
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json)
Hash identifier: oTuTzhPcjAuAQd3JJYfeTnEu91Lc9Ax0S/b38Gc+oIg=
Subject key identifier: 01:3C:FB:30:84:E1:F6:C0:D3:0D:C8:BA:D2:32:7F:F8:F3:06:57:FE
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial: 427932C5D17A35C4683B585548A07A8FA7ED4837
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 08:30:13 +0000
Manifest this update: Thu 23 Jul 2026 08:25:13 +0000
Manifest next update: Fri 24 Jul 2026 12:04:13 +0000
Files and hashes: 1: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: PpAXZaJ0zZpixkK1UEXu/0fJveThCYTZCttfwBNWU24=)
2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:79:32:c5:d1:7a:35:c4:68:3b:58:55:48:a0:7a:8f:a7:ed:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Validity
Not Before: Jul 23 08:25:13 2026 GMT
Not After : Jul 24 12:04:13 2026 GMT
Subject: CN=013CFB3084E1F6C0D30DC8BAD2327FF8F30657FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:76:62:2a:33:5e:b3:f6:5d:b3:93:bf:3e:
b7:fa:85:57:ed:1e:67:dd:81:62:3a:1a:72:72:6b:
80:ec:c5:51:d9:57:c6:08:d9:2a:f4:f6:89:dd:a0:
c2:61:f3:43:9e:ca:bd:32:85:70:00:e8:33:1a:c9:
d1:28:c2:fc:55:6d:81:8d:eb:21:87:9a:aa:cd:a0:
71:66:1f:54:3d:a5:3c:df:91:32:45:dd:0b:9e:17:
c7:57:03:ad:c3:60:9e:f5:f7:99:d1:b9:fd:4b:7c:
87:55:59:3c:6c:90:70:ea:93:1b:2e:78:28:cb:17:
30:e9:64:bc:62:71:95:62:3a:6e:10:e4:c8:f2:81:
91:91:26:f8:b7:6a:0a:dc:d1:df:44:56:e0:12:bf:
82:4e:8e:43:d3:30:78:03:06:b7:a6:5f:ac:c4:7a:
99:f3:dc:02:b3:be:cf:27:82:72:36:f9:94:2c:5a:
2a:07:9b:33:33:d2:98:05:dd:b4:f8:6a:f1:e7:5a:
73:68:c0:fa:86:f7:e7:14:f3:46:4e:0f:25:6b:8b:
37:6b:a8:0c:3f:fb:7c:f0:7c:bf:05:77:88:38:ae:
10:02:bc:cc:63:74:12:87:ea:85:22:84:4b:a2:c6:
58:1c:79:bb:90:c8:0f:2a:44:ff:68:90:41:c1:89:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:FB:30:84:E1:F6:C0:D3:0D:C8:BA:D2:32:7F:F8:F3:06:57:FE
X509v3 Authority Key Identifier:
keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:11:70:e8:40:7d:32:49:54:8a:5b:b5:1f:25:34:22:3b:
99:0d:22:3a:95:b1:61:1b:74:4f:69:90:a3:36:71:a1:94:94:
b3:06:8e:5d:a9:75:de:fa:e9:e1:1c:3c:cb:97:50:fa:57:b9:
36:a3:1b:81:65:cb:e5:bf:cd:a6:c3:8a:3b:9f:34:b5:42:ab:
b5:f4:5c:3e:0e:dc:c0:ff:d6:5c:f7:ba:b6:46:02:97:04:b5:
0e:53:e2:db:26:77:97:61:1f:52:23:4f:b8:6b:79:c7:c9:65:
a4:16:3e:e3:57:39:12:80:15:58:40:09:f8:fa:aa:b5:06:a7:
54:d1:d1:03:cc:0c:18:bb:c2:55:a1:b9:be:bc:7d:51:28:dc:
f2:e0:f1:82:de:39:28:24:bb:db:5b:2c:19:c4:37:7e:b0:39:
cb:7e:6e:3f:7a:43:1f:56:40:ac:34:31:01:0c:df:70:bc:1e:
5e:2b:d6:ff:aa:16:b9:d5:07:09:bf:fb:42:6b:89:30:7f:64:
ee:d6:66:c7:c9:b4:6c:de:b4:d0:f7:d2:8a:92:c8:be:b2:6f:
3f:ea:e3:70:2b:35:80:5e:ac:0e:f9:f6:c7:57:8c:e0:22:b2:
8f:55:e1:40:0a:e4:f1:19:db:3e:bc:08:6b:9f:b6:fd:ac:89:
59:29:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:53 2026 by rpki-client