
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
File: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json)
Hash identifier: Terigktp+wwSg+ioiNdVHzuk9Tu8cVw2JMWAcQGQYU0=
Subject key identifier: 52:AC:F5:C2:84:7B:92:B5:6A:70:69:63:BE:13:A4:32:91:BA:8E:C3
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial: 55525B3E23D8F09E71113DB0A5A6479AF8682B93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:32:30 +0000
Manifest this update: Tue 12 May 2026 20:27:30 +0000
Manifest next update: Wed 13 May 2026 20:53:30 +0000
Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=)
2: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: vh9ik2Q63Vor6uRQd6EHecyCWLckj428BJJhFz6Gsek=)
3: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:52:5b:3e:23:d8:f0:9e:71:11:3d:b0:a5:a6:47:9a:f8:68:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Validity
Not Before: May 12 20:27:30 2026 GMT
Not After : May 13 20:53:30 2026 GMT
Subject: CN=52ACF5C2847B92B56A706963BE13A43291BA8EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:20:ae:89:30:1e:77:47:13:95:ac:5b:4c:
2e:96:8b:cd:a3:33:72:95:c7:1f:ca:b0:74:d9:28:
5c:92:1f:41:31:53:cd:85:91:29:02:96:ef:3c:ad:
34:80:e9:26:79:4f:7e:71:eb:17:2d:2f:20:05:99:
2f:bd:f0:46:2e:3e:04:85:3c:9c:76:f2:41:1a:e6:
6a:7b:6d:46:83:48:30:af:75:aa:fd:c0:68:b2:fd:
13:63:77:d2:69:fa:b5:c5:b2:31:2e:3d:e3:55:13:
23:34:30:ae:55:54:e6:5c:f5:d5:a9:ab:8e:53:55:
2a:4b:43:8c:5b:9d:19:3a:67:26:2f:6e:2e:c0:55:
75:e8:70:4b:ee:b4:b8:31:e2:24:2f:df:79:0f:a1:
f2:8f:dc:59:21:46:45:d6:3b:be:1d:fd:94:1d:05:
a7:75:d1:24:fb:41:b3:42:61:3b:6b:42:26:27:7e:
78:22:b9:71:0a:4f:b3:9e:34:d7:d0:a7:46:cd:e6:
e2:a1:93:35:4c:92:af:b7:48:02:7b:b9:f0:c0:c9:
9a:c9:e1:3d:c2:ae:53:d4:53:80:42:cc:f7:64:c2:
e2:15:aa:ff:98:40:66:a4:64:99:a9:fb:98:61:16:
87:57:0d:06:98:17:e0:5e:c1:d7:38:e5:05:c5:92:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:F5:C2:84:7B:92:B5:6A:70:69:63:BE:13:A4:32:91:BA:8E:C3
X509v3 Authority Key Identifier:
keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:f5:68:3f:99:0a:18:e9:03:07:2c:5d:30:bc:72:51:84:
02:41:a0:e2:94:89:b3:d2:73:47:9e:9e:f4:9d:bb:eb:92:2e:
63:f6:1b:13:84:dc:44:ce:b6:8b:df:6f:a3:d7:3e:5d:ad:d6:
64:ed:da:ea:0c:aa:fa:fa:af:53:10:e6:13:ce:c3:11:32:da:
dd:7c:40:9b:af:d7:27:07:88:63:89:33:fd:00:8a:76:3b:37:
20:9d:d4:94:10:7c:b8:76:2a:fc:88:8a:65:9f:f1:d9:78:bd:
d2:18:8d:9d:c6:09:20:6d:20:c5:67:50:23:ac:dd:b9:cd:4a:
1f:44:91:7b:39:9c:9d:d7:3d:d4:0c:dd:8f:a2:6a:99:c0:38:
4a:38:f9:e6:37:25:2f:de:ef:d9:10:4c:85:af:37:5b:ee:03:
83:12:3d:4d:fa:8d:b7:54:4c:42:fd:07:05:30:2b:9f:49:65:
3a:b2:cd:b8:c0:28:38:55:5b:41:e6:8e:fe:02:58:0e:f2:4b:
50:a2:78:5f:b5:0c:26:03:b5:8a:6e:36:4f:b8:98:c0:4f:95:
97:1b:c5:f9:91:b3:7c:b8:d4:ec:85:78:89:f7:15:e0:34:05:
19:7c:a3:34:a5:08:a2:97:71:7e:74:50:fc:6c:da:d7:0e:e2:
64:c2:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:35 2026 by rpki-client