
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
File: F24C627AA0685F68F1420C7F28860265CA26D303.mft (raw, json)
Hash identifier: MU0awFGdT0LBiA6LAPPG1gJQsEAdDcI9P15Nz9L2DIk=
Subject key identifier: E1:35:44:6B:F7:83:BB:15:1F:C2:AC:2C:F5:3F:72:92:12:F1:C9:7F
Authority key identifier: F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
Certificate issuer: /CN=F24C627AA0685F68F1420C7F28860265CA26D303
Certificate serial: 2DD4F56869CF56CF3CC044B1C7DE6E6BB79B7B9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:24:28 +0000
Manifest this update: Wed 17 Jun 2026 01:19:28 +0000
Manifest next update: Thu 18 Jun 2026 02:06:28 +0000
Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: lmv+Kyq7Ss/MkyIqM6l/zx8khXHo4uyu4TTfeaMD1h4=)
2: F24C627AA0685F68F1420C7F28860265CA26D303.crl (hash: Q0QegzcK7ozWo8E6jOj4s+MAIxGLK5623ScY4KZKCJo=)
3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: wLSLqNMEk1+oAWfvj1SZ4wZH+IOgpP8sHsJQIvQCHuE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d4:f5:68:69:cf:56:cf:3c:c0:44:b1:c7:de:6e:6b:b7:9b:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24C627AA0685F68F1420C7F28860265CA26D303
Validity
Not Before: Jun 17 01:19:28 2026 GMT
Not After : Jun 18 02:06:28 2026 GMT
Subject: CN=E135446BF783BB151FC2AC2CF53F729212F1C97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d1:3e:79:50:16:8d:cb:45:30:ed:48:02:
ec:29:78:ff:ce:77:86:27:a7:07:9e:e0:99:66:1d:
bf:17:f5:65:6c:7f:d8:ff:94:97:08:b5:f2:9c:b0:
10:69:ec:19:50:2d:e7:c1:9b:ec:e3:82:9d:46:e8:
50:a7:3a:00:b6:ac:b7:30:70:5b:fe:24:3b:e3:01:
7d:e9:20:16:5c:08:75:19:46:e8:a9:7b:aa:81:42:
38:c0:25:5c:4c:83:7c:f7:ed:ba:3b:6c:a4:03:6b:
3a:b0:ca:6f:c9:c7:8f:a3:06:68:b4:12:cf:79:54:
d3:62:2a:93:23:fe:7d:19:95:53:ad:67:fb:b6:5f:
40:68:40:c3:c0:ed:74:46:fb:36:43:ee:c5:6f:fd:
86:f6:92:5c:b9:c4:c8:c0:81:c3:81:ac:b0:88:16:
4d:23:e6:1d:71:66:20:45:29:06:e8:24:54:11:02:
b5:e0:ff:f4:aa:d6:42:cd:52:d0:33:3f:d4:f9:82:
55:d2:5f:3b:1b:01:53:3f:5c:87:fe:64:87:61:22:
89:41:ae:c3:3e:21:15:a5:b6:9c:19:64:b3:12:da:
ec:39:3c:2e:22:e9:3b:88:17:91:13:e0:d0:08:f9:
70:19:37:6c:aa:5a:cc:83:62:fd:70:01:1c:7b:a8:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:44:6B:F7:83:BB:15:1F:C2:AC:2C:F5:3F:72:92:12:F1:C9:7F
X509v3 Authority Key Identifier:
keyid:F2:4C:62:7A:A0:68:5F:68:F1:42:0C:7F:28:86:02:65:CA:26:D3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24C627AA0685F68F1420C7F28860265CA26D303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/F24C627AA0685F68F1420C7F28860265CA26D303.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:5b:9e:2d:2e:75:83:f9:91:b2:8f:a9:30:f1:20:f5:e9:
7e:5f:95:bb:d1:88:a8:d6:71:1f:3a:65:ea:14:e6:81:a0:39:
c6:d2:77:c9:d5:21:6f:25:af:f8:66:e2:f1:c5:2f:25:b6:94:
66:9d:80:49:ba:70:34:d8:a4:86:26:40:36:cd:0d:d8:95:ff:
cf:49:0e:c2:8e:7c:6b:4a:3b:0a:52:0f:34:ea:9d:fb:89:23:
12:47:36:ff:c5:37:7f:b5:1e:07:e4:d9:04:e3:10:e4:e9:0b:
63:5d:ef:c2:cc:a8:95:8c:26:ea:9b:1e:48:88:96:83:ff:21:
e3:f4:8a:f0:fd:bd:6d:7b:0c:cb:22:b3:c0:06:75:c8:5e:04:
b5:87:03:08:6c:83:12:ac:95:a5:f6:7a:86:6d:4a:3f:ad:09:
d2:d0:f8:c5:58:b0:ca:5f:a4:d4:44:9c:80:67:a5:53:e5:17:
99:df:de:68:b4:82:a7:e8:5e:30:65:41:07:47:2e:46:f1:7f:
8d:23:2c:95:74:80:e6:35:28:ec:e5:d8:53:de:7c:fe:1b:c0:
88:f4:6b:b0:3a:9b:08:86:66:1c:2f:79:76:b1:36:66:79:1b:
9e:45:8e:c3:da:dc:66:e1:ef:b3:09:91:1e:b6:9a:6c:c2:97:
10:d2:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:53 2026 by rpki-client