
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
File: 2224681B90D457DB106C5BD5E5518DFF52C87334.mft (raw, json)
Hash identifier: Bb3OsH9jwMUBJ7LsI78dU7owTu9g/hxXcYM4kbOP8sU=
Subject key identifier: 74:A6:9A:C3:3A:CB:F3:B6:32:5F:25:F3:37:2A:90:91:11:A3:04:58
Authority key identifier: 22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
Certificate issuer: /CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Certificate serial: 0FC6F5DFE383C0B29ED11313463A2C3B2559762E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 14:19:05 +0000
Manifest this update: Tue 22 Sep 2026 14:14:05 +0000
Manifest next update: Wed 23 Sep 2026 15:37:05 +0000
Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: 2XkpN/yeHiOUoJ2xsuKoxeJRASOp5SwKm66EqL0pa2o=)
2: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: JRz0AikjKf8Hdwl6cjt7jaFDxGE4945L1g49NYJWAso=)
3: 2224681B90D457DB106C5BD5E5518DFF52C87334.crl (hash: tp5N+Xbz5OsJd3fdpGgQDfFE0ogDhs6O0chBBXv0+i8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c6:f5:df:e3:83:c0:b2:9e:d1:13:13:46:3a:2c:3b:25:59:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224681B90D457DB106C5BD5E5518DFF52C87334
Validity
Not Before: Sep 22 14:14:05 2026 GMT
Not After : Sep 23 15:37:05 2026 GMT
Subject: CN=74A69AC33ACBF3B6325F25F3372A909111A30458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:c7:f8:73:4e:a7:e6:54:a8:b4:7a:87:c3:
ab:a3:a7:89:cd:39:03:d3:c5:e5:60:83:00:f8:96:
c5:10:6b:76:f6:d0:6d:41:7d:77:a2:18:26:3f:03:
49:a7:4f:c7:2e:a9:0e:ca:55:68:09:ae:0d:67:46:
de:be:41:64:97:2f:13:61:41:ef:89:60:34:66:79:
17:3b:dc:74:c0:b7:48:db:fa:e8:6c:b3:19:0f:f9:
b4:f2:09:0e:6d:85:19:73:ba:fb:41:57:a8:cb:0a:
ca:08:b6:1a:8a:22:67:e0:0d:64:25:64:0f:e9:1e:
72:70:34:74:52:dc:2e:79:0c:06:a4:cc:84:3e:68:
d5:8b:29:ed:12:aa:a7:9a:2b:0f:3e:8a:99:d1:43:
e4:d5:2c:0a:e8:3b:f9:9a:bf:57:39:cc:ca:dc:f5:
58:1d:7c:df:96:96:8d:6e:4e:40:15:69:b6:36:22:
99:5f:4d:fa:52:e4:a1:e2:22:40:b1:9a:b3:e7:81:
31:8a:23:34:90:1a:4d:13:1d:e8:e3:13:94:1e:45:
03:e0:cb:ee:89:3d:12:20:0b:8e:7a:b7:d0:14:a7:
24:f2:26:52:de:a7:71:54:7d:63:4e:2b:2f:d6:e1:
e1:49:a7:a4:75:01:c3:60:60:46:65:eb:17:ec:02:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:9A:C3:3A:CB:F3:B6:32:5F:25:F3:37:2A:90:91:11:A3:04:58
X509v3 Authority Key Identifier:
keyid:22:24:68:1B:90:D4:57:DB:10:6C:5B:D5:E5:51:8D:FF:52:C8:73:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2224681B90D457DB106C5BD5E5518DFF52C87334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/2224681B90D457DB106C5BD5E5518DFF52C87334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:1a:52:d9:f9:5b:ca:f2:87:d3:db:27:0b:a9:02:49:17:
8a:bf:01:16:d4:c3:7d:22:46:ed:85:01:46:a6:40:7e:20:5e:
e3:65:97:00:53:f9:14:1e:2e:ab:f0:de:cb:49:3e:b9:a5:2c:
27:8a:74:f6:14:6e:4e:f1:47:09:40:88:12:74:79:b4:b2:cc:
e9:bf:78:5e:89:f9:b0:5a:4b:ba:a0:a0:80:01:cb:0f:58:8d:
67:ca:12:12:fa:a8:6f:15:96:03:16:9a:49:0f:13:4a:8b:da:
f1:3f:c6:13:7e:73:8b:ac:44:c1:f2:0f:c2:26:ff:d9:54:17:
7a:fd:c1:42:55:c4:ee:4d:e7:bb:de:36:98:f3:27:47:78:5e:
2b:a1:82:2a:98:1e:86:5b:b2:0d:27:a8:c8:b0:34:f2:a3:44:
4a:84:a2:b0:3a:e8:45:5f:47:23:01:2e:54:ec:e4:82:8d:1c:
61:d6:38:94:2d:5c:60:03:85:16:d8:9e:2c:01:7a:b5:76:95:
9c:e9:93:74:40:f1:26:9f:93:3d:fe:24:63:48:5b:55:0a:79:
27:30:78:50:8a:4f:34:05:a1:85:ae:ea:cc:10:24:ea:65:9a:
f0:dd:5c:14:61:43:6f:fc:43:1a:0c:e4:f6:1d:a1:e7:8d:9e:
a2:85:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:41:12 2026 by rpki-client