
$ rpki-client -vvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft
File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json)
Hash identifier: TdcsBq7HheHdeV1kyF5QXBeEmIfqaho5AGmpCkimwbQ=
Subject key identifier: BC:2D:47:77:8F:DD:BC:63:67:C6:78:C9:48:A4:53:C1:63:22:12:45
Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91
Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891
Certificate serial: 5814808784D307D9ED23F9C7DE375DD0A82EFB20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:26:26 +0000
Manifest this update: Thu 23 Jul 2026 17:21:26 +0000
Manifest next update: Fri 24 Jul 2026 19:09:26 +0000
Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: +M4K0gF/2N8NLqBYW56ckzbQEnvI2bewrbR8zc0HVvQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl
rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:14:80:87:84:d3:07:d9:ed:23:f9:c7:de:37:5d:d0:a8:2e:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891
Validity
Not Before: Jul 23 17:21:26 2026 GMT
Not After : Jul 24 19:09:26 2026 GMT
Subject: CN=BC2D47778FDDBC6367C678C948A453C163221245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:47:c5:d1:24:8f:4a:58:c4:92:2a:9b:de:
0a:80:d4:66:1e:7b:b3:66:32:7a:3c:e3:23:ee:8d:
ce:eb:34:99:8c:ee:91:02:81:dd:c7:ef:cd:cd:51:
1b:62:9e:41:cb:f6:3d:49:6a:f2:b3:98:5c:58:9f:
29:23:60:5e:ef:c8:04:96:d7:87:c7:3d:66:b8:ca:
63:e2:82:6a:67:7d:2b:93:7b:12:3e:73:52:5a:b5:
5d:fb:b8:a3:11:e7:ee:e3:ea:c1:9a:55:46:e8:5c:
55:20:89:f5:1c:c8:06:99:e3:75:d8:21:06:3f:00:
37:18:cf:76:0b:63:c3:62:65:ce:ff:b2:51:75:4c:
10:08:3b:bb:38:ad:0c:ae:e1:5f:7a:74:ad:3c:ce:
9e:34:be:fc:34:f6:de:55:28:48:13:b3:99:d9:8a:
e2:4f:bd:0b:f9:41:fc:f8:64:92:56:1c:1e:06:b1:
46:f8:f2:81:12:13:b1:bc:78:77:96:db:84:aa:f2:
81:50:97:9a:11:25:a5:a4:84:9a:9a:cf:b1:0f:a1:
16:a8:67:ae:ab:67:bb:28:e5:5f:95:7f:67:ae:6f:
98:57:64:ba:3b:1d:7b:55:47:03:1f:79:e5:32:92:
d6:ba:48:33:f1:c2:7b:f4:2a:7c:80:93:0c:6d:33:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:47:77:8F:DD:BC:63:67:C6:78:C9:48:A4:53:C1:63:22:12:45
X509v3 Authority Key Identifier:
keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:b3:27:31:10:31:47:ae:24:a9:7f:40:cd:de:0e:2e:d3:
eb:9b:5f:3b:52:3f:97:f3:47:91:a3:23:1d:08:d6:ed:67:cf:
4d:ca:f8:da:a9:6b:b5:b4:c8:00:92:a1:8e:a0:a4:f0:a3:59:
d9:5a:aa:2e:15:7d:b4:be:ff:49:c2:99:71:02:fd:bd:bb:e8:
03:ed:74:f8:e6:5e:fd:0e:df:3f:1d:18:9e:81:1e:57:4a:9f:
cd:f3:5b:3a:12:ee:3a:18:7e:4c:aa:75:db:fa:46:7a:d3:4c:
0e:2c:0c:ef:b5:bd:c9:8e:1f:37:d7:7e:62:d8:50:87:b3:a6:
5a:cc:bc:26:6e:9d:94:3e:c3:c9:eb:1e:61:f7:a3:4c:6e:44:
59:30:f9:81:7d:3c:09:dc:a3:f6:f6:9b:44:55:ed:8d:c4:59:
b7:eb:04:c0:50:3c:1a:c8:22:db:e7:9f:47:a2:71:7d:0c:d6:
58:4f:44:e8:12:ee:57:ed:8f:78:96:e7:af:c5:d2:5e:55:d9:
65:da:90:54:11:80:ea:b2:5a:48:64:c8:41:ca:a9:ae:ab:11:
5c:a7:62:20:02:ab:68:a3:25:8a:08:90:f9:9d:39:1d:e9:80:
8d:8b:53:47:18:22:ea:a2:4b:b1:27:f3:f7:c1:60:cc:f8:a3:
0e:cf:78:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWBSAh4TTB9ntI/nH3jdd0Kgu+yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND
QUQ4MTg5MTAeFw0yNjA3MjMxNzIxMjZaFw0yNjA3MjQxOTA5MjZaMDMxMTAvBgNV
BAMTKEJDMkQ0Nzc3OEZEREJDNjM2N0M2NzhDOTQ4QTQ1M0MxNjMyMjEyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSN0fF0SSPSljEkiqb3gqA1GYe
e7NmMno84yPujc7rNJmM7pECgd3H783NURtinkHL9j1JavKzmFxYnykjYF7vyASW
14fHPWa4ymPigmpnfSuTexI+c1JatV37uKMR5+7j6sGaVUboXFUgifUcyAaZ43XY
IQY/ADcYz3YLY8NiZc7/slF1TBAIO7s4rQyu4V96dK08zp40vvw09t5VKEgTs5nZ
iuJPvQv5Qfz4ZJJWHB4GsUb48oESE7G8eHeW24Sq8oFQl5oRJaWkhJqaz7EPoRao
Z66rZ7so5V+Vf2eub5hXZLo7HXtVRwMfeeUykta6SDPxwnv0KnyAkwxtMwZdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvC1Hd4/dvGNnxnjJSKRTwWMiEkUwHwYDVR0j
BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2
MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx
ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh
ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw
RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABBOsycxEDFHriSpf0DN3g4u0+ubXztSP5fz
R5GjIx0I1u1nz03K+Nqpa7W0yACSoY6gpPCjWdlaqi4VfbS+/0nCmXEC/b276APt
dPjmXv0O3z8dGJ6BHldKn83zWzoS7joYfkyqddv6RnrTTA4sDO+1vcmOHzfXfmLY
UIezplrMvCZunZQ+w8nrHmH3o0xuRFkw+YF9PAnco/b2m0RV7Y3EWbfrBMBQPBrI
Itvnn0eicX0M1lhPROgS7lftj3iW56/F0l5V2WXakFQRgOqyWkhkyEHKqa6rEVyn
YiACq2ijJYoIkPmdOR3pgI2LU0cYIuqiS7En8/fBYMz4ow7PeCc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:10 2026 by rpki-client