
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
File: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft (raw, json)
Hash identifier: 9WYuQ7VRrDWp4FkPi7hBdigwrmtbdNkPP14HTLCff38=
Subject key identifier: 56:EA:27:E0:8B:45:7A:86:5C:5D:35:05:75:DC:26:D7:2C:9E:4D:88
Authority key identifier: 1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
Certificate issuer: /CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Certificate serial: 62B6972CA9DC75CB4F2EF8684599E8B51D391466
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:48:03 +0000
Manifest this update: Thu 23 Jul 2026 18:43:03 +0000
Manifest next update: Fri 24 Jul 2026 21:11:03 +0000
Files and hashes: 1: 1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl (hash: ObrFuZy3N0sZ9H+hqmhGbptRWDz0o/7XmDiGhJiV5EA=)
2: 3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (hash: tpH2JM9YTbmOossLdQW6SZYFmNHRQYnoyuwrrx1s/G4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b6:97:2c:a9:dc:75:cb:4f:2e:f8:68:45:99:e8:b5:1d:39:14:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Validity
Not Before: Jul 23 18:43:03 2026 GMT
Not After : Jul 24 21:11:03 2026 GMT
Subject: CN=56EA27E08B457A865C5D350575DC26D72C9E4D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:06:9f:ae:71:8a:9e:fe:82:8e:aa:45:44:
0f:0f:46:65:0a:2c:d2:89:fa:82:94:ed:0f:52:87:
76:b0:a0:82:82:5c:4b:5f:cd:a4:ce:65:ef:6b:97:
3e:e3:26:28:cc:ea:8b:d2:4d:69:87:f8:3e:57:46:
1b:c4:4a:4a:ae:ca:87:51:4a:cf:fa:b8:e2:71:ea:
bf:5d:e0:10:59:e9:0b:8c:7d:93:ba:3f:53:53:13:
86:23:d5:ae:86:03:6a:3f:f6:38:33:bc:b7:01:9f:
6c:02:6b:b4:3f:92:b5:ac:af:d6:69:74:2d:23:0f:
e0:98:51:e4:23:5d:35:0f:44:f0:d3:44:1d:32:12:
27:3c:6e:67:29:c4:8d:aa:4b:6b:07:2c:d0:04:50:
69:db:75:4e:7f:ca:9d:25:b6:a3:23:30:ea:26:90:
a4:00:e0:27:49:26:ff:b9:25:ac:b2:fe:38:6a:e5:
65:32:f0:cb:0e:d9:57:26:48:ef:fd:d5:48:f2:45:
b2:fe:67:f6:af:48:18:a1:bc:ed:e4:f1:04:d6:d1:
29:7b:45:1d:8a:cf:1c:1b:85:79:d8:e5:2c:9d:71:
f7:57:bf:00:de:d5:e2:ce:2a:33:83:32:3f:c5:20:
4e:ad:92:85:c4:2c:45:4c:4b:bb:d9:81:55:cf:74:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:27:E0:8B:45:7A:86:5C:5D:35:05:75:DC:26:D7:2C:9E:4D:88
X509v3 Authority Key Identifier:
keyid:1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f7:f0:b8:cb:0b:1f:75:94:83:ed:c8:fd:e9:94:13:10:d7:
43:5b:55:d6:0e:09:e5:7e:d2:b5:6e:db:d8:be:0a:7a:95:a6:
d8:a8:1e:c6:6c:a2:c4:67:89:2a:12:ad:fc:f4:f6:d8:f1:3b:
