
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
File: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft (raw, json)
Hash identifier: zGfd8U64lq6y0BIJZsvO3WyZVlg6o7CNmQVkialwH2Y=
Subject key identifier: CF:40:76:AB:B1:84:83:0B:8F:C8:BF:4C:EE:32:59:25:0D:AF:4F:92
Authority key identifier: C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA
Certificate issuer: /CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
Certificate serial: 06372715AB8FBAC5A2FD1F87A9BE74A826DAE804
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 06:20:34 +0000
Manifest this update: Wed 17 Jun 2026 06:15:34 +0000
Manifest next update: Thu 18 Jun 2026 07:37:34 +0000
Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: RpKB88H1EeRDg7tfcTBSl+Zo5Y84iIg06W/eVC4GSFw=)
2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: f5TuDn3JjBtU4GdimjLsODFHOZ5ohDlcPjaFqwt/1vs=)
3: C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl (hash: Bq1OigfsWHutdskxSZMwkGD65xuhFhy0qyZdBN/rEBY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl
rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:37:27:15:ab:8f:ba:c5:a2:fd:1f:87:a9:be:74:a8:26:da:e8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24BA8D7ABA9A0AEB81D20E6B551215E769828CA
Validity
Not Before: Jun 17 06:15:34 2026 GMT
Not After : Jun 18 07:37:34 2026 GMT
Subject: CN=CF4076ABB184830B8FC8BF4CEE3259250DAF4F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:a6:ef:66:ac:82:3a:3f:ba:fe:05:bb:3d:
d3:1f:e5:47:36:99:96:40:d5:36:3c:d2:ab:90:07:
18:09:31:48:37:39:c1:c4:c1:79:0c:94:14:22:6c:
44:63:f3:88:0f:a0:69:a7:6b:fd:14:77:2e:40:15:
1f:49:a7:7d:5a:aa:e5:fa:50:8f:9d:13:49:c6:ee:
13:51:dd:71:10:76:8a:02:a4:46:04:79:b8:75:62:
16:bf:e8:ac:c3:9e:6d:b5:22:fe:46:5f:14:17:34:
44:40:4b:9f:2f:a3:27:bd:32:d5:0a:ee:e2:61:48:
4b:57:be:d2:9d:df:ee:3a:0a:ff:6d:24:45:92:c7:
3a:db:3b:7c:53:a3:86:bd:15:4b:f9:7f:8c:d5:fa:
a3:91:b2:ed:14:dd:b1:11:4f:83:8e:29:b1:59:d2:
8e:ee:23:d8:af:d8:bd:7a:9f:da:40:4a:f6:89:f1:
8c:78:49:60:f4:f7:27:80:ea:38:04:3a:84:32:47:
14:c0:29:42:a8:f6:85:a1:99:bb:83:1c:f5:1d:8d:
1d:93:67:0c:3e:01:66:d6:17:58:58:e6:6a:0a:66:
c8:a1:fe:9b:6e:44:88:e4:3a:c6:7f:e7:09:00:cf:
e3:a6:fb:56:1a:d1:f9:22:ab:f0:38:a2:94:70:d8:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:76:AB:B1:84:83:0B:8F:C8:BF:4C:EE:32:59:25:0D:AF:4F:92
X509v3 Authority Key Identifier:
keyid:C2:4B:A8:D7:AB:A9:A0:AE:B8:1D:20:E6:B5:51:21:5E:76:98:28:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/C24BA8D7ABA9A0AEB81D20E6B551215E769828CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c9:c1:cd:13:cf:5d:7a:c2:21:fd:92:d8:b2:fa:e3:10:b2:
