
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
File: F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json)
Hash identifier: sK0OfaZ7xBbvUKz7v3gku8iqOPse9mP8bWbhtDQxcks=
Subject key identifier: BB:62:1E:0E:22:2F:35:E2:C7:6B:DE:E6:24:90:9C:0C:67:0C:1F:41
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Certificate issuer: /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial: 641F713F8E103DEEBAE047643168894ECD6573FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
Manifest number: 2C
Signing time: Wed 03 Jun 2026 00:25:18 +0000
Manifest this update: Wed 03 Jun 2026 00:20:18 +0000
Manifest next update: Thu 04 Jun 2026 03:39:18 +0000
Files and hashes: 1: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: PlyjTUbVqyeossXjPFy8ZcWEM2Of1K0JMQkIvyQ3K3o=)
2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 03:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1f:71:3f:8e:10:3d:ee:ba:e0:47:64:31:68:89:4e:cd:65:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
Validity
Not Before: Jun 3 00:20:18 2026 GMT
Not After : Jun 4 03:39:18 2026 GMT
Subject: CN=BB621E0E222F35E2C76BDEE624909C0C670C1F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:26:53:c3:8b:47:89:59:d6:c1:bd:a5:c1:
fb:80:1e:e4:8a:f9:03:4e:29:67:18:dd:08:af:f9:
92:1b:6d:5d:dd:7c:d1:17:48:ee:ec:3a:05:a4:6c:
90:f5:f4:9c:f5:6b:aa:e6:f5:64:bd:b6:31:7b:f2:
ef:34:5d:d0:8d:0f:54:13:13:f1:0e:d1:41:21:9b:
06:5c:58:7d:c1:a9:c3:d3:19:f5:dd:67:bc:85:92:
70:68:49:68:da:93:cb:38:ba:a3:e4:af:63:78:8a:
eb:f7:7f:d2:e5:92:c6:0f:14:91:4b:4a:fa:91:54:
2d:69:e3:1d:4c:7b:ec:76:dc:cd:1c:d6:34:72:40:
2e:1d:2a:1c:85:92:4a:2f:90:a6:54:40:d5:31:c8:
d2:cf:fd:e6:66:68:bf:70:2d:a6:cd:cc:2f:6a:15:
ff:34:46:9f:b0:b6:67:cc:55:7f:26:e2:4f:2e:07:
e7:88:c0:74:aa:5f:7e:cb:12:39:10:c4:08:00:c1:
30:80:26:d6:c4:9f:cd:9a:b2:ae:72:06:8d:49:08:
1e:de:ea:52:89:da:d6:19:98:e6:f6:22:d6:1b:b2:
82:4b:f1:eb:25:c8:59:9f:64:04:e1:e7:5e:ee:54:
d4:64:54:60:13:90:a2:4a:13:76:d3:b0:94:01:a7:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:1E:0E:22:2F:35:E2:C7:6B:DE:E6:24:90:9C:0C:67:0C:1F:41
X509v3 Authority Key Identifier:
keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:f8:b5:76:46:9e:f7:d6:a9:4e:b1:ca:cf:20:78:b1:72:
c9:4d:3f:73:32:d2:70:e3:03:d6:e4:9c:5c:06:2f:6d:90:4d:
a9:65:61:d1:b8:7b:c7:de:52:04:ec:a9:13:8d:41:1b:be:1b:
e0:2b:e9:83:08:c1:6e:66:14:1e:17:f7:0d:44:2e:80:3f:ca:
4b:3a:2a:22:c4:ea:e3:73:5a:05:37:7f:d7:4a:aa:fa:6a:db:
b2:f1:24:41:06:e3:b3:ce:e2:59:46:2e:e6:e1:1a:3d:45:ab:
1f:6f:d9:3d:63:34:04:bb:4e:22:39:97:40:75:f8:32:9d:70:
df:60:a6:6a:68:07:bf:14:04:32:d8:34:89:1b:42:37:45:c2:
43:e2:97:3d:4d:42:fd:01:76:72:f9:e7:b5:54:ee:b1:bc:fd:
79:aa:b3:e9:f1:5a:88:81:8a:ed:97:32:33:52:06:9e:49:e8:
dc:19:73:bc:41:81:4f:18:cc:5e:50:2c:a6:6c:b7:86:16:38:
c0:03:35:29:8c:87:b0:7a:a7:ad:cf:57:71:29:e6:61:44:a5:
15:39:51:a0:3c:bf:36:b2:37:d1:27:c0:e3:c1:5d:35:9b:d5:
4e:62:50:0c:d4:e6:42:c2:84:ae:94:5a:29:17:26:6f:9a:77:
43:12:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:12:04 2026 by rpki-client