
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json)
Hash identifier: n6SN3eInrDjzHsD/Z8emvx8QAOVpIridvENVrSB2E5I=
Subject key identifier: 5A:F8:4C:AC:0F:60:8A:8F:3B:0E:62:6D:E8:19:DF:5F:C2:40:37:DE
Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9
Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
Certificate serial: 7C97D116D2CC4B0F08E05E07739A03476DFDDD76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
Manifest number: 7D
Signing time: Mon 03 Aug 2026 10:39:45 +0000
Manifest this update: Mon 03 Aug 2026 10:34:45 +0000
Manifest next update: Tue 04 Aug 2026 14:26:45 +0000
Files and hashes: 1: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: 7WLvKcjZGNxNkJZvVp4fHWBgYeFl4TB6UeAYWMnkEfg=)
2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl
rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 07:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:97:d1:16:d2:cc:4b:0f:08:e0:5e:07:73:9a:03:47:6d:fd:dd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9
Validity
Not Before: Aug 3 10:34:45 2026 GMT
Not After : Aug 4 14:26:45 2026 GMT
Subject: CN=5AF84CAC0F608A8F3B0E626DE819DF5FC24037DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:0e:30:75:74:49:b9:f9:b8:6a:e2:17:76:
d3:7b:6c:df:f0:43:ac:b9:ee:4b:ef:a7:b8:5d:63:
60:50:b0:51:cf:64:3f:00:13:12:b0:e1:92:61:64:
7d:61:63:ae:2e:f2:39:b9:e5:04:c2:a9:3a:69:61:
ce:31:f9:9d:39:56:62:ea:9d:91:99:66:4d:51:86:
d3:07:ef:d5:03:a7:3a:ce:c9:33:ea:11:f9:3b:66:
e2:5b:bc:0f:22:3b:a9:67:88:75:b8:ab:46:be:db:
40:c9:c3:0d:0f:cd:1a:ad:d6:16:2d:ee:43:1a:50:
a4:8c:16:27:9a:37:34:44:b5:ad:05:28:24:29:59:
1e:a0:cf:87:b7:c9:c4:e9:5b:64:8f:d8:7b:29:62:
99:c5:cf:e0:13:54:8d:98:7c:cf:96:88:2f:53:08:
71:00:fa:17:14:d3:ed:fa:bd:ca:a5:0a:b2:43:7b:
63:70:9a:1d:02:fa:a3:7e:ba:ff:50:c6:f9:92:a1:
99:89:4c:14:5d:3c:90:88:fd:f8:6f:f1:56:19:0f:
26:b4:84:db:de:7a:83:b9:ca:0f:c9:c4:ff:c2:d5:
f8:d6:b6:8e:25:f6:4f:09:86:ea:b9:81:b6:1a:67:
e8:75:24:84:c8:77:29:5c:e3:91:c4:88:c4:ed:4b:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:4C:AC:0F:60:8A:8F:3B:0E:62:6D:E8:19:DF:5F:C2:40:37:DE
X509v3 Authority Key Identifier:
keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:17:d3:53:77:44:7c:fa:f5:22:c9:9b:8b:d9:c1:c8:d9:da:
a4:12:67:6a:fa:81:88:53:5c:24:43:ee:22:4b:6e:6c:ab:ad:
9d:c9:7a:f4:f2:93:00:c3:4e:c9:85:b2:77:2c:27:83:9d:bd:
5e:54:10:f4:30:3e:8e:a3:d4:da:34:cc:16:e5:48:47:57:37:
70:44:93:85:44:8c:67:9c:66:2c:f5:57:4c:85:b7:91:44:a3:
90:3c:3a:1a:33:38:4d:cd:4c:f5:1c:c2:80:6d:89:ca:8e:dc:
20:53:9d:53:24:65:90:98:2d:ce:06:da:c1:fc:06:3e:85:1b:
a2:29:5d:97:42:f6:c6:98:64:8c:30:0c:89:c2:9a:ad:3d:4a:
86:a0:a5:ed:9f:f2:99:5d:bc:e1:82:09:16:56:47:90:49:42:
7c:45:67:df:cd:09:61:62:be:e7:95:c6:f7:31:bb:1c:2f:9b:
04:ae:44:c5:d8:1d:8c:4b:10:c9:34:23:b5:62:f3:0c:43:ad:
f4:5e:51:4e:39:dc:e1:b5:92:2e:71:3c:f6:80:0b:46:da:56:
5e:50:1d:13:10:27:c8:22:66:15:62:6d:30:69:b3:85:3d:7c:
e6:11:ce:15:44:6b:74:1b:1c:6f:48:34:db:78:84:4c:51:6a:
f3:82:05:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfJfRFtLMSw8I4F4Hc5oDR2393XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw
NDhDMEZDOTAeFw0yNjA4MDMxMDM0NDVaFw0yNjA4MDQxNDI2NDVaMDMxMTAvBgNV
BAMTKDVBRjg0Q0FDMEY2MDhBOEYzQjBFNjI2REU4MTlERjVGQzI0MDM3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GA4wdXRJufm4auIXdtN7bN/w
Q6y57kvvp7hdY2BQsFHPZD8AExKw4ZJhZH1hY64u8jm55QTCqTppYc4x+Z05VmLq
nZGZZk1RhtMH79UDpzrOyTPqEfk7ZuJbvA8iO6lniHW4q0a+20DJww0PzRqt1hYt
7kMaUKSMFieaNzREta0FKCQpWR6gz4e3ycTpW2SP2HspYpnFz+ATVI2YfM+WiC9T
CHEA+hcU0+36vcqlCrJDe2Nwmh0C+qN+uv9QxvmSoZmJTBRdPJCI/fhv8VYZDya0
hNveeoO5yg/JxP/C1fjWto4l9k8Jhuq5gbYaZ+h1JITIdylc45HEiMTtS+7nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWvhMrA9gio87DmJt6BnfX8JAN94wHwYDVR0j
BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND
MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw
RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1
M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF
QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIEX01N3RHz69SLJm4vZwcjZ2qQSZ2r6gYhT
XCRD7iJLbmyrrZ3JevTykwDDTsmFsncsJ4OdvV5UEPQwPo6j1No0zBblSEdXN3BE
k4VEjGecZiz1V0yFt5FEo5A8OhozOE3NTPUcwoBticqO3CBTnVMkZZCYLc4G2sH8
Bj6FG6IpXZdC9saYZIwwDInCmq09Soagpe2f8pldvOGCCRZWR5BJQnxFZ9/NCWFi
vueVxvcxuxwvmwSuRMXYHYxLEMk0I7Vi8wxDrfReUU453OG1ki5xPPaAC0baVl5Q
HRMQJ8giZhVibTBps4U9fOYRzhVEa3QbHG9INNt4hExRavOCBRM=
-----END CERTIFICATE-----
Generated at Tue Aug 4 00:46:51 2026 by rpki-client