29:e5:55:d5:7c:2f:5e:18:23:62:fe:64:bb:48:07:ab:54:a1:
ff:cc:03:24:ac:d3:bc:99:8a:da:73:64:d9:b6:6b:23:7a:60:
72:6c:ae:b3:e9:a4:72:35:c3:29:6a:16:ac:c1:48:ef:cd:fe:
c9:84:b6:3b:79:15:79:cf:28:0d:f6:93:8e:0e:3c:a6:e6:6d:
72:ae:fe:45:0c:19:22:1e:13:07:4d:ea:96:fb:9d:77:99:49:
41:0c:6b:6d:6c:30:e0:fc:1a:e1:fa:a2:76:32:37:df:bc:71:
6b:68:3a:b3:58:e0:10:a9:d2:4d:ed:9b:3c:db:43:88:6a:98:
a5:12:2f:3a:44:7e:76:34:84:13:09:42:83:36:3a:83:d1:6a:
c6:1c:48:63:b0:8c:8c:15:39:a0:fb:1d:44:cb:a9:19:fb:e8:
44:32:fc:89:4f:49:bf:a4:27:b8:5a:85:9b:76:bb:e2:36:d6:
d2:ea:19:e0:70:e0:cc:0a:e9:04:73:6c:84:4c:3d:16:01:b5:
47:c7:90:37:c5:05:aa:a4:30:42:47:3a:7a:69:d6:f9:54:f4:
94:e6:85:1a:94:69:90:e7:80:32:17:3c:5d:f0:4b:8a:cc:61:
2a:0d:8e:31
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBjcnFauPusWi/R+Hqb50qCba6AQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3
Njk4MjhDQTAeFw0yNjA2MTcwNjE1MzRaFw0yNjA2MTgwNzM3MzRaMDMxMTAvBgNV
BAMTKENGNDA3NkFCQjE4NDgzMEI4RkM4QkY0Q0VFMzI1OTI1MERBRjRGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T6bvZqyCOj+6/gW7PdMf5Uc2
mZZA1TY80quQBxgJMUg3OcHEwXkMlBQibERj84gPoGmna/0Udy5AFR9Jp31aquX6
UI+dE0nG7hNR3XEQdooCpEYEebh1Yha/6KzDnm21Iv5GXxQXNERAS58voye9MtUK
7uJhSEtXvtKd3+46Cv9tJEWSxzrbO3xTo4a9FUv5f4zV+qORsu0U3bERT4OOKbFZ
0o7uI9iv2L16n9pASvaJ8Yx4SWD09yeA6jgEOoQyRxTAKUKo9oWhmbuDHPUdjR2T
Zww+AWbWF1hY5moKZsih/ptuRIjkOsZ/5wkAz+Om+1Ya0fkiq/A4opRw2HTNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz0B2q7GEgwuPyL9M7jJZJQ2vT5IwHwYDVR0j
BBgwFoAUwkuo16upoK64HSDmtVEhXnaYKMowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE3MDgzYWItMjcwYS00YjBhLThlNTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdB
QkE5QTBBRUI4MUQyMEU2QjU1MTIxNUU3Njk4MjhDQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMjRCQThEN0FCQTlBMEFFQjgxRDIwRTZCNTUxMjE1RTc2OTgy
OENBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl
NTUtYTQ1ZTFjZjFhZmQ1LzAvQzI0QkE4RDdBQkE5QTBBRUI4MUQyMEU2QjU1MTIx
NUU3Njk4MjhDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHnJwc0Tz116wiH9ktiy+uMQsinlVdV8L14Y
I2L+ZLtIB6tUof/MAySs07yZitpzZNm2ayN6YHJsrrPppHI1wylqFqzBSO/N/smE
tjt5FXnPKA32k44OPKbmbXKu/kUMGSIeEwdN6pb7nXeZSUEMa21sMOD8GuH6onYy
N9+8cWtoOrNY4BCp0k3tmzzbQ4hqmKUSLzpEfnY0hBMJQoM2OoPRasYcSGOwjIwV
OaD7HUTLqRn76EQy/IlPSb+kJ7hahZt2u+I21tLqGeBw4MwK6QRzbIRMPRYBtUfH
kDfFBaqkMEJHOnpp1vlU9JTmhRqUaZDngDIXPF3wS4rMYSoNjjE=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:34 2026 by rpki-client