
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json)
Hash identifier: tcTWhVkiYgLrnHsjIYWmYBAZswEvd83h+0CgFMa/feA=
Subject key identifier: AD:CF:9A:CE:0D:E1:46:1A:0D:7C:00:64:14:80:08:BC:28:9D:06:6F
Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Certificate serial: 240F55202D38CC0DC144E81E4FB05C9D3CA3BCD3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 17:02:52 +0000
Manifest this update: Sun 19 Jul 2026 16:57:52 +0000
Manifest next update: Mon 20 Jul 2026 17:54:52 +0000
Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: SeYogKHmhgLVgXqVOH/CLGhmh2sinvNzGWw4wbx5QCI=)
2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0f:55:20:2d:38:cc:0d:c1:44:e8:1e:4f:b0:5c:9d:3c:a3:bc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1
Validity
Not Before: Jul 19 16:57:52 2026 GMT
Not After : Jul 20 17:54:52 2026 GMT
Subject: CN=ADCF9ACE0DE1461A0D7C0064148008BC289D066F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:d2:d3:7a:fd:9b:47:24:85:bf:0a:3d:51:
fb:5f:5e:b9:f4:c6:49:41:f1:7a:2c:92:c7:49:16:
e8:b4:9f:50:f3:36:d5:ec:91:6c:5d:17:bf:25:14:
18:45:47:e7:95:e3:7b:11:ae:c3:15:b5:40:3a:5a:
2e:ce:d2:d7:02:f3:69:ba:7e:27:eb:72:27:3c:d2:
4c:5b:0b:c0:d8:0d:27:00:d9:60:75:d0:ad:cb:4e:
d0:0a:d1:c3:1e:4f:d1:6c:ad:cf:ca:06:db:df:6d:
fe:4f:29:16:e1:36:08:fe:fa:4c:ed:4c:97:35:85:
9d:b6:ce:7f:bb:8a:a4:9d:d0:5b:cf:6f:bd:af:e7:
97:8a:46:d6:d8:1b:65:8d:eb:9d:cc:60:51:03:be:
f2:74:16:dd:bd:2b:aa:82:f9:4f:18:41:9f:68:25:
49:6f:67:cc:c3:36:87:aa:ec:ea:7f:ab:67:68:da:
2d:97:9b:db:bc:4c:6d:69:42:fc:6d:c1:0b:24:1b:
5e:b5:5e:9b:4f:17:92:3d:7b:6d:0d:be:6a:8d:51:
a6:be:ce:43:83:b7:c4:0d:e0:19:d8:2d:f0:cf:6e:
da:cc:5a:91:1f:52:35:05:84:00:9b:ea:b0:ee:5e:
bb:95:4c:98:d7:88:23:eb:88:29:3b:47:8b:a9:f9:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:9A:CE:0D:E1:46:1A:0D:7C:00:64:14:80:08:BC:28:9D:06:6F
X509v3 Authority Key Identifier:
keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:08:dc:9b:e3:0b:32:d8:94:dc:eb:e0:3d:b7:80:8a:cb:03:
96:31:fc:33:2f:4a:dd:8b:db:02:39:c6:4b:32:f9:c7:75:09:
ae:55:22:1f:9f:1a:29:40:65:6c:57:87:59:0e:ee:bd:bb:4f:
6d:ac:32:e2:82:de:05:80:87:9e:da:02:e2:aa:04:ae:53:d9:
fc:84:ff:12:5e:00:fc:8a:27:cc:59:8f:b6:9a:0e:a2:7d:3c:
ed:12:96:c7:1a:f0:11:04:06:9b:e2:73:08:b3:70:44:61:29:
57:2e:7f:8e:2d:ac:e0:35:56:0c:2b:07:80:f9:4f:a1:65:7f:
1e:e5:35:ff:7a:ee:62:e4:d6:25:47:5f:75:80:15:b9:5a:ac:
09:c3:ce:98:02:fd:e7:ca:69:65:c1:bd:a5:12:f9:54:b7:80:
60:a6:a5:f5:07:e4:1f:60:69:3a:b9:05:69:cf:73:e9:07:27:
07:08:5f:d6:32:66:af:c9:c6:1d:3d:81:05:3a:f2:57:d3:bf:
4a:dd:5b:18:bd:57:bc:db:80:a6:31:60:4e:c0:61:c6:03:59:
71:8d:73:f7:ce:ec:6f:68:be:38:c2:bc:53:76:c4:46:8b:8b:
ec:c1:46:e5:05:36:e6:c8:5d:80:e3:01:35:5f:d8:4e:0e:a0:
c6:c0:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:30:08 2026 by rpki-client