
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft (raw, json)
Hash identifier: 1OQqQyuz3zkDpksGjHgh79xyZ8bX7zbPB95WfogAD5o=
Subject key identifier: A8:E8:E2:D9:3E:AA:BB:35:4D:FD:E3:19:1B:6A:8E:23:EA:0A:52:9C
Authority key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
Certificate issuer: /CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Certificate serial: 6815D83EFE14996F6315F4161AA3FB1D1FECD7A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:30:19 +0000
Manifest this update: Tue 16 Jun 2026 17:25:19 +0000
Manifest next update: Wed 17 Jun 2026 18:29:19 +0000
Files and hashes: 1: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl (hash: oow96NkYrP2XPpao/4KOfrvsUfpNfKCxLnyOX6AjsyE=)
2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: R/xEQgEo02t46B8xsXrO/lgKY9Y/AGOBiAw+WzSuWJA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:15:d8:3e:fe:14:99:6f:63:15:f4:16:1a:a3:fb:1d:1f:ec:d7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458
Validity
Not Before: Jun 16 17:25:19 2026 GMT
Not After : Jun 17 18:29:19 2026 GMT
Subject: CN=A8E8E2D93EAABB354DFDE3191B6A8E23EA0A529C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:e9:ca:f7:f6:e3:90:a3:32:96:92:b2:a4:
3d:c4:88:e5:79:a3:d4:10:b5:c0:d7:2e:dc:3e:4f:
34:98:fa:b7:5d:45:fc:e8:b2:ff:64:d5:8f:dd:e5:
92:2c:4a:98:a8:1b:47:23:23:73:86:06:2b:9c:ec:
e3:d6:7c:0c:fc:e1:41:01:e2:b9:61:d9:41:6c:fb:
64:0c:ec:c8:43:62:9e:1c:f6:3c:27:ca:91:fe:1b:
5a:d8:4c:7d:f2:ba:03:d4:69:7f:77:0e:47:87:29:
0e:78:51:be:04:96:b7:20:79:37:28:e9:39:bd:1e:
f7:48:6e:59:91:e5:23:71:9f:01:fc:5f:44:41:8d:
ef:f0:28:22:1b:29:14:52:5b:db:0d:4c:14:ef:ff:
a3:32:8f:19:1e:e4:f4:68:3d:d0:18:55:37:9c:96:
60:48:55:5f:7b:1d:81:35:fc:fe:58:03:e3:57:ea:
1a:d2:a9:fd:b0:f9:31:12:20:9a:fd:35:8e:76:5c:
94:36:82:05:8a:55:1c:9b:cb:cd:bb:a1:b7:27:7d:
b9:c3:da:25:3f:4f:da:b2:d4:0c:43:cb:22:97:90:
90:aa:ec:20:34:53:15:e2:0b:7b:d5:27:77:2c:9e:
10:0d:a5:d6:a7:f8:e1:3c:cc:cc:b0:85:8e:0f:14:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E8:E2:D9:3E:AA:BB:35:4D:FD:E3:19:1B:6A:8E:23:EA:0A:52:9C
X509v3 Authority Key Identifier:
keyid:F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:eb:ed:ed:41:f8:21:18:61:e7:30:0f:bc:4a:08:0d:ae:
24:09:0a:fb:cf:19:20:9e:f5:11:8b:c4:83:85:aa:3d:ba:09:
a0:e7:49:52:fc:26:7a:d5:fc:a6:6b:72:7d:c5:0b:25:58:f2:
bf:55:94:b2:15:94:ab:33:47:eb:7f:0b:a3:8d:85:8b:54:5e:
ad:f0:fd:12:73:d3:22:24:4d:c4:46:62:3d:d0:47:fc:5c:e0:
62:55:89:a5:c2:c0:f9:11:e4:60:f0:e9:b8:d9:e2:a6:45:b2:
82:18:e0:90:51:b8:fa:bf:ba:d0:09:25:97:ca:08:8f:b7:07:
22:d8:58:38:cc:82:99:30:36:ed:9b:15:d0:f4:ca:05:db:8d:
23:9a:ab:9c:a8:01:7a:e4:72:ef:5d:24:ec:14:ca:6b:44:b1:
dd:a9:70:3a:c1:8c:44:d9:75:67:61:03:fd:50:e7:55:f3:62:
8a:0b:73:ad:f6:d2:69:52:56:a5:1f:21:ac:b1:51:91:e6:c6:
46:6a:2d:53:8e:6d:da:a2:96:d9:8a:ba:37:c2:34:6f:74:c5:
fa:a5:e3:f1:43:29:f3:3d:79:20:ee:e1:24:f0:87:2b:33:29:
1b:5f:36:40:81:28:20:0b:ae:9f:a9:8d:f8:9d:1b:ec:a2:b9:
74:ab:82:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaBXYPv4UmW9jFfQWGqP7HR/s16IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0
MkFGRDQ1ODAeFw0yNjA2MTYxNzI1MTlaFw0yNjA2MTcxODI5MTlaMDMxMTAvBgNV
BAMTKEE4RThFMkQ5M0VBQUJCMzU0REZERTMxOTFCNkE4RTIzRUEwQTUyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNenK9/bjkKMylpKypD3EiOV5
o9QQtcDXLtw+TzSY+rddRfzosv9k1Y/d5ZIsSpioG0cjI3OGBiuc7OPWfAz84UEB
4rlh2UFs+2QM7MhDYp4c9jwnypH+G1rYTH3yugPUaX93DkeHKQ54Ub4ElrcgeTco
6Tm9HvdIblmR5SNxnwH8X0RBje/wKCIbKRRSW9sNTBTv/6Myjxke5PRoPdAYVTec
lmBIVV97HYE1/P5YA+NX6hrSqf2w+TESIJr9NY52XJQ2ggWKVRyby827obcnfbnD
2iU/T9qy1AxDyyKXkJCq7CA0UxXiC3vVJ3csnhANpdan+OE8zMywhY4PFLSpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqOji2T6quzVN/eMZG2qOI+oKUpwwHwYDVR0j
BBgwFoAU8jF3rqBewALtnRqexg1qEkKv1FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTY3OTgyNGYtNGUwOC00OTcwLWJiYTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVB
MDVFQzAwMkVEOUQxQTlFQzYwRDZBMTI0MkFGRDQ1OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMjMxNzdBRUEwNUVDMDAyRUQ5RDFBOUVDNjBENkExMjQyQUZE
NDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi
YTYtMjdiNDcyNmNhNTgwLzAvRjIzMTc3QUVBMDVFQzAwMkVEOUQxQTlFQzYwRDZB
MTI0MkFGRDQ1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACXm6+3tQfghGGHnMA+8SggNriQJCvvPGSCe
9RGLxIOFqj26CaDnSVL8JnrV/KZrcn3FCyVY8r9VlLIVlKszR+t/C6ONhYtUXq3w
/RJz0yIkTcRGYj3QR/xc4GJViaXCwPkR5GDw6bjZ4qZFsoIY4JBRuPq/utAJJZfK
CI+3ByLYWDjMgpkwNu2bFdD0ygXbjSOaq5yoAXrkcu9dJOwUymtEsd2pcDrBjETZ
dWdhA/1Q51XzYooLc6320mlSVqUfIayxUZHmxkZqLVOObdqiltmKujfCNG90xfql
4/FDKfM9eSDu4STwhyszKRtfNkCBKCALrp+pjfidG+yiuXSrgoU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:48 2026 by rpki-client