
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
File: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json)
Hash identifier: qmjCol4bW3253eyjaVrycb6oS3QHxSsNIhFFiwDH81A=
Subject key identifier: B4:88:C1:81:FE:D0:C5:77:D3:D9:D1:DA:ED:D0:58:F5:CD:92:44:7E
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial: 0597FDE96DF935DD5361CFE232134356B79AC26B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 11:43:48 +0000
Manifest this update: Fri 24 Jul 2026 11:38:48 +0000
Manifest next update: Sat 25 Jul 2026 14:37:48 +0000
Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=)
2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=)
3: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: wPC1GNzge7nZmlJ/W8vlzsFFjF5zYcOKQroICWm09tU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:97:fd:e9:6d:f9:35:dd:53:61:cf:e2:32:13:43:56:b7:9a:c2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Validity
Not Before: Jul 24 11:38:48 2026 GMT
Not After : Jul 25 14:37:48 2026 GMT
Subject: CN=B488C181FED0C577D3D9D1DAEDD058F5CD92447E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:0d:d4:2b:77:14:38:7e:58:1d:ba:b8:6a:
09:c6:ff:fd:b9:07:d2:87:c2:1f:6c:12:28:a0:13:
19:71:68:7b:21:de:67:b0:30:8a:06:68:f5:a3:ad:
a5:c9:c9:4f:79:3b:a3:ee:f8:a7:c8:d1:57:1d:c3:
d3:99:1d:b9:e5:e2:0e:eb:b9:2a:93:b6:38:32:26:
96:91:78:e7:3f:72:de:a4:bb:18:77:9b:6f:6d:02:
52:2a:30:07:75:48:5d:af:42:e0:05:af:ac:79:a0:
93:af:a6:e4:a6:78:8d:eb:e0:0c:24:1a:5f:65:22:
3d:48:18:1a:50:d8:b3:de:e2:8d:19:de:3c:78:a6:
ed:da:54:9d:53:12:20:84:e3:68:33:06:65:38:56:
e9:d4:6f:78:ac:8c:91:43:b4:a4:da:79:63:8e:49:
02:28:77:5b:7f:06:08:1c:b2:8f:08:e2:16:f5:fc:
9a:c5:1e:5b:b1:0d:9a:31:96:0e:7b:c0:27:20:0d:
9b:79:89:b8:ac:a9:cc:e5:be:7d:1d:dc:2c:57:cd:
ce:35:88:be:7e:55:4d:c4:85:37:8a:18:60:98:3d:
66:1b:22:a1:62:1c:66:a8:e6:17:e7:1d:b3:40:5b:
56:b6:e5:e5:12:75:3c:c7:43:0b:3e:c9:d7:f1:d6:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:C1:81:FE:D0:C5:77:D3:D9:D1:DA:ED:D0:58:F5:CD:92:44:7E
X509v3 Authority Key Identifier:
keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:2c:12:62:7c:4e:cb:8a:18:59:14:f4:dd:34:72:f5:59:
e1:2b:d0:5d:e8:a4:84:df:18:32:3a:3f:2c:66:c3:23:ef:43:
c4:8c:4d:e3:46:01:60:76:5c:c6:51:1e:6d:76:eb:24:8d:72:
4c:84:a6:6b:6f:3e:d6:87:5e:d6:c1:2c:1c:cf:ef:6e:34:20:
b8:79:09:14:d7:b8:6d:0e:ad:39:fe:2a:f5:26:9f:11:d7:66:
4f:c7:00:40:dc:ce:58:90:9b:a0:a6:85:23:93:08:5a:93:df:
ad:a0:a8:74:64:d3:de:62:f1:c1:9f:01:33:59:86:a2:c8:1a:
d9:dd:e3:49:68:24:ad:8d:d4:de:3b:0b:5a:5a:10:7a:88:49:
42:74:69:1c:97:53:f2:b7:85:40:4b:a6:59:8c:0a:af:ea:5b:
bc:e9:4d:97:99:67:dd:43:77:b8:73:60:82:3e:26:32:d0:85:
73:12:14:32:34:a1:5b:a3:1a:a9:1d:b0:40:38:10:33:54:54:
8c:83:22:0f:2e:a8:88:4d:c8:55:ae:c6:b2:2e:06:b9:f2:19:
de:a2:66:9f:2c:0a:60:9e:c1:9b:ce:c9:10:70:ce:bf:c4:3b:
c4:5c:87:90:eb:a2:ba:34:af:3c:d3:b7:04:41:3d:85:2f:d0:
b3:1d:5c:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBZf96W35Nd1TYc/iMhNDVreawmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4
NzdGNjM0NjAeFw0yNjA3MjQxMTM4NDhaFw0yNjA3MjUxNDM3NDhaMDMxMTAvBgNV
BAMTKEI0ODhDMTgxRkVEMEM1NzdEM0Q5RDFEQUVERDA1OEY1Q0Q5MjQ0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcw3UK3cUOH5YHbq4agnG//25
B9KHwh9sEiigExlxaHsh3mewMIoGaPWjraXJyU95O6Pu+KfI0Vcdw9OZHbnl4g7r
uSqTtjgyJpaReOc/ct6kuxh3m29tAlIqMAd1SF2vQuAFr6x5oJOvpuSmeI3r4Awk
Gl9lIj1IGBpQ2LPe4o0Z3jx4pu3aVJ1TEiCE42gzBmU4VunUb3isjJFDtKTaeWOO
SQIod1t/Bggcso8I4hb1/JrFHluxDZoxlg57wCcgDZt5ibisqczlvn0d3CxXzc41
iL5+VU3EhTeKGGCYPWYbIqFiHGao5hfnHbNAW1a25eUSdTzHQws+ydfx1pbpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtIjBgf7QxXfT2dHa7dBY9c2SRH4wHwYDVR0j
BBgwFoAUEiT2f/44vOo4fi3z5mLW9od/Y0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWQxNjE5Y2ItYzAxYy00NjE0LTg2M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZG
RTM4QkNFQTM4N0UyREYzRTY2MkQ2RjY4NzdGNjM0Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMjI0RjY3RkZFMzhCQ0VBMzg3RTJERjNFNjYyRDZGNjg3N0Y2
MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2
M2UtY2UyODhkN2JhNzY1LzAvMTIyNEY2N0ZGRTM4QkNFQTM4N0UyREYzRTY2MkQ2
RjY4NzdGNjM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK1cLBJifE7LihhZFPTdNHL1WeEr0F3opITf
GDI6PyxmwyPvQ8SMTeNGAWB2XMZRHm126ySNckyEpmtvPtaHXtbBLBzP7240ILh5
CRTXuG0OrTn+KvUmnxHXZk/HAEDczliQm6CmhSOTCFqT362gqHRk095i8cGfATNZ
hqLIGtnd40loJK2N1N47C1paEHqISUJ0aRyXU/K3hUBLplmMCq/qW7zpTZeZZ91D
d7hzYII+JjLQhXMSFDI0oVujGqkdsEA4EDNUVIyDIg8uqIhNyFWuxrIuBrnyGd6i
Zp8sCmCewZvOyRBwzr/EO8Rch5Droro0rzzTtwRBPYUv0LMdXC0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:22 2026 by rpki-client