
$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json)
Hash identifier: wToj1nb5NG3eB+cjmUOB0dKZ/byc2pYcxP9A4A0udj4=
Subject key identifier: 70:AD:B5:06:14:93:3F:71:CC:01:4D:CE:AC:CF:BA:BB:4E:36:75:88
Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Certificate serial: 79A6B99EDE7229C81BA2267360FC549B1C6D0B21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
Manifest number: 55
Signing time: Sat 04 Jul 2026 17:23:19 +0000
Manifest this update: Sat 04 Jul 2026 17:18:19 +0000
Manifest next update: Sun 05 Jul 2026 17:33:19 +0000
Files and hashes: 1: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=)
2: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=)
3: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=)
4: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=)
5: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=)
6: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=)
7: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=)
8: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=)
9: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: xyrla3Q5FOzbh/+c6QwHM+PV2oaqd8TASOfe4kxbxfQ=)
10: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=)
11: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=)
12: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 17:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a6:b9:9e:de:72:29:c8:1b:a2:26:73:60:fc:54:9b:1c:6d:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0
Validity
Not Before: Jul 4 17:18:19 2026 GMT
Not After : Jul 5 17:33:19 2026 GMT
Subject: CN=70ADB50614933F71CC014DCEACCFBABB4E367588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:00:e6:10:d6:3d:df:46:25:6f:aa:8a:ef:
0a:24:a4:41:e2:78:90:91:e2:33:7d:86:62:f3:32:
b7:ad:46:f6:23:0f:cd:be:25:17:91:d2:dd:2a:62:
ce:5a:d6:3e:08:f3:09:11:d1:e6:75:a8:8b:ef:ac:
da:43:7c:31:c5:21:00:1c:10:65:fc:dc:b6:7e:0a:
ab:dc:46:de:da:cb:bc:60:ee:29:81:04:63:4f:31:
e1:36:03:94:8e:27:c4:0b:9a:80:2b:17:d9:67:42:
b9:84:41:8a:71:75:e9:e3:56:b3:a3:b8:67:73:5d:
27:30:5e:8a:53:61:c3:8f:40:bb:f0:39:28:b5:ab:
fd:19:b8:3c:c2:54:4a:6a:dd:12:ed:65:77:96:29:
5e:88:f7:a5:67:b9:df:fc:1f:32:11:34:3f:ec:61:
60:6a:f3:8b:24:f8:ba:d0:81:0b:35:82:7a:ef:12:
47:d5:cb:e2:51:03:02:e1:f6:60:07:37:ac:97:3a:
ff:70:e8:5e:55:07:e4:3d:34:de:31:4c:eb:d6:b0:
25:04:81:98:c8:c4:d3:24:8c:02:dc:7c:45:93:bb:
e1:c0:89:a7:0c:9d:44:fe:c8:ae:6a:04:f8:7f:86:
bd:a0:fd:02:65:03:51:5c:70:5b:d0:21:5f:4d:ea:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:B5:06:14:93:3F:71:CC:01:4D:CE:AC:CF:BA:BB:4E:36:75:88
X509v3 Authority Key Identifier:
keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:93:56:a0:d7:76:d9:78:82:ef:4c:e5:bc:69:5a:bd:fe:
f0:fb:a7:b9:29:a1:11:37:1f:1f:ef:fc:d6:c0:5f:01:19:c6:
06:6b:82:89:f9:dd:8b:11:a6:3a:0b:1d:a2:24:2e:cd:80:41:
82:34:5b:2f:ef:3d:2b:fa:17:ae:3a:17:a2:ff:d7:6f:15:3d:
69:88:b0:32:c9:45:55:b1:2d:ed:3d:9e:45:82:41:86:23:23:
c9:59:c9:05:7c:96:ec:7f:52:aa:93:81:da:46:af:cf:d2:37:
d2:47:92:2f:23:50:f7:ce:6e:8c:51:76:62:d5:bd:99:92:c2:
b6:98:65:83:0d:60:09:1a:42:26:cd:51:dd:77:56:86:39:73:
52:61:80:ac:96:69:fa:33:82:9a:ad:06:1a:f1:04:bb:26:62:
ac:e5:3a:81:f1:1d:fd:6a:5c:13:5b:2a:bc:d5:a8:41:17:7f:
51:23:bf:c2:ed:91:37:98:83:0c:1f:da:51:cc:9b:b5:c7:56:
f3:a5:f1:80:5c:34:80:5c:84:c8:67:ea:97:ff:35:50:12:cc:
11:aa:fb:f7:ca:30:d6:1b:ff:05:a6:af:29:44:56:8d:15:42:
b6:f6:53:e3:58:0a:53:aa:d7:19:a9:7c:fc:1b:8d:d4:74:af:
e2:cf:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 03:54:21 2026 by rpki-client