
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
File: F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json)
Hash identifier: l9O91eqD9wGyCRXZ0u+xUoFGTgdRvI4vp/5pvKjkY5A=
Subject key identifier: 02:4D:82:5E:59:41:87:54:A6:55:2B:D3:5F:90:00:2F:25:10:E5:ED
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Certificate issuer: /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial: 4B334F1D449BC34592D0A92687D255B8FB3E9151
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 18:44:54 +0000
Manifest this update: Tue 28 Jul 2026 18:39:54 +0000
Manifest next update: Wed 29 Jul 2026 19:07:54 +0000
Files and hashes: 1: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: aVpzCui/hl5Q+svH/SjmeJx9m8qQNzMC5559Yqj+RrI=)
2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:33:4f:1d:44:9b:c3:45:92:d0:a9:26:87:d2:55:b8:fb:3e:91:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
Validity
Not Before: Jul 28 18:39:54 2026 GMT
Not After : Jul 29 19:07:54 2026 GMT
Subject: CN=024D825E59418754A6552BD35F90002F2510E5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:58:5b:e8:ef:87:da:56:bd:a4:f9:aa:f2:
1b:f9:95:8e:4b:a2:69:d4:64:53:59:f2:a4:56:ef:
fd:31:c0:4e:f7:1a:34:57:db:91:8d:12:fb:1e:3d:
e0:f8:d4:bd:b3:ea:75:c1:a1:a1:70:90:c6:b7:ef:
b9:c8:08:be:a0:df:42:95:c7:e7:ad:fe:24:de:61:
85:fb:78:63:2d:f8:ed:a5:9d:d3:d8:c7:10:02:08:
40:a9:4a:68:f8:6a:e8:e2:0d:68:ee:8b:9d:93:64:
bc:ec:b1:9c:cd:12:01:39:a8:0e:55:69:fa:fd:3c:
5b:6f:1a:eb:64:04:41:8c:62:bb:8d:ce:12:89:c2:
78:06:e3:6b:29:dc:0a:f0:da:ad:27:60:8f:4e:f8:
71:fd:8c:72:35:46:8c:64:1d:fb:93:d2:9b:a7:8f:
5b:9d:60:9d:1f:0e:9d:b8:11:ca:5c:79:60:b6:17:
3d:c9:de:d1:50:45:e4:e0:55:ac:30:f8:9b:f5:7f:
ec:23:8c:19:73:a0:84:43:4e:44:23:20:e7:e2:00:
6f:37:c5:d3:26:d4:a2:cb:03:97:d1:08:22:6a:75:
57:f9:6c:61:84:63:b9:6b:86:ca:6f:ae:6a:f8:f6:
47:f4:d8:0a:ee:8c:80:a5:64:f0:c5:2d:17:02:ae:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:82:5E:59:41:87:54:A6:55:2B:D3:5F:90:00:2F:25:10:E5:ED
X509v3 Authority Key Identifier:
keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:81:c1:b4:4b:fa:ad:ad:21:b7:96:41:65:fd:2d:54:05:
3b:8e:bf:15:1f:39:93:c4:ef:cd:4b:b3:1f:af:17:c3:07:b1:
bf:15:ce:e7:07:9f:c4:c4:24:1b:1b:a6:ea:5b:a5:a0:b3:5b:
a5:32:3a:b4:66:ec:2e:7b:c6:62:e2:6a:cc:a4:6f:f9:67:80:
a1:75:62:27:e0:9d:5e:9d:02:7b:32:f4:98:c3:f2:c4:5d:7f:
1c:a0:fc:0c:06:11:3a:78:09:9d:f5:0f:ad:8c:b9:b1:45:95:
07:37:70:3a:d3:96:e1:06:73:d5:15:f8:e7:75:f6:5e:14:44:
e3:a7:a2:33:10:64:07:b5:d8:49:ea:54:11:8e:5d:7a:15:ee:
44:e6:93:7c:97:21:f5:53:16:a4:02:c3:e1:31:ab:3b:cd:de:
6b:e9:0a:42:8f:3b:63:9e:ed:f4:e8:25:68:1f:11:5d:e0:4d:
1f:30:a0:89:7f:0b:20:e4:df:83:d4:af:a8:14:3a:cc:00:53:
9c:ca:ac:7b:b4:f0:ae:04:09:7c:c3:f8:8f:51:4a:ac:b2:e6:
d8:2d:fc:dd:4d:81:32:86:a9:8f:39:9e:f9:62:85:15:8d:f5:
f8:3e:1a:1e:25:6d:9e:85:9c:15:9f:c2:ed:a9:aa:70:6c:2f:
f5:13:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:20 2026 by rpki-client