
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
File: 832F3BA2D4A4666720A04785F7440BA744E9066D.mft (raw, json)
Hash identifier: pIOxG/f/BDYzt0GnDqMRjDg2257UDs7vZlMP3t0eCos=
Subject key identifier: 30:82:73:E3:4B:F0:D7:25:43:95:99:0F:74:A2:CA:93:42:43:51:02
Authority key identifier: 83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D
Certificate issuer: /CN=832F3BA2D4A4666720A04785F7440BA744E9066D
Certificate serial: 5C8400ABB83184D198DF494BAA932DB5D582194F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:43:00 +0000
Manifest this update: Thu 23 Jul 2026 18:38:00 +0000
Manifest next update: Fri 24 Jul 2026 19:02:00 +0000
Files and hashes: 1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: rj50c78OZE7EyiE8pv//nMMfuevJo1Qwb9zz5bieBoU=)
2: 832F3BA2D4A4666720A04785F7440BA744E9066D.crl (hash: irVxA/h7A+YMcG6w4RYV1oKGEjXko3h9AUPKf6oJEiI=)
3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: LSsyk3LQXyf/xjsLYb7f1ejhi/raliKL2ndVhfqssnE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl
rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:84:00:ab:b8:31:84:d1:98:df:49:4b:aa:93:2d:b5:d5:82:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832F3BA2D4A4666720A04785F7440BA744E9066D
Validity
Not Before: Jul 23 18:38:00 2026 GMT
Not After : Jul 24 19:02:00 2026 GMT
Subject: CN=308273E34BF0D7254395990F74A2CA9342435102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:16:72:6c:9a:8f:70:12:ef:2a:11:8c:9b:
5d:15:c5:ed:2a:aa:44:0b:8b:a8:cb:17:38:d1:dd:
cd:22:14:e2:89:62:8a:14:c1:cc:e4:91:b8:53:46:
39:57:f1:c1:9b:b7:a2:a1:2a:f7:3a:8d:29:a9:0c:
68:50:95:5e:4d:58:4e:82:7b:b2:85:da:a1:f6:ec:
ff:78:d5:f3:84:1a:31:62:99:df:ba:70:10:c0:96:
a1:b1:32:1b:2c:03:d0:7d:32:2f:72:f2:3e:76:cd:
0a:b1:d3:a6:49:16:d2:62:ef:b6:43:54:59:6e:22:
8b:6f:bf:57:63:aa:bf:b0:01:ef:9a:36:19:2b:c2:
1c:00:74:4d:6f:fc:22:5e:b5:ef:11:43:d8:4e:5e:
f0:bd:4b:d9:4f:71:51:30:22:64:12:71:59:37:a3:
e9:76:e8:52:56:33:1e:db:42:14:2d:4f:15:18:93:
a4:7f:1b:0a:d8:07:dc:6a:51:aa:44:3f:09:01:30:
d3:54:71:ee:54:ae:59:75:e1:c7:9d:a7:5a:d8:35:
6e:85:d0:d0:22:45:91:d8:28:2a:83:40:a9:e7:ee:
d0:f5:8c:57:aa:1d:2f:30:0f:45:9d:3b:84:01:18:
b9:c7:fc:a0:66:ea:8c:4e:4c:9d:0b:62:b3:ac:28:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:73:E3:4B:F0:D7:25:43:95:99:0F:74:A2:CA:93:42:43:51:02
X509v3 Authority Key Identifier:
keyid:83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5b:85:08:07:9b:09:db:ca:21:00:d1:a7:41:7e:4b:a8:2e:
d8:93:b3:43:df:6c:0d:33:c2:f1:97:0f:63:d3:4e:5b:03:99:
04:22:1b:b1:51:85:87:85:6c:bb:02:8d:ad:24:b2:2a:a3:47:
c5:4d:87:a1:d6:87:2b:f7:e6:1c:08:89:fb:b3:69:dd:b3:c4:
3b:0b:88:86:05:b0:e5:03:26:38:b8:8d:9d:54:36:eb:51:68:
eb:ad:bc:ff:ee:7d:60:dd:3c:0e:24:4f:fb:c9:c4:b2:16:a0:
e6:c8:d5:b2:51:8a:83:29:0b:6d:0b:3d:a7:44:5e:b2:2b:22:
a3:e7:00:54:45:ea:36:50:c2:ad:5b:81:20:3e:59:c9:b2:2c:
94:99:ed:46:4d:df:d1:a2:20:8c:e5:b1:c5:cc:51:20:8a:f7:
18:0b:b6:01:29:37:d2:fe:59:d4:f3:40:f7:a5:9e:fa:67:a5:
52:58:bc:fa:68:e9:18:5a:4f:31:93:61:ec:ae:39:f0:a3:c9:
b6:d7:08:b3:ef:3c:b5:b1:e6:b0:89:65:e2:7b:be:0f:c4:d5:
3f:cc:f7:0f:2f:bb:ab:8f:4e:d2:87:47:74:01:30:3c:74:9e:
3a:aa:12:67:cc:0c:11:d6:31:07:b5:b9:84:2b:7f:3c:74:92:
0c:2b:26:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:34 2026 by rpki-client