89:78:c3:94:1c:06:75:f2:6e:e5:a0:b5:29:f8:5b:9f:1f:86:
00:96:0a:2b:ef:55:cb:7d:3f:da:4f:95:6c:33:65:8d:97:e0:
89:f3:2a:8a:51:00:4a:fd:08:46:25:a5:86:cb:29:ad:14:5a:
20:b1:dd:8f:27:2c:5f:71:ea:87:02:9b:9f:e3:12:0d:a4:a6:
10:61:d8:f5:52:e2:88:ba:99:68:a8:56:00:53:e0:99:4c:e4:
98:81:54:53:63:f8:ec:f1:ba:d4:d3:6e:24:e4:f5:b9:b4:b8:
c2:78:27:32:6e:c2:b9:d5:85:c9:8b:84:fd:44:f0:56:a9:60:
dd:5c:1f:58:df:90:08:a1:f8:6c:40:d0:9e:b2:37:ae:2e:d7:
c7:62:cb:8c:b7:0e:8b:fc:1a:89:c1:5c:f3:81:c3:74:7e:df:
63:03:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:38 2026 by rpki-client