
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
File: F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json)
Hash identifier: E7PMl2+jk8N1nzsIV3K6h+/NXMH33dtJbwmtcPyKEJQ=
Subject key identifier: BA:9B:C3:E2:5C:0B:F7:3E:B6:5F:8A:B4:C7:B1:A6:E1:C6:22:75:B7
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Certificate issuer: /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial: 449D90163195DF1AB1B04C1777E130114A50BA07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 15:51:23 +0000
Manifest this update: Sun 19 Jul 2026 15:46:23 +0000
Manifest next update: Mon 20 Jul 2026 15:53:23 +0000
Files and hashes: 1: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=)
2: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: EM8pxZ7dt37y+G3CEysviODB3k0PBTo9BVTowaj/yIo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 15:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9d:90:16:31:95:df:1a:b1:b0:4c:17:77:e1:30:11:4a:50:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
Validity
Not Before: Jul 19 15:46:23 2026 GMT
Not After : Jul 20 15:53:23 2026 GMT
Subject: CN=BA9BC3E25C0BF73EB65F8AB4C7B1A6E1C62275B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:c7:98:7f:8c:42:3d:6c:39:d3:51:91:02:
07:d7:5a:41:e8:54:59:52:0f:94:82:c4:ef:a9:7f:
37:31:e1:d9:03:bf:e9:e7:6d:1f:df:68:96:3f:5e:
1a:79:af:93:61:84:8a:08:92:11:47:10:40:e0:d7:
9b:b4:7a:2a:f9:d9:f2:52:f0:9d:6a:f2:21:d9:38:
c2:bd:c6:bb:2b:06:01:c7:40:73:4a:68:c5:f6:99:
24:3d:a4:b0:c1:c2:01:22:d1:ae:dc:5e:27:61:4f:
43:a1:9a:d5:2b:9b:da:64:92:72:0b:20:cf:fb:39:
34:b9:37:2b:74:5a:23:a2:b7:74:16:d2:75:fe:53:
07:74:4a:05:fe:81:c1:bd:9b:bd:96:45:5c:e9:91:
5d:3a:d9:2d:3f:16:99:df:be:30:f9:09:1d:02:69:
20:c3:b1:ae:c5:9c:ce:67:76:3b:b5:43:68:87:b4:
0e:1b:d3:2b:8e:c8:72:c8:e2:f1:1e:ce:b7:f9:f6:
0e:3c:b7:2f:6e:ba:6b:0e:aa:54:61:3a:af:5e:4b:
3b:72:42:72:e5:2c:0a:b7:3d:b7:8f:9b:c4:b9:08:
d5:b0:3e:3f:bd:fb:44:dd:02:e4:b0:64:ae:41:f9:
d2:51:b4:26:fa:2a:95:a9:a5:db:9c:63:23:59:62:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:C3:E2:5C:0B:F7:3E:B6:5F:8A:B4:C7:B1:A6:E1:C6:22:75:B7
X509v3 Authority Key Identifier:
keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:22:c1:36:84:44:cc:ad:af:80:bb:9b:32:60:7e:7e:51:
af:dd:3a:3b:79:8e:ae:2f:60:20:1c:b1:77:6e:0f:38:db:c6:
e6:4d:a3:6a:7a:ac:cd:34:3a:45:5e:bb:b0:48:e9:dc:8f:5b:
5c:98:1c:e2:54:63:80:9b:99:65:b5:ea:16:50:7e:39:81:96:
f7:ec:3d:31:bb:06:e2:50:56:6e:cc:eb:d0:12:89:2b:7a:46:
04:18:7e:21:3e:1a:98:ea:96:ef:b6:ce:ab:7b:8c:e2:69:c8:
bd:47:b4:2e:39:6a:6b:7a:0e:bb:06:ba:16:b2:33:3f:a7:d7:
b8:9d:87:95:c1:b1:94:51:4b:87:92:08:2a:6d:5a:7d:da:49:
67:7e:07:f6:75:fa:9d:5f:7d:3d:70:2f:ed:55:b9:dc:44:fa:
17:12:4f:d1:0c:e3:13:d6:66:63:e7:4d:ac:2a:27:2d:34:d6:
b6:a2:1f:63:43:ac:bf:b5:b4:1b:f8:c4:07:5c:dd:82:9a:fc:
ec:62:3d:5e:9b:5a:9e:72:c7:98:a7:31:79:4e:a6:fa:ae:22:
6e:82:d3:2b:41:67:ac:cf:78:2f:6f:15:a6:61:76:34:7b:b5:
a7:13:25:e4:51:6b:51:a5:49:72:b3:02:ba:e9:b7:0e:b8:1b:
4a:19:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 04:32:10 2026 by rpki-client