48:f5:2c:ef:99:06:5d:2b:8e:a5:8e:52:1f:54:0a:3c:6f:78:
6e:68:df:eb:e7:86:4b:e7:77:a7:47:4f:dd:b2:22:b3:41:ea:
b4:5a:2e:92:64:b4:62:27:34:df:7c:34:59:39:be:39:e9:a0:
7c:3b:d5:94:03:47:96:fa:72:a2:cf:d6:05:65:a7:b9:28:2c:
30:b0:e8:92:c7:a0:6a:1e:7d:e8:0c:0c:6f:ca:04:ac:1f:44:
af:8a:26:6b:82:4b:d4:0e:9c:ca:1e:a4:c0:c8:49:64:ce:a5:
1d:80:82:f7:15:8d:bd:96:21:c4:7d:b7:69:b5:96:14:b0:9c:
1f:87:52:b2:8c:e3:cc:88:23:a2:50:ac:ce:c0:d3:92:ff:c6:
3b:64:66:34:5c:e3:42:bc:f7:25:20:ee:cc:d9:43:05:f2:ae:
6c:9d:71:ce:25:dc:87:a5:76:4a:98:97:cc:37:61:b4:24:60:
fd:8b:6e:d2:26:24:fd:2b:8e:f8:49:be:f5:ff:7f:c8:ea:f7:
9b:38:31:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYraXLKncdctPLvhoRZnotR05FGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYyQTI1MjY2RjBGRjNBQjVFMTA3N0JBMjBBQzNCMTNB
QkE2QTg5QzAeFw0yNjA3MjMxODQzMDNaFw0yNjA3MjQyMTExMDNaMDMxMTAvBgNV
BAMTKDU2RUEyN0UwOEI0NTdBODY1QzVEMzUwNTc1REMyNkQ3MkM5RTREODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTcgafrnGKnv6CjqpFRA8PRmUK
LNKJ+oKU7Q9Sh3awoIKCXEtfzaTOZe9rlz7jJijM6ovSTWmH+D5XRhvESkquyodR
Ss/6uOJx6r9d4BBZ6QuMfZO6P1NTE4Yj1a6GA2o/9jgzvLcBn2wCa7Q/krWsr9Zp
dC0jD+CYUeQjXTUPRPDTRB0yEic8bmcpxI2qS2sHLNAEUGnbdU5/yp0ltqMjMOom
kKQA4CdJJv+5Jayy/jhq5WUy8MsO2VcmSO/91UjyRbL+Z/avSBihvO3k8QTW0Sl7
RR2KzxwbhXnY5SydcfdXvwDe1eLOKjODMj/FIE6tkoXELEVMS7vZgVXPdA4BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVuon4ItFeoZcXTUFddwm1yyeTYgwHwYDVR0j
BBgwFoAUHyolJm8P86teEHe6IKw7E6umqJwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjkyMjU0YzMtMjY2MS00NjFmLTkzMjQtMDcwNzA0NzBjYzZkLzAvMUYyQTI1MjY2
RjBGRjNBQjVFMTA3N0JBMjBBQzNCMTNBQkE2QTg5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xRjJBMjUyNjZGMEZGM0FCNUUxMDc3QkEyMEFDM0IxM0FCQTZB
ODlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjkyMjU0YzMtMjY2MS00NjFmLTkz
MjQtMDcwNzA0NzBjYzZkLzAvMUYyQTI1MjY2RjBGRjNBQjVFMTA3N0JBMjBBQzNC
MTNBQkE2QTg5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMv38LjLCx91lIPtyP3plBMQ10NbVdYOCeV+
0rVu29i+CnqVptioHsZsosRniSoSrfz09tjxO0j1LO+ZBl0rjqWOUh9UCjxveG5o
3+vnhkvnd6dHT92yIrNB6rRaLpJktGInNN98NFk5vjnpoHw71ZQDR5b6cqLP1gVl
p7koLDCw6JLHoGoefegMDG/KBKwfRK+KJmuCS9QOnMoepMDISWTOpR2AgvcVjb2W
IcR9t2m1lhSwnB+HUrKM48yII6JQrM7A05L/xjtkZjRc40K89yUg7szZQwXyrmyd
cc4l3IeldkqYl8w3YbQkYP2LbtImJP0rjvhJvvX/f8jq95s4Me4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:38 2026 by rpki-client