
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
File: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft (raw, json)
Hash identifier: cZz4z4sTMiotqC1Eu8I5frpnfbtUSPrwUB+rym4RYnA=
Subject key identifier: 29:5C:35:BD:48:BA:6A:1E:2C:C3:1B:F0:CE:07:98:C7:C5:FD:10:00
Authority key identifier: F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
Certificate issuer: /CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Certificate serial: 57CC6F6B6359B3257C26651634B741DD62D167BD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:23:43 +0000
Manifest this update: Tue 12 May 2026 18:18:43 +0000
Manifest next update: Wed 13 May 2026 21:50:43 +0000
Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: eW2jjvdvI19U+UGpZwOooilR+jDpj7dTH79DXIcMLCo=)
2: F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl (hash: ryobWXS+gNtFM/xXJHqjoSgnN4PKR6KsecqhyU0e6Yk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:cc:6f:6b:63:59:b3:25:7c:26:65:16:34:b7:41:dd:62:d1:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2404BD69B9873B31DD80EA1E3F54A8C42D71F17
Validity
Not Before: May 12 18:18:43 2026 GMT
Not After : May 13 21:50:43 2026 GMT
Subject: CN=295C35BD48BA6A1E2CC31BF0CE0798C7C5FD1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:80:ea:e3:06:cf:77:5f:4f:91:03:27:7e:
d9:fb:8d:1c:d4:2d:67:47:3a:12:2d:87:69:cd:68:
57:65:44:01:4a:cb:cf:f6:0c:ce:30:06:c5:71:dc:
ab:f6:4b:a2:39:8c:15:1b:5c:5f:8d:09:a4:6c:33:
34:2c:50:c5:0b:20:06:17:9a:21:fb:a6:89:ba:85:
c5:dc:d5:92:b2:3f:69:94:62:8b:e2:c9:2f:07:af:
a7:ff:a0:d4:68:09:d2:fc:d6:e7:fc:59:e5:d8:fd:
6c:c2:0d:ef:d0:e9:88:7b:91:de:09:24:ec:e5:a5:
b8:6d:35:cc:aa:a9:2c:6b:53:7b:54:62:6d:60:85:
da:02:0e:3d:92:3b:d7:02:45:64:38:50:e7:3f:8e:
3d:e9:c0:5f:44:86:04:3a:8b:b2:f3:5b:c0:7a:18:
be:c0:1f:fc:25:f3:19:28:35:da:65:45:23:4e:0d:
d3:1e:14:ff:2f:12:06:bc:d0:37:6a:53:88:43:13:
67:be:8c:74:91:d9:49:fd:27:ec:68:34:33:41:79:
d2:1e:cc:eb:f5:dd:57:55:b0:72:8a:6c:f9:d6:6f:
c4:32:90:fd:a3:6d:0d:7f:d8:db:37:53:2f:9b:99:
9e:31:6c:71:86:58:bf:6c:c2:bb:bb:47:d6:bb:b1:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:35:BD:48:BA:6A:1E:2C:C3:1B:F0:CE:07:98:C7:C5:FD:10:00
X509v3 Authority Key Identifier:
keyid:F2:40:4B:D6:9B:98:73:B3:1D:D8:0E:A1:E3:F5:4A:8C:42:D7:1F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/F2404BD69B9873B31DD80EA1E3F54A8C42D71F17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e6:07:28:76:6e:af:0b:91:85:01:f6:22:61:21:59:84:08:
63:31:2b:0e:d9:ab:fd:b7:90:3f:36:09:8c:9d:3e:30:83:d4:
94:8d:41:64:b2:58:f7:a5:3f:d4:58:a5:90:17:dc:9a:21:68:
d4:ed:2a:61:08:99:89:ce:73:4d:9d:6a:39:13:6b:3a:7e:d7:
88:0f:d5:73:d2:3a:21:2c:a4:80:ab:25:34:7c:0e:dd:d6:32:
94:73:e4:74:5f:d2:95:32:6b:10:db:39:dc:b9:1e:62:10:00:
9f:d1:a8:38:27:77:e1:6a:ca:37:21:59:1e:fe:29:44:39:cc:
b2:bb:27:aa:0b:df:73:8e:48:ca:bd:43:28:2f:6e:fc:1f:6b:
bc:35:8e:93:ec:76:ef:30:5e:f7:f2:20:56:a2:a9:10:9c:08:
16:44:f5:bd:68:38:9c:35:9e:2d:d0:bf:3b:f8:ab:c1:73:c6:
cd:4d:61:c8:6f:c1:73:d1:cb:57:bf:88:31:36:fe:2b:80:09:
fc:d0:e9:df:64:bd:3b:37:db:38:b1:48:87:28:73:56:6b:95:
34:df:be:06:1a:ff:56:6f:d4:cb:2e:02:58:6f:86:9c:a7:8f:
88:72:96:2d:e6:e4:03:a1:25:3e:50:74:d0:7d:9b:c8:0a:2f:
67:b0:6c:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV8xva2NZsyV8JmUWNLdB3WLRZ70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0
MkQ3MUYxNzAeFw0yNjA1MTIxODE4NDNaFw0yNjA1MTMyMTUwNDNaMDMxMTAvBgNV
BAMTKDI5NUMzNUJENDhCQTZBMUUyQ0MzMUJGMENFMDc5OEM3QzVGRDEwMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q4Dq4wbPd19PkQMnftn7jRzU
LWdHOhIth2nNaFdlRAFKy8/2DM4wBsVx3Kv2S6I5jBUbXF+NCaRsMzQsUMULIAYX
miH7pom6hcXc1ZKyP2mUYoviyS8Hr6f/oNRoCdL81uf8WeXY/WzCDe/Q6Yh7kd4J
JOzlpbhtNcyqqSxrU3tUYm1ghdoCDj2SO9cCRWQ4UOc/jj3pwF9EhgQ6i7LzW8B6
GL7AH/wl8xkoNdplRSNODdMeFP8vEga80DdqU4hDE2e+jHSR2Un9J+xoNDNBedIe
zOv13VdVsHKKbPnWb8QykP2jbQ1/2Ns3Uy+bmZ4xbHGGWL9swru7R9a7sZ9PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKVw1vUi6ah4swxvwzgeYx8X9EAAwHwYDVR0j
BBgwFoAU8kBL1puYc7Md2A6h4/VKjELXHxcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5
Qjk4NzNCMzFERDgwRUExRTNGNTRBOEM0MkQ3MUYxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjQwNEJENjlCOTg3M0IzMUREODBFQTFFM0Y1NEE4QzQyRDcx
RjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx
OTAtNTAwZTc1NDUyMGRlLzEvRjI0MDRCRDY5Qjk4NzNCMzFERDgwRUExRTNGNTRB
OEM0MkQ3MUYxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHfmByh2bq8LkYUB9iJhIVmECGMxKw7Zq/23
kD82CYydPjCD1JSNQWSyWPelP9RYpZAX3JohaNTtKmEImYnOc02dajkTazp+14gP
1XPSOiEspICrJTR8Dt3WMpRz5HRf0pUyaxDbOdy5HmIQAJ/RqDgnd+FqyjchWR7+
KUQ5zLK7J6oL33OOSMq9Qygvbvwfa7w1jpPsdu8wXvfyIFaiqRCcCBZE9b1oOJw1
ni3Qvzv4q8Fzxs1NYchvwXPRy1e/iDE2/iuACfzQ6d9kvTs32zixSIcoc1ZrlTTf
vgYa/1Zv1MsuAlhvhpynj4hyli3m5AOhJT5QdNB9m8gKL2ewbCs=
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:20 2026 by rpki-client