
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
File: F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft (raw, json)
Hash identifier: z26w6/ia+/x5OtbaChMP0A1HBA2p20/86EcKlluwnN0=
Subject key identifier: 9F:0A:CD:02:2D:A7:1C:17:40:E9:2C:8A:01:62:3E:16:35:AF:08:8E
Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E
Certificate issuer: /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
Certificate serial: 1326DDEA8BF826A936011C3C1BE01E48B9665D03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 13:27:00 +0000
Manifest this update: Wed 29 Jul 2026 13:22:00 +0000
Manifest next update: Thu 30 Jul 2026 17:26:00 +0000
Files and hashes: 1: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: qpcV4Pf7cNXRuQrRMlgmCsKcJG4eLr1f/Ludu6hvhtU=)
2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog=)
3: F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl (hash: +0w09pbsZmw7ghetEvDX8nMqwMxNIu2V8ycfCVcqle0=)
4: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: gX3SrmHuIFxjATXp8t+HZx8aCultQoPEMzsPd4px2h0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl
rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:26:dd:ea:8b:f8:26:a9:36:01:1c:3c:1b:e0:1e:48:b9:66:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E
Validity
Not Before: Jul 29 13:22:00 2026 GMT
Not After : Jul 30 17:26:00 2026 GMT
Subject: CN=9F0ACD022DA71C1740E92C8A01623E1635AF088E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:42:d5:c1:e8:be:ff:bc:79:47:50:35:42:
ce:9e:c9:12:5c:63:09:17:d1:a9:34:34:25:3f:a7:
7d:4f:02:c3:24:85:cb:d3:f2:fb:71:0f:cf:14:f9:
b2:48:b5:81:d6:46:ef:d6:3a:51:9b:de:c4:ce:6a:
a8:83:e4:58:eb:5c:67:39:d5:73:85:db:64:7e:4a:
61:af:ad:73:9a:5b:b4:79:8b:a9:f0:8d:02:4f:d1:
51:72:76:fa:ba:1d:93:79:a3:c1:70:a0:9f:19:83:
78:88:29:6e:8d:4f:e6:91:eb:03:34:71:00:13:ff:
46:f2:39:0f:f1:8d:0d:73:fa:e0:ff:5f:6b:68:b6:
3d:b2:f0:a8:05:97:9d:ad:ae:93:54:f0:34:82:df:
88:3a:92:3d:ea:58:3f:fb:22:46:4c:fa:4d:d7:9e:
f2:bf:9f:e1:36:a0:02:c5:89:5c:02:99:26:c3:0d:
94:a3:4e:56:a7:77:f9:e8:d9:53:78:be:c0:60:6d:
a1:a1:6b:36:11:77:55:82:21:5e:09:bc:ce:09:c9:
79:68:05:c5:59:aa:83:00:c4:32:74:22:e3:10:06:
13:ec:9e:40:00:33:81:bf:cf:b7:6a:f6:d2:49:e7:
40:fc:cb:00:5e:dd:62:20:1f:dd:b5:d6:63:78:11:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:CD:02:2D:A7:1C:17:40:E9:2C:8A:01:62:3E:16:35:AF:08:8E
X509v3 Authority Key Identifier:
keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:d6:5f:2e:17:2c:18:24:6c:9a:69:10:02:58:12:9d:d8:
fd:de:5a:40:11:d6:b3:81:c0:c8:a8:96:e5:fe:e4:be:7e:4d:
87:64:b8:ea:eb:09:96:90:9b:2b:c4:1e:b9:71:f8:dc:34:9d:
67:6d:b3:3b:e1:db:8a:2e:f9:2f:dd:e9:55:ad:d6:8f:0d:77:
b9:73:bd:76:22:0e:44:63:68:f3:ce:dd:e1:68:8a:6a:d1:b1:
d1:be:ec:e2:f9:a1:f9:a6:39:10:97:59:92:a4:72:ac:4c:db:
7b:af:9a:68:2e:87:47:f3:e4:b8:e2:42:e2:c0:e6:b3:4f:6a:
d6:6c:a6:b5:f4:21:2f:dc:f2:83:62:0d:07:2a:d5:dd:3d:69:
c6:7d:03:97:7d:21:b5:2e:63:2a:a2:d7:55:39:da:81:4c:e5:
a9:bb:3f:f0:4b:8b:ad:02:2f:9d:5c:44:fc:a8:81:15:81:8b:
0a:a2:9f:4b:9e:ef:90:78:ad:4c:13:3f:3d:1a:46:3b:ed:a5:
10:a0:cc:87:de:be:9f:65:b9:f1:68:10:79:d0:f7:55:04:dd:
6e:c2:1e:14:06:37:4f:59:e2:f7:5b:ec:fc:22:d9:03:6b:32:
16:96:42:dc:54:d9:65:ed:b4:94:aa:43:3e:ae:2b:57:7c:c3:
52:a4:95:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEybd6ov4Jqk2ARw8G+AeSLlmXQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERE
NEY1MUIyRTAeFw0yNjA3MjkxMzIyMDBaFw0yNjA3MzAxNzI2MDBaMDMxMTAvBgNV
BAMTKDlGMEFDRDAyMkRBNzFDMTc0MEU5MkM4QTAxNjIzRTE2MzVBRjA4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgI0LVwei+/7x5R1A1Qs6eyRJc
YwkX0ak0NCU/p31PAsMkhcvT8vtxD88U+bJItYHWRu/WOlGb3sTOaqiD5FjrXGc5
1XOF22R+SmGvrXOaW7R5i6nwjQJP0VFydvq6HZN5o8FwoJ8Zg3iIKW6NT+aR6wM0
cQAT/0byOQ/xjQ1z+uD/X2totj2y8KgFl52trpNU8DSC34g6kj3qWD/7IkZM+k3X
nvK/n+E2oALFiVwCmSbDDZSjTland/no2VN4vsBgbaGhazYRd1WCIV4JvM4JyXlo
BcVZqoMAxDJ0IuMQBhPsnkAAM4G/z7dq9tJJ50D8ywBe3WIgH9211mN4Efi/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnwrNAi2nHBdA6SyKAWI+FjWvCI4wHwYDVR0j
BBgwFoAU8i0zXlj+RIDGMAKK/aCJ3dT1Gy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODI3ODBmODUtZWYyZi00Y2Y4LWE0YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1
OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERENEY1MUIyRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjJEMzM1RTU4RkU0NDgwQzYzMDAyOEFGREEwODlEREQ0RjUx
QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0
YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5
RERENEY1MUIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGX1l8uFywYJGyaaRACWBKd2P3eWkAR1rOB
wMioluX+5L5+TYdkuOrrCZaQmyvEHrlx+Nw0nWdtszvh24ou+S/d6VWt1o8Nd7lz
vXYiDkRjaPPO3eFoimrRsdG+7OL5ofmmORCXWZKkcqxM23uvmmguh0fz5LjiQuLA
5rNPatZsprX0IS/c8oNiDQcq1d09acZ9A5d9IbUuYyqi11U52oFM5am7P/BLi60C
L51cRPyogRWBiwqin0ue75B4rUwTPz0aRjvtpRCgzIfevp9lufFoEHnQ91UE3W7C
HhQGN09Z4vdb7Pwi2QNrMhaWQtxU2WXttJSqQz6uK1d8w1KklQ0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:27 2026 by rpki-client