
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json)
Hash identifier: masiP9DH6m1wJEuP3Ftn74pK0DFFxQt0mrmvHX268xw=
Subject key identifier: 4B:F8:98:71:4F:3B:9F:9D:A1:B1:25:5A:A3:DB:CA:48:DF:4E:43:60
Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A
Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
Certificate serial: 5643524905A8205C1D5C8C2E9EC5FF7A861143FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:53:07 +0000
Manifest this update: Mon 20 Jul 2026 21:48:07 +0000
Manifest next update: Tue 21 Jul 2026 22:42:07 +0000
Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=)
2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=)
3: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: OB8Q39JIsm8uOskTyl7uRdKChwSiQpJLdCbqjsczTy4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl
rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:43:52:49:05:a8:20:5c:1d:5c:8c:2e:9e:c5:ff:7a:86:11:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A
Validity
Not Before: Jul 20 21:48:07 2026 GMT
Not After : Jul 21 22:42:07 2026 GMT
Subject: CN=4BF898714F3B9F9DA1B1255AA3DBCA48DF4E4360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:12:7b:e2:fa:8e:76:9f:68:5a:a2:2f:a0:
1a:85:0b:4f:12:af:d5:f1:80:a8:8e:78:9b:cb:4a:
eb:00:64:65:b5:55:37:95:b9:a9:d0:10:79:80:d0:
84:b9:8d:7f:4d:f1:74:85:16:db:59:19:93:c4:68:
7a:3e:31:32:ac:ff:51:54:f1:62:ab:f2:d5:ff:c2:
4c:1d:4b:aa:bf:00:a8:70:18:ee:a2:3e:ff:3c:e9:
40:88:f5:b2:2f:2d:24:7f:73:6a:6f:77:9e:59:c4:
ed:79:94:cc:5e:f4:6e:a4:2a:78:a9:4e:c8:7e:d7:
9c:bb:5f:bc:bf:b9:1b:2f:c6:8e:7c:90:dc:29:c6:
c8:5e:3f:90:04:58:b6:9a:03:2e:9c:12:da:31:35:
ef:08:9c:f8:98:c5:bc:3a:d7:aa:34:23:22:9e:60:
9f:ff:bc:60:79:1a:92:48:2e:62:62:36:f0:2b:4f:
6e:c2:3b:b0:be:32:80:d2:84:51:2e:96:ee:1b:fe:
54:59:9b:bf:ea:ac:1c:41:73:e5:db:61:df:21:57:
5d:ef:c5:42:9d:ba:a7:45:03:36:61:63:0b:35:7f:
ba:ea:e5:a4:b3:3b:66:b4:49:54:98:72:39:8d:c5:
ff:65:ab:b5:0d:86:2b:5e:ff:3a:f0:ef:d0:a4:3d:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:98:71:4F:3B:9F:9D:A1:B1:25:5A:A3:DB:CA:48:DF:4E:43:60
X509v3 Authority Key Identifier:
keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0e:3e:d5:6c:18:e2:1e:80:1b:dc:c0:5a:23:ab:cd:50:7e:
74:44:79:8c:97:3e:7d:ab:74:e1:4e:26:a9:da:8b:cb:72:b2:
53:11:2d:82:81:08:76:b8:f2:72:c1:59:71:f7:13:3b:3c:e2:
41:a4:44:c6:a0:4a:ea:67:0d:67:ae:f8:27:00:72:48:63:56:
e4:3e:1a:6f:5c:01:fd:95:dc:0e:54:27:47:52:28:52:53:74:
a2:4f:1b:76:b2:02:10:a1:f8:8e:e0:99:fc:d4:4a:71:c8:34:
a9:bc:5b:58:15:12:8c:b9:dc:f8:92:20:de:57:d4:11:10:b2:
62:03:8d:31:27:54:c7:c5:2f:88:ef:4e:e6:e8:73:50:46:28:
0c:8a:f0:1a:99:7b:13:2f:ed:35:5d:74:fa:cd:51:21:52:8d:
08:8a:df:ab:da:09:25:b2:3b:4a:19:b6:9e:45:ef:93:ad:79:
75:0b:e6:f5:ad:96:b6:cf:27:da:f1:14:e6:86:70:1c:21:62:
3c:a1:1f:e7:40:22:3f:94:9a:c0:a3:a7:c3:eb:12:87:6f:c4:
a9:c4:75:e5:9f:df:d7:bc:8b:bc:bb:f0:23:c2:b5:ff:c2:c9:
d1:36:fc:9b:da:50:4a:76:32:a7:bf:16:a1:93:49:e6:b8:db:
fd:b7:f5:34
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVkNSSQWoIFwdXIwunsX/eoYRQ/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4
NUYxNDY0QTAeFw0yNjA3MjAyMTQ4MDdaFw0yNjA3MjEyMjQyMDdaMDMxMTAvBgNV
BAMTKDRCRjg5ODcxNEYzQjlGOURBMUIxMjU1QUEzREJDQTQ4REY0RTQzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqiRJ74vqOdp9oWqIvoBqFC08S
r9XxgKiOeJvLSusAZGW1VTeVuanQEHmA0IS5jX9N8XSFFttZGZPEaHo+MTKs/1FU
8WKr8tX/wkwdS6q/AKhwGO6iPv886UCI9bIvLSR/c2pvd55ZxO15lMxe9G6kKnip
Tsh+15y7X7y/uRsvxo58kNwpxsheP5AEWLaaAy6cEtoxNe8InPiYxbw616o0IyKe
YJ//vGB5GpJILmJiNvArT27CO7C+MoDShFEulu4b/lRZm7/qrBxBc+XbYd8hV13v
xUKduqdFAzZhYws1f7rq5aSzO2a0SVSYcjmNxf9lq7UNhite/zrw79CkPdX9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUS/iYcU87n52hsSVao9vKSN9OQ2AwHwYDVR0j
BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx
NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0
NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw
MGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIx
QTc4NUYxNDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC4OPtVsGOIegBvcwFojq81QfnREeYyXPn2r
dOFOJqnai8tyslMRLYKBCHa48nLBWXH3Ezs84kGkRMagSupnDWeu+CcAckhjVuQ+
Gm9cAf2V3A5UJ0dSKFJTdKJPG3ayAhCh+I7gmfzUSnHINKm8W1gVEoy53PiSIN5X
1BEQsmIDjTEnVMfFL4jvTuboc1BGKAyK8BqZexMv7TVddPrNUSFSjQiK36vaCSWy
O0oZtp5F75OteXUL5vWtlrbPJ9rxFOaGcBwhYjyhH+dAIj+UmsCjp8PrEodvxKnE
deWf39e8i7y78CPCtf/CydE2/JvaUEp2Mqe/FqGTSea42/239TQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:02 2026 by rpki-client