
$ rpki-client -vvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json)
Hash identifier: HjzsEvBzNSRvb+TrlFqNKPqT2po2iL5LVFFPn10ifOs=
Subject key identifier: A5:BF:9F:7C:E9:A1:79:90:98:F3:BB:D2:2B:27:1A:29:42:4E:EC:E6
Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Certificate serial: 30ABE8B0F4A5589ED60464A942914E291B0478EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
Manifest number: 11
Signing time: Thu 14 May 2026 13:09:30 +0000
Manifest this update: Thu 14 May 2026 13:04:30 +0000
Manifest next update: Fri 15 May 2026 13:54:30 +0000
Files and hashes: 1: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: VuNrGluAaM/7Pz4r5EPCs05oxX2zOo8Sc13zhinT0Tc=)
2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 13:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ab:e8:b0:f4:a5:58:9e:d6:04:64:a9:42:91:4e:29:1b:04:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Validity
Not Before: May 14 13:04:30 2026 GMT
Not After : May 15 13:54:30 2026 GMT
Subject: CN=A5BF9F7CE9A1799098F3BBD22B271A29424EECE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:75:26:e0:1d:c1:55:36:21:b7:6e:a2:14:
d6:e8:1d:f7:4d:63:98:06:f6:37:f9:7b:28:e2:6c:
f9:69:82:eb:09:aa:2c:4f:53:00:9f:f2:12:ea:c6:
45:bd:52:f8:41:08:63:ae:a7:ff:eb:4f:db:e8:36:
01:cb:67:cc:8b:c8:75:71:07:71:ec:47:08:60:26:
df:3f:8f:a7:0d:5d:52:87:07:39:64:69:68:87:09:
cf:46:0d:64:32:d6:9a:d8:08:06:10:28:b5:fe:62:
c2:54:d9:5b:eb:a2:b4:22:df:4f:89:4c:fe:0a:c9:
43:86:e1:48:1b:11:15:12:cf:de:ab:ab:eb:7f:7d:
d2:12:ad:98:43:64:b2:6f:41:cd:9a:bc:1e:95:34:
54:c4:cb:d6:22:e6:29:12:e3:20:7b:ee:d3:e8:66:
fa:82:7d:76:cc:97:8f:d2:44:1b:0c:c1:f5:47:08:
18:37:6a:df:a4:d9:e4:ab:91:f2:79:67:9e:ca:1e:
f8:3f:bf:de:63:0f:cb:48:2b:fb:01:d5:9e:90:7b:
02:d5:a5:03:83:11:db:3c:b0:bd:1c:bd:08:69:f9:
ea:1b:d8:b3:b2:70:ae:d8:9f:76:42:c5:2a:81:19:
8b:74:a6:83:8f:cc:ba:24:4d:cb:33:46:c8:05:a9:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:9F:7C:E9:A1:79:90:98:F3:BB:D2:2B:27:1A:29:42:4E:EC:E6
X509v3 Authority Key Identifier:
keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:23:b8:ff:34:b7:37:fc:cc:dd:f1:de:d4:36:5e:1a:2f:
a4:5b:6b:5a:eb:f4:34:86:d9:2c:f9:49:0c:d5:0a:45:b9:96:
28:81:ff:11:e2:7d:20:81:4d:f4:ab:7e:d6:fe:9e:52:5b:c0:
f4:5f:1f:2b:be:b2:08:40:b5:de:1a:c1:b7:4d:73:d3:fd:c2:
d6:a4:03:4d:c4:9f:28:b9:c9:de:9c:7c:6a:06:b2:30:03:a4:
e9:0a:bd:ff:de:27:bf:3c:2f:59:fb:96:12:43:3f:a2:d7:3f:
ce:6e:ad:15:b3:f1:44:3c:55:94:55:08:10:90:fe:2b:86:61:
15:62:9d:a8:06:61:bc:c0:67:89:71:bd:90:46:ec:71:57:a0:
a4:b3:0f:a3:51:99:db:96:fa:3f:92:75:1e:91:98:2b:49:be:
ad:50:b7:d1:11:0b:a5:df:72:b4:ca:b6:cb:5b:f2:07:b2:45:
67:8d:06:80:06:e8:7b:3a:b7:4f:99:7e:4c:94:44:f0:14:f4:
77:99:9a:2c:c6:6b:e3:81:7c:f5:c5:a9:73:12:f0:0d:a1:a6:
70:24:30:f5:7f:3f:01:3a:10:46:a2:d7:7e:30:29:72:11:88:
61:7a:f4:42:0c:ce:02:9f:f0:cb:2c:04:b9:e0:d9:99:67:d7:
6a:db:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:39:37 2026 by rpki-client