
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
File: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft (raw, json)
Hash identifier: kou8k1PC6i4jf6itu8i3owNK++iuwQOCaNSL0eDWkYo=
Subject key identifier: C1:14:51:58:DC:4B:6D:E2:22:C0:2B:F6:D4:62:0A:7E:B9:34:06:95
Authority key identifier: 01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16
Certificate issuer: /CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
Certificate serial: 4D8409989ACF4EEA3C550BB72C52222CA0E714A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 15:49:50 +0000
Manifest this update: Fri 19 Jun 2026 15:44:50 +0000
Manifest next update: Sat 20 Jun 2026 19:00:50 +0000
Files and hashes: 1: 01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl (hash: oVW20hlFgMOvWt3HLiGkWSGsqEeaNPPFgo2l90QYqgI=)
2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: VsXO58FTVSxasgY1Mnu3yqI7EZkkcRqpzQFvmDd4qLs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl
rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:84:09:98:9a:cf:4e:ea:3c:55:0b:b7:2c:52:22:2c:a0:e7:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01F324EF5A8F6ACC92174D6AEED1129E1623A616
Validity
Not Before: Jun 19 15:44:50 2026 GMT
Not After : Jun 20 19:00:50 2026 GMT
Subject: CN=C1145158DC4B6DE222C02BF6D4620A7EB9340695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:17:4d:17:16:fd:28:97:27:eb:da:3e:6b:
7b:c6:60:98:6e:f4:eb:67:be:92:a8:ba:7b:71:4b:
a0:4b:2b:55:05:ee:e8:f4:1d:6f:2b:fc:77:96:93:
21:0e:41:b9:11:6d:fb:b7:d4:76:b4:af:ed:e9:36:
c3:5f:67:73:26:9e:62:78:2b:9a:7d:32:d9:50:3e:
11:1d:73:cb:31:86:6e:69:56:c7:26:41:7b:af:68:
8f:5f:85:c8:4b:a4:c8:fc:60:c7:5b:84:75:ba:4b:
a2:67:80:a8:24:85:eb:06:24:80:ed:6a:19:61:98:
14:c5:7d:a0:ba:f9:ea:ca:09:c4:49:e9:5b:aa:d9:
51:4b:20:18:65:77:b9:9f:f0:d9:de:ac:63:f2:01:
0c:b7:e2:97:2a:71:49:01:40:c4:55:7d:5c:14:2d:
05:54:aa:65:86:20:b7:47:20:6b:49:c8:4b:83:31:
05:c4:81:79:19:79:73:0f:a1:c7:8e:24:a4:3e:63:
27:f0:dd:63:9f:2b:95:af:75:45:14:6a:11:09:15:
78:a4:fd:37:f4:d9:dc:8f:e8:71:c6:95:16:9b:53:
a7:02:f5:48:eb:19:67:5b:74:a6:cc:15:cb:4b:cb:
a0:28:e7:4a:39:d3:a0:6a:ec:76:16:70:e9:cc:75:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:51:58:DC:4B:6D:E2:22:C0:2B:F6:D4:62:0A:7E:B9:34:06:95
X509v3 Authority Key Identifier:
keyid:01:F3:24:EF:5A:8F:6A:CC:92:17:4D:6A:EE:D1:12:9E:16:23:A6:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F324EF5A8F6ACC92174D6AEED1129E1623A616.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/01F324EF5A8F6ACC92174D6AEED1129E1623A616.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c8:cd:73:b2:fb:10:03:56:d1:94:71:c5:1f:8a:9b:c4:02:
93:ad:61:f0:80:43:31:1e:d3:59:53:0b:a8:25:3f:a8:fe:9f:
cd:fd:95:91:83:33:ff:1e:5c:d6:2a:eb:bd:85:2b:5f:d2:16:
97:12:e1:97:01:c8:f2:6f:e3:30:9d:5f:7d:17:7f:a8:9f:74:
3e:c6:ac:b5:71:e6:05:e7:4a:ac:f9:04:d9:e5:d7:4d:fb:58:
90:fd:2b:25:76:d3:29:cf:1c:d9:70:88:f3:56:2f:ee:c8:b4:
c8:06:0a:ff:a4:02:80:eb:72:fe:77:1d:a6:88:9b:f7:d3:b5:
e5:82:11:ef:0d:90:2a:cd:51:81:a9:8e:3b:eb:2e:c5:db:02:
de:72:da:82:c8:7f:0f:f4:dd:7a:e1:1e:13:9c:c3:7b:2b:99:
06:da:2a:72:b9:72:72:e9:59:76:0d:20:a8:be:a9:72:46:ce:
65:77:d3:2c:b9:f0:6b:45:08:06:9f:75:09:aa:53:d2:8e:b3:
f8:7a:9d:73:31:f9:dd:91:6d:05:29:29:09:bc:24:22:03:e1:
d9:35:26:73:5a:bb:40:69:f8:9c:23:c6:75:f7:c9:11:54:20:
6d:79:5f:d1:9e:72:4d:df:ab:6a:5e:3e:82:73:75:f4:2c:56:
64:b4:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:59:26 2026 by rpki-client