
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
File: 09235F29310425E354121090269C1EB6089EB0B2.mft (raw, json)
Hash identifier: 9noIyqf6e19TrZOQpihg6dJrSBYNOx42jAa5NGr5/NE=
Subject key identifier: F5:8E:9B:F0:90:B3:E0:E3:18:C3:69:64:46:17:54:3D:08:9E:E0:02
Authority key identifier: 09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2
Certificate issuer: /CN=09235F29310425E354121090269C1EB6089EB0B2
Certificate serial: 50347466EBA42CE237C52198C9496260E66227D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 19:28:57 +0000
Manifest this update: Thu 23 Jul 2026 19:23:57 +0000
Manifest next update: Fri 24 Jul 2026 20:57:57 +0000
Files and hashes: 1: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: 2INetKIyYbbWVRJzq04gwfCzimGA1viA/2dx8yz7FAA=)
2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: i3i9YlBMluNIH3LVCAsoGfBIszmnZLknI4mpG8oNRww=)
3: 09235F29310425E354121090269C1EB6089EB0B2.crl (hash: VSThbWWs51hQfG/Y7DPH70uICI+P7LslU0//UoHQpeQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl
rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:34:74:66:eb:a4:2c:e2:37:c5:21:98:c9:49:62:60:e6:62:27:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09235F29310425E354121090269C1EB6089EB0B2
Validity
Not Before: Jul 23 19:23:57 2026 GMT
Not After : Jul 24 20:57:57 2026 GMT
Subject: CN=F58E9BF090B3E0E318C369644617543D089EE002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:d0:64:f6:a3:0b:b3:cb:3c:45:ab:75:8d:
20:8e:56:e7:63:35:d0:56:aa:0d:05:58:78:d3:e1:
fc:ed:5f:f1:81:4b:b8:5b:3f:a5:04:3f:b5:5d:3c:
76:ca:8d:4c:06:59:2c:59:32:71:81:94:a1:c0:6d:
23:ab:89:7d:41:fd:9d:9f:87:da:a6:4a:1b:ff:51:
d8:fe:4c:07:df:b8:f9:4b:b7:88:b4:32:0d:52:a1:
15:bb:56:04:5a:71:0e:f3:f9:51:e3:16:cd:e8:46:
a0:b1:e4:82:04:13:9d:1c:c0:3b:5c:24:42:07:9e:
8a:cc:4f:fd:e9:90:a5:56:26:42:49:fc:0d:27:4e:
97:ac:48:7a:47:f4:21:d9:e2:44:79:2f:ae:ae:bb:
00:f1:75:ca:52:a4:3a:c6:1a:b0:45:0d:2b:9e:15:
93:f9:ab:d3:9a:03:be:89:4e:29:f7:8f:8c:d9:63:
9c:8c:b8:1b:35:7f:89:01:a6:b7:28:56:42:a3:23:
60:d6:a6:2f:3b:f0:29:eb:f6:3f:97:be:ca:31:6b:
7d:ff:34:e0:44:52:87:35:bd:35:c6:64:e8:42:7d:
d0:2e:d0:31:eb:f5:a9:9b:cc:6a:44:c6:f6:d5:ed:
c5:5a:32:af:74:d4:a7:2a:c6:69:f4:37:70:be:da:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:9B:F0:90:B3:E0:E3:18:C3:69:64:46:17:54:3D:08:9E:E0:02
X509v3 Authority Key Identifier:
keyid:09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:b9:a8:4b:70:82:a8:7b:04:9d:ad:e0:b2:a6:b9:3d:7d:
bb:c3:ab:e4:94:6c:6e:b8:33:ea:17:2a:15:d6:b0:e0:22:b6:
ef:07:d3:c3:ee:07:4a:fd:46:a1:64:90:fa:d7:2f:60:a1:74:
ee:0c:c2:53:43:7d:cd:e9:e9:a5:e3:30:f9:0e:a6:d3:9c:53:
63:42:82:0f:3e:f9:a8:63:80:2e:e4:a3:9e:2e:e1:fc:8a:43:
68:f9:4e:aa:14:df:98:a0:70:fb:87:bf:9a:19:6a:f6:a7:56:
27:24:61:e6:d7:aa:4a:5d:01:80:34:d5:c9:75:1f:27:36:8d:
05:9f:db:28:2d:45:d4:10:a1:49:54:55:cf:8a:e1:91:19:28:
c8:86:dd:5c:46:67:f7:49:14:24:8d:8f:c6:d0:be:46:b8:e1:
be:0a:9e:1d:dd:55:7c:98:c4:9a:d7:c5:59:7d:4a:c0:2e:e5:
73:96:d0:ba:27:5a:1a:16:35:27:8e:10:08:9e:e8:bb:a0:3d:
f2:91:8a:14:bd:de:e2:f6:25:7b:d3:ca:52:e4:96:f0:17:a7:
19:17:3e:a7:ea:d2:ff:4c:4d:53:e0:52:e4:c0:0f:8c:aa:a8:
d6:7b:dd:e6:73:c3:ee:ab:d6:56:00:d4:09:03:e9:02:d3:3d:
a1:b6:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:12 2026 by rpki-client