
$ rpki-client -vvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json)
Hash identifier: owmNrG2lrcTjoXclv6hr9eJnJ+qABh/cWUMQaCeG4cc=
Subject key identifier: 5E:3C:67:08:71:21:B1:9B:A6:F4:5B:D1:FF:23:22:E5:17:80:7E:A8
Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Certificate serial: 38FDCD357EF6525196560E530F87FE32588EF92C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 14:18:00 +0000
Manifest this update: Wed 29 Jul 2026 14:13:00 +0000
Manifest next update: Thu 30 Jul 2026 14:57:00 +0000
Files and hashes: 1: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: 73/fdjvD9n2WVH9xJqeSVB5T8eoWx61wqW5fEJnDdOA=)
2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fd:cd:35:7e:f6:52:51:96:56:0e:53:0f:87:fe:32:58:8e:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Validity
Not Before: Jul 29 14:13:00 2026 GMT
Not After : Jul 30 14:57:00 2026 GMT
Subject: CN=5E3C67087121B19BA6F45BD1FF2322E517807EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:9c:05:ff:7b:b4:84:26:e5:2f:c2:e9:65:
96:22:d4:96:cc:93:15:60:b1:47:9a:51:a8:85:b8:
c4:ef:86:45:05:c7:ff:15:78:d6:2b:92:f6:d5:dc:
53:cd:8e:82:ee:8e:ae:8c:d2:e6:bc:dc:14:d2:5a:
86:ac:ea:5d:5b:32:8e:6c:d1:1a:c7:12:73:04:90:
4b:e2:d0:57:40:3e:10:cd:0e:fc:70:96:23:0c:6b:
14:60:59:63:82:07:c5:1c:dd:4e:02:c2:0a:d4:c1:
34:13:74:1c:f9:ed:4a:69:24:13:ca:a5:9d:65:67:
32:53:45:0b:13:0e:20:bc:de:5e:59:62:82:7c:37:
07:0f:71:b1:c8:5d:32:44:ba:83:ab:9a:2f:47:69:
c7:63:da:23:18:c5:ff:1f:e7:96:3e:35:c7:8e:e9:
c1:2d:97:cc:2e:82:a6:6d:34:b5:32:76:76:3e:ae:
88:4f:5b:d2:ec:77:ca:d3:7e:93:da:12:7c:2a:29:
0b:ca:de:37:4a:34:56:c7:06:47:9d:aa:3e:03:ca:
66:cd:25:58:68:48:60:c0:d6:33:64:43:c4:b5:e0:
07:44:8a:d3:54:0c:95:d5:03:30:3e:15:43:b6:35:
8f:75:dd:62:d9:44:70:1b:e5:cd:bc:a4:07:44:b6:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:67:08:71:21:B1:9B:A6:F4:5B:D1:FF:23:22:E5:17:80:7E:A8
X509v3 Authority Key Identifier:
keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:91:2c:f9:76:ff:a8:ce:8e:b0:71:6f:f0:ca:0b:9f:0c:
7e:ca:2c:c4:d5:46:b4:16:68:6f:55:8c:61:ed:a3:8d:d9:ff:
f0:6a:7a:d0:db:3b:17:06:c3:43:9a:6f:ee:60:70:a8:b5:9b:
cb:a9:45:33:cf:a6:3c:97:99:a0:ae:c1:aa:a4:d0:59:df:f2:
a2:e4:33:03:fa:3f:8a:63:0c:4d:be:43:f6:c7:d6:96:06:28:
bd:20:31:01:f2:7c:d7:c6:be:de:58:f4:4f:1c:23:89:6f:1e:
8b:8e:b4:7e:91:48:79:9f:da:e2:1e:49:18:6f:03:60:19:31:
be:c1:a5:0e:04:82:4b:5c:62:24:c1:22:fb:5c:e0:56:df:32:
bb:71:1a:07:4f:06:8d:37:73:9a:31:44:21:2f:43:d9:5f:41:
6f:39:23:2f:6d:ec:9f:2f:a5:1d:be:42:b1:69:90:46:5e:b4:
af:78:79:a7:85:39:85:44:6b:74:f5:88:95:d1:16:48:8a:a6:
7c:37:22:8a:3f:64:c1:d3:b1:af:fd:e6:94:ac:06:0a:72:0e:
a1:d0:f2:a9:43:f9:f6:0b:b4:1d:43:49:e2:21:1e:11:ef:70:
a8:14:75:c4:00:1b:ec:04:5d:36:ff:a8:84:48:bd:f4:55:4e:
e9:17:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:22:03 2026 by rpki-client