
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json)
Hash identifier: 2qTWvt7yZw7m/I1CYkBVNqt3rrYr01N/TlbOI+Y5kEc=
Subject key identifier: 3F:F2:3C:73:D3:C3:9A:7D:2B:B7:51:63:8F:25:32:C0:1B:88:15:B9
Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Certificate serial: 059E74865F277D13A3234CF203BEF50EC2F5B340
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 05:27:36 +0000
Manifest this update: Wed 29 Jul 2026 05:22:36 +0000
Manifest next update: Thu 30 Jul 2026 06:59:36 +0000
Files and hashes: 1: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: we8ZJqv+YpmYYnDNFiIrDhGf/kht9kdzw4cFU6WCUnE=)
2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9e:74:86:5f:27:7d:13:a3:23:4c:f2:03:be:f5:0e:c2:f5:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4
Validity
Not Before: Jul 29 05:22:36 2026 GMT
Not After : Jul 30 06:59:36 2026 GMT
Subject: CN=3FF23C73D3C39A7D2BB751638F2532C01B8815B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:0e:85:38:d2:74:d2:0c:47:c4:91:c6:fa:
26:3f:90:e0:4d:12:34:80:9b:af:62:03:ab:62:3f:
45:46:7d:13:da:f3:93:82:89:a4:83:fc:aa:3f:ef:
81:62:76:b9:84:a8:a4:65:9b:12:96:84:be:2b:03:
48:83:d8:6d:ae:1c:19:44:65:c7:b4:1a:2b:2e:47:
c1:98:46:b6:c8:9a:5d:8f:66:a9:1e:89:72:26:e4:
5b:d5:3b:49:a7:34:1f:23:61:0d:0a:49:f5:de:f0:
17:fc:d4:1b:2b:59:b9:9b:20:50:dd:2c:7f:72:1e:
d6:6e:fc:b7:28:2e:a6:2f:19:8f:c7:26:62:bd:a3:
23:c8:07:1d:70:44:fb:f2:60:d9:a4:18:ab:e4:40:
77:03:62:d2:b7:f5:bb:ba:ef:b4:16:c8:b7:53:40:
76:23:a4:3b:c7:85:d2:45:3b:f7:29:65:ec:e3:1a:
89:8a:d2:93:47:ca:34:cd:d3:45:6b:d2:47:77:93:
95:c5:7e:7b:2b:0f:db:9d:cd:9a:6e:f5:1f:ac:ab:
f2:4e:f2:ed:e6:ff:35:b1:52:d6:59:26:83:52:b5:
24:5f:04:53:87:26:36:48:92:41:df:2c:d5:79:94:
4f:db:d3:74:16:fb:59:0a:85:6d:95:c4:38:b3:ea:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:3C:73:D3:C3:9A:7D:2B:B7:51:63:8F:25:32:C0:1B:88:15:B9
X509v3 Authority Key Identifier:
keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8d:59:c7:02:39:34:8a:2c:ab:08:9b:81:ff:e7:88:e3:b5:
10:b0:c3:14:c2:5c:18:e9:b8:7a:8f:09:8b:ee:b9:8c:f2:c0:
fc:dd:59:c8:ee:6d:64:96:ff:15:5a:aa:f3:de:d7:11:b8:9b:
a2:eb:13:98:4a:c7:79:46:62:9a:3f:d7:1f:7f:5a:ee:5c:24:
84:95:cf:82:3a:6a:77:a5:e2:26:d8:20:bf:9a:72:e1:bf:61:
9d:64:4a:36:3a:f3:82:60:07:6c:fe:d9:62:2d:00:46:ab:99:
9a:31:b9:a5:10:91:8a:8a:92:45:bb:ca:68:a1:7b:4d:03:83:
7f:57:c2:5d:f0:f0:4f:31:5d:72:a8:63:3f:fe:d5:90:ff:b2:
73:d1:a7:55:1d:cf:25:c0:87:80:ef:49:2c:40:1e:9d:b9:b5:
81:90:53:60:56:3a:37:55:67:38:c9:2c:1f:25:e4:42:20:aa:
79:1e:5d:b3:4e:af:da:76:98:61:86:dc:30:24:1e:64:fb:01:
3e:70:f1:e7:83:68:26:fc:95:16:23:89:36:e5:32:e1:90:2f:
35:57:fc:89:40:49:95:0d:1b:02:52:69:98:d7:1f:fc:89:3c:
8f:5f:5e:fc:a1:ac:33:d7:36:14:4a:8a:73:3e:4d:00:fd:c2:
82:40:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:38 2026 by rpki-client