
$ rpki-client -vvf rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
File: 24707B538B36DD7E0788B2B83162969B177EE4B9.mft (raw, json)
Hash identifier: gPwVr/762GiEofTQ9e3Mdg25gq6X/h0vDW+NG2HyrdU=
Subject key identifier: 22:34:18:1F:A6:8A:C2:77:99:6F:BC:62:63:93:F0:2B:4B:69:CF:87
Authority key identifier: 24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
Certificate issuer: /CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Certificate serial: 49B05C8CFD91D2B0D10C03FF0C4B9AABB06A9FB9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
Manifest number: 4F
Signing time: Tue 30 Jun 2026 04:10:19 +0000
Manifest this update: Tue 30 Jun 2026 04:05:19 +0000
Manifest next update: Wed 01 Jul 2026 04:32:19 +0000
Files and hashes: 1: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: a2G2EWwhE4yFuhZ5jYn9ulCDBjyOhc2EYKslZtlGFac=)
2: 24707B538B36DD7E0788B2B83162969B177EE4B9.crl (hash: bfORKXcrcdWSSqB9SAXrV8qghiCXwnmFE7lqRYVaw2Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 04:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b0:5c:8c:fd:91:d2:b0:d1:0c:03:ff:0c:4b:9a:ab:b0:6a:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24707B538B36DD7E0788B2B83162969B177EE4B9
Validity
Not Before: Jun 30 04:05:19 2026 GMT
Not After : Jul 1 04:32:19 2026 GMT
Subject: CN=2234181FA68AC277996FBC626393F02B4B69CF87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:29:6d:28:29:84:f1:40:54:45:50:7d:19:
14:83:c9:fc:91:72:f1:af:8a:15:b1:ff:d7:45:09:
a5:53:cc:ab:ee:f0:a3:ee:ef:52:ed:7d:15:07:03:
08:33:08:72:54:8c:a5:2b:d0:90:e7:d5:84:dd:b2:
df:1b:12:72:b4:3f:38:9f:8a:b6:ae:b6:c1:84:77:
3a:48:d3:55:2c:2c:24:c0:de:79:d1:1a:99:58:e2:
68:d5:1d:25:61:8e:95:91:ae:2d:f0:ba:86:96:4f:
df:b8:98:01:96:42:70:19:c7:ff:35:8b:03:4e:1d:
40:a7:48:9b:52:9b:c8:10:3f:5c:63:7c:7c:50:d8:
da:45:64:37:37:e0:3c:db:b5:3c:75:49:44:fa:c2:
91:c9:d7:32:6f:64:63:d0:d3:cc:da:68:12:95:9d:
86:e7:73:55:0f:da:1b:5c:cc:28:9b:a2:15:bd:0f:
dc:d5:50:eb:26:a7:26:82:e7:b6:b1:b5:a2:3b:71:
da:1f:b9:c3:f7:b2:0f:3a:ed:5c:1a:ff:02:ca:36:
d7:85:35:79:a0:a7:10:d2:e9:0f:2e:20:0f:a9:a1:
db:f5:bf:79:21:06:7b:9a:dd:04:80:51:af:58:6b:
fb:57:ec:ee:a1:92:8e:a5:78:fc:46:e6:3b:bf:dd:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:18:1F:A6:8A:C2:77:99:6F:BC:62:63:93:F0:2B:4B:69:CF:87
X509v3 Authority Key Identifier:
keyid:24:70:7B:53:8B:36:DD:7E:07:88:B2:B8:31:62:96:9B:17:7E:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/24707B538B36DD7E0788B2B83162969B177EE4B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/24707B538B36DD7E0788B2B83162969B177EE4B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5a:14:fd:a1:1d:bc:ec:6b:3a:2d:98:d4:a1:2c:ec:18:4c:
f4:13:d3:8b:b4:27:8a:f2:57:32:2d:0e:e4:ce:0c:c7:7b:fa:
b9:15:ec:fa:dc:37:13:7c:97:51:f4:f1:c8:70:64:aa:cc:c7:
55:c1:47:42:ab:b1:7a:a4:35:e1:cc:3d:10:66:89:e8:2d:04:
85:e0:83:eb:5e:9b:5a:be:60:7d:19:c2:f9:e6:dd:f6:4f:9d:
c5:9b:fa:cf:80:a3:15:05:af:08:6c:fc:5b:c4:16:c0:e5:3b:
b5:b3:bb:37:b6:24:83:82:cd:f9:fb:50:ce:ef:b8:c5:9e:3c:
aa:78:f6:97:33:76:6c:a2:73:95:ae:e1:b9:b8:ee:ca:c6:49:
e0:50:1d:2b:ec:fb:5c:32:cd:30:c1:09:db:58:fe:25:6f:99:
2e:01:60:a4:1c:4c:1d:2e:88:13:52:c3:3e:d6:50:f5:ff:49:
7c:14:37:ef:bf:6c:3f:16:c5:ea:ea:2d:d7:46:f1:fb:32:24:
56:58:ec:8f:19:07:2a:ff:bf:14:c8:18:25:ba:7a:ae:e2:5c:
fa:28:7a:f5:e3:14:41:8e:52:7c:16:0b:67:85:99:cf:5a:3d:
24:b7:35:97:52:3c:87:1e:e5:fc:c8:2a:7a:db:1a:3a:8f:2b:
58:57:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:20:32 2026 by rpki-client