
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft
File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json)
Hash identifier: emJ6fAStJ4i3KoTd6WEQaG2eu/IxexqbGJdJM1efzZs=
Subject key identifier: 90:85:25:F4:B4:EE:AE:5B:6F:58:63:7F:86:52:43:F2:F3:32:E3:F4
Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC
Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC
Certificate serial: 2384227952050A480963217F696CB51F4C33206C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 09:41:48 +0000
Manifest this update: Thu 23 Jul 2026 09:36:48 +0000
Manifest next update: Fri 24 Jul 2026 10:03:48 +0000
Files and hashes: 1: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=)
2: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: 8vEFmTwBPPplvqbMdKMqLhDaHBw0120V0oKO2lF5ojY=)
3: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl
rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:84:22:79:52:05:0a:48:09:63:21:7f:69:6c:b5:1f:4c:33:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC
Validity
Not Before: Jul 23 09:36:48 2026 GMT
Not After : Jul 24 10:03:48 2026 GMT
Subject: CN=908525F4B4EEAE5B6F58637F865243F2F332E3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:0b:50:e0:e7:68:51:92:91:44:15:a2:2e:
e3:9c:a5:20:37:9a:f7:2f:6b:11:52:24:89:e4:44:
e6:f7:57:ef:a8:c4:9e:c4:b7:c0:22:3f:44:50:90:
2f:b7:a7:e7:aa:8a:f2:03:24:8f:ff:02:d3:ee:13:
09:1a:cd:3f:4f:67:9b:45:9e:3b:38:5b:30:8a:a0:
c2:a8:eb:7b:d6:13:f0:3c:20:dc:81:f5:33:e7:a7:
ad:c2:8a:7c:04:fb:f9:8d:cd:68:bd:ae:ca:09:2b:
75:d1:c2:f2:b2:4e:3a:dc:23:3c:d1:52:0d:fd:66:
e9:89:7e:f6:cf:c8:08:69:74:fa:a7:74:47:f9:56:
ce:ab:40:87:8f:38:54:c3:f4:c1:16:08:fd:2f:32:
11:70:68:f9:58:7c:05:f1:bc:2b:5c:1e:ce:c5:69:
1d:7d:e6:9b:d1:41:24:31:84:0f:21:a9:1b:f9:c9:
6b:27:e1:7b:72:02:e8:7c:3d:14:1d:dc:fb:d7:e7:
00:e0:2d:71:58:78:d2:7c:a0:68:4a:74:eb:f9:18:
e5:78:31:c4:80:4a:f9:2a:46:c1:9b:81:0e:6d:85:
8e:f3:67:79:c1:5d:a7:b1:0f:e7:46:73:9b:3d:ae:
3a:ae:ab:0d:be:9d:99:21:00:3a:15:1d:e1:51:4d:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:25:F4:B4:EE:AE:5B:6F:58:63:7F:86:52:43:F2:F3:32:E3:F4
X509v3 Authority Key Identifier:
keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4d:8b:f4:99:5b:0d:b8:68:8a:b1:b1:22:af:5e:eb:7b:99:
34:23:b5:67:8a:38:10:85:70:b0:62:05:2d:e6:03:90:2b:6f:
24:32:b3:8d:6c:72:41:02:a0:fa:4d:df:5f:c7:0f:a9:3e:d6:
fc:19:b6:e7:e8:e1:82:5a:4d:19:c3:5c:6d:f7:82:d2:5a:bd:
37:63:ce:09:17:77:ba:84:52:7c:03:35:a8:a5:e9:0e:35:d0:
c7:df:3a:85:02:5d:67:ae:25:37:58:99:f6:75:53:0a:d8:59:
35:33:71:00:5c:c2:b9:ba:12:96:cb:29:51:91:8d:61:c1:70:
b5:81:37:84:40:09:35:91:87:22:67:fc:fd:69:0f:4a:c2:00:
80:d1:0a:89:8c:13:ed:1c:c7:f9:94:1e:aa:ea:fe:c4:e1:18:
af:c4:ca:bc:84:40:e9:1f:e2:95:6e:f5:ca:ef:d2:b0:a7:70:
cf:4a:bf:ae:28:16:83:05:52:88:4b:f7:b3:a7:a6:87:92:d6:
42:b5:43:75:9a:9c:b7:98:a8:87:ca:c8:62:f4:fc:79:d7:a7:
35:fa:76:d8:d5:dd:b8:7e:5c:53:61:13:05:94:78:2a:dc:57:
7f:6e:b4:73:83:01:f6:aa:48:5f:9f:a2:99:d0:81:8a:6a:b9:
89:ec:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:16 2026 by rpki-client