
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json)
Hash identifier: LwPNBsya46PxexB7D1kr4hck3PE8/XV3yaxh0Nedx+E=
Subject key identifier: DD:5D:2A:C4:69:2D:7F:4A:92:D0:9C:84:90:4C:63:39:59:F7:95:A5
Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Certificate serial: 16BC9FAD28C8B9E673F4B2FA04555D03607AFE75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 17:23:59 +0000
Manifest this update: Wed 02 Sep 2026 17:18:59 +0000
Manifest next update: Thu 03 Sep 2026 21:17:59 +0000
Files and hashes: 1: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: Ij/eCmtjVUeeJxu2SWJz/hKHcdHBwy+9Ol51656XII4=)
2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:bc:9f:ad:28:c8:b9:e6:73:f4:b2:fa:04:55:5d:03:60:7a:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Validity
Not Before: Sep 2 17:18:59 2026 GMT
Not After : Sep 3 21:17:59 2026 GMT
Subject: CN=DD5D2AC4692D7F4A92D09C84904C633959F795A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:05:8d:3b:af:75:31:3b:b0:08:90:b4:dc:
dc:d2:45:78:09:bd:82:be:ab:4d:22:46:9f:18:d4:
44:10:40:96:68:7d:27:4d:b2:a8:36:84:b1:ad:57:
72:55:35:0d:dd:a6:72:4f:0b:8e:a0:55:b9:0e:e6:
1f:8d:89:3f:15:93:07:45:10:6d:b1:a2:28:70:84:
c7:7d:d8:00:c6:89:fe:23:fd:a1:5e:45:4c:5d:8b:
18:01:28:3e:98:03:8c:08:51:9e:98:0a:b3:1a:1e:
79:d2:35:15:db:15:23:5a:1b:15:c3:13:d3:3e:92:
e9:59:fb:57:95:0a:7a:c9:e5:3d:59:ea:13:c2:a7:
53:dc:7f:50:9c:d0:e0:fe:2c:82:2f:50:86:81:40:
cf:d9:80:0b:df:94:95:b2:02:4a:9f:3c:39:48:f1:
32:cb:2c:b1:cf:76:34:fc:c9:b5:ea:1a:ae:96:60:
9b:ea:37:5a:db:55:ec:15:bc:ac:36:3b:e3:7c:a0:
dc:79:91:f6:ea:87:3e:45:29:c2:3a:04:03:ff:25:
1a:fe:97:ac:20:66:7f:d0:ca:c0:a0:34:8a:0a:79:
57:ed:e7:5c:eb:cd:0e:5f:c6:b9:43:f6:df:cf:cd:
d0:90:d6:49:cf:b2:4f:7f:95:ea:f0:92:96:1f:50:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:2A:C4:69:2D:7F:4A:92:D0:9C:84:90:4C:63:39:59:F7:95:A5
X509v3 Authority Key Identifier:
keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:f2:93:ab:88:e3:0a:3f:ec:d9:f9:09:37:6f:bd:40:e1:
e8:68:b4:0f:b6:51:ff:63:05:cc:c1:09:9a:c9:cc:b7:93:36:
6e:1b:e2:85:b1:6d:5a:43:0f:6e:7d:54:8e:c2:fe:37:02:54:
5b:13:df:da:23:61:d5:9b:14:dd:a1:5f:9e:8c:95:a5:e4:70:
98:1e:c5:86:07:54:7a:ad:75:34:a3:63:f5:24:51:1d:ef:4d:
48:8c:c8:b8:a6:c1:c5:9f:ae:05:24:30:0d:c9:7f:cc:09:8e:
5c:7c:f4:1e:50:07:8b:fc:42:b6:4f:70:a6:22:81:ea:3b:a0:
09:54:f8:f4:cd:a3:78:12:cd:6c:58:6d:56:38:37:48:39:49:
67:bd:b7:2a:e7:7a:3a:18:3d:c6:02:06:6f:94:2b:6d:0c:09:
d4:45:66:1b:ba:26:1c:fd:60:62:93:d6:45:94:d8:ee:23:93:
ce:0e:c8:11:cb:ec:8d:76:64:45:7c:c8:62:a0:b3:3c:04:d3:
5a:17:e8:41:6f:83:7b:04:78:46:c2:75:98:88:da:94:e8:40:
59:a2:7e:86:2f:84:bf:34:6b:e7:6a:8f:16:a4:a4:23:18:8b:
2d:b9:ce:8a:6e:93:72:89:65:fc:3f:ef:33:e9:f2:e7:a3:ad:
ec:bd:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:01:15 2026 by rpki-client