
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
File: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft (raw, json)
Hash identifier: T0zxwPdqA2URxJDw0bGrPQ8zkbKgqNRlmOqPccl/CeE=
Subject key identifier: 3A:34:12:2C:B3:A8:48:C0:60:B4:56:8A:41:C3:6C:FB:F9:52:39:31
Authority key identifier: 12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
Certificate issuer: /CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Certificate serial: 72877072EDBBE3AD88F0AB2F2FE8BBBB9CBD731D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:07:04 +0000
Manifest this update: Tue 16 Jun 2026 23:02:04 +0000
Manifest next update: Thu 18 Jun 2026 01:09:04 +0000
Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: V6cyc1CcqyB7Bwt4/zuikRuoVLZO2D20sD1iOp+dhmw=)
2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: XIXVE3WxFWnkjGptM8+qV7znYXNR6ug7ahxtLFcMw2U=)
3: 1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl (hash: aSkpnxAsIR0CSZWryf6MyW3vA45LlJv6fqZMi3+rwp8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:87:70:72:ed:bb:e3:ad:88:f0:ab:2f:2f:e8:bb:bb:9c:bd:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224F67FFE38BCEA387E2DF3E662D6F6877F6346
Validity
Not Before: Jun 16 23:02:04 2026 GMT
Not After : Jun 18 01:09:04 2026 GMT
Subject: CN=3A34122CB3A848C060B4568A41C36CFBF9523931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:67:22:f4:1e:5b:c3:b0:16:84:3a:89:25:
bf:eb:80:71:7f:92:b9:66:74:dc:2f:31:52:7d:a5:
76:7f:b1:78:62:41:b8:48:f9:fd:a6:ef:77:33:01:
44:c2:e2:8b:1a:fc:91:b2:86:51:37:87:4f:01:35:
2d:9b:55:e1:82:33:0c:75:ca:b5:93:7e:a4:c1:17:
2e:cc:d6:0c:70:c7:52:a2:3d:b8:b3:19:fa:dd:59:
18:65:3d:36:1c:59:10:a4:d5:d4:9d:92:77:8e:57:
49:50:e3:12:e7:1c:c1:88:10:b1:a6:9c:1a:fd:89:
c2:c0:f4:f0:0e:13:75:83:99:16:c8:62:66:01:41:
63:6a:57:ac:2e:49:cd:f8:ba:5e:2c:a5:69:e9:f6:
5f:e7:c3:41:b7:ff:1d:36:68:06:f7:b8:ab:c0:1f:
f7:ab:bc:47:1e:5f:4f:9b:f9:96:32:f5:e5:95:8f:
27:75:15:69:5b:59:2d:bc:63:09:a9:94:2d:a6:ed:
33:ac:ce:1b:f6:8d:3a:58:78:99:b6:e8:37:7d:6e:
8d:48:d7:28:94:13:f0:f7:2b:1d:e9:ee:9e:50:61:
8a:7b:34:d7:13:78:7e:84:ec:79:ba:39:08:18:70:
3a:1b:ac:f1:a9:0a:ad:65:a2:5b:e1:dd:ee:ba:2e:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:12:2C:B3:A8:48:C0:60:B4:56:8A:41:C3:6C:FB:F9:52:39:31
X509v3 Authority Key Identifier:
keyid:12:24:F6:7F:FE:38:BC:EA:38:7E:2D:F3:E6:62:D6:F6:87:7F:63:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/1224F67FFE38BCEA387E2DF3E662D6F6877F6346.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:48:eb:27:01:91:15:f6:55:f9:41:f0:b5:a1:bd:39:a6:
01:aa:03:6c:5f:02:55:7c:75:7e:dd:c8:7e:94:b7:0d:dc:08:
8d:e7:a3:b8:9d:98:63:e0:13:a5:a0:62:a2:e9:ed:f1:8e:d7:
75:72:d5:4b:5d:d8:7f:23:9e:c4:24:06:22:02:a0:34:6f:b4:
51:c3:01:f1:ee:dd:2b:f1:db:ec:24:02:44:d3:9f:0f:e2:d0:
5a:a7:f2:a9:57:a4:18:20:d9:83:74:87:2d:cb:07:cd:f3:8a:
fb:20:d7:7b:9d:51:7e:41:7f:c0:83:4f:09:d7:e9:b7:8f:d7:
12:49:89:5e:c9:63:6e:76:23:0d:7c:94:f6:7b:ce:2b:10:89:
d1:2f:a6:b4:08:95:5f:c2:9a:b4:35:9e:42:6b:e7:22:ab:21:
c8:de:cd:04:a3:80:d1:32:ed:9a:7a:85:29:97:c4:32:28:7c:
fe:c1:f9:15:8f:f0:da:fc:36:23:14:41:8e:cd:6d:b8:ce:3b:
59:a3:89:79:e8:1c:a3:a9:f2:5c:3d:8e:43:9a:aa:3a:2b:d8:
41:6c:82:ef:15:21:40:55:d9:89:43:84:87:0a:68:36:fd:ff:
1a:b9:2d:6c:8b:8a:bf:4d:ec:cb:66:31:bf:19:00:86:6b:93:
f5:c7:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:30 2026 by rpki-client