
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json)
Hash identifier: TK4zvritwvxVqWO/T3M+WEu2sp8VqF7qZDYGFhbCkYo=
Subject key identifier: F8:95:8B:2C:E4:1D:45:EF:F7:79:E9:54:BB:4F:27:75:F1:1C:84:65
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial: 3C2ED4C578CED9AAE5F87335E95CF74F88CF94A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:53:06 +0000
Manifest this update: Tue 12 May 2026 20:48:06 +0000
Manifest next update: Wed 13 May 2026 23:47:06 +0000
Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=)
2: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: K/NIfFPmW4G9LuQXC6tHzy7ieCATcpkjKZC8gi0n/kc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2e:d4:c5:78:ce:d9:aa:e5:f8:73:35:e9:5c:f7:4f:88:cf:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Validity
Not Before: May 12 20:48:06 2026 GMT
Not After : May 13 23:47:06 2026 GMT
Subject: CN=F8958B2CE41D45EFF779E954BB4F2775F11C8465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:46:99:05:95:35:12:6c:ff:e8:95:dd:ac:
dc:83:22:fa:ad:b4:99:4a:81:c3:d5:4f:6c:53:f7:
6f:bc:54:1e:8f:dc:2a:16:0a:65:52:99:32:e0:6f:
4f:0b:5a:8b:89:11:b2:d7:07:d8:16:cd:06:5b:60:
f4:d4:d7:50:d4:25:e5:39:06:6d:3a:cc:fd:81:7f:
08:10:b1:41:fa:d2:dd:8e:7e:15:87:c5:d0:b5:36:
ab:91:e9:d2:0d:cf:9b:92:6c:fa:ed:b8:11:22:cc:
78:cc:38:16:d2:44:19:41:91:49:cf:1c:a3:0c:4e:
cc:37:0d:97:e9:9d:99:dd:67:d5:bf:eb:c0:b1:2f:
44:a7:ff:25:6f:22:35:e1:e7:34:dd:75:36:ee:80:
8d:44:40:b4:84:82:4d:70:78:eb:b2:49:88:f0:04:
b7:d0:5c:1a:df:d6:58:bf:d1:4e:6b:0e:53:34:f3:
f4:a7:52:9a:02:a6:0d:06:38:88:fe:cc:2d:bc:41:
64:b8:b0:38:21:3d:d0:55:7b:fb:ad:eb:b5:22:45:
f5:01:07:be:7e:97:ad:8c:01:cf:ae:0c:89:ad:fe:
9d:fa:c2:7e:50:0e:c7:11:ab:2d:80:dd:13:6b:be:
c3:c5:32:0c:8f:15:1b:c4:36:6a:87:49:c2:28:4b:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:8B:2C:E4:1D:45:EF:F7:79:E9:54:BB:4F:27:75:F1:1C:84:65
X509v3 Authority Key Identifier:
keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:23:8a:5f:e8:a2:c1:01:e9:90:7d:e6:49:13:8d:6c:26:d5:
84:57:f3:ed:7e:bc:90:a0:1e:74:fe:6a:cb:c3:87:86:1f:b3:
7e:54:77:00:8d:db:66:a8:b9:4a:0e:54:4c:e4:7f:35:37:1c:
03:ee:ef:27:01:cd:ef:b9:cf:2e:aa:af:90:f5:de:3e:cc:24:
d6:34:7a:07:8a:37:70:4c:2b:f6:74:74:05:3a:40:03:e3:a4:
63:e0:64:f6:8e:1d:93:02:3f:e0:da:8d:0d:f9:d8:90:ae:8f:
a1:e0:e4:f2:f4:dd:4d:45:1f:86:02:40:5f:cf:33:18:3a:98:
f7:78:2f:7a:9e:b9:d7:d6:c6:99:41:c5:4f:3a:2e:d5:5e:8d:
bc:31:ac:b3:83:bc:0e:58:d1:c8:83:83:99:a3:02:e1:87:5f:
7b:a3:c6:99:88:3f:29:a5:52:63:ee:e2:32:cb:91:82:c5:db:
1c:3c:31:4b:77:ec:5d:22:e6:66:16:f2:6f:82:df:94:0f:7e:
2f:a4:a9:25:d8:4f:20:bc:03:82:f5:33:0f:7e:d3:e4:f2:d9:
85:b5:bc:86:c4:57:a5:91:f4:f9:1a:13:86:6f:81:61:02:e4:
4a:1a:1a:44:02:8d:f2:cf:a8:fa:bf:1f:73:ac:1f:2e:61:cd:
52:9c:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:05 2026 by rpki-client