
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
File: F82E16FA44E704F6B79945E8313425503473FFC7.mft (raw, json)
Hash identifier: f2GluRyFFkpJ5F6FMtpP/o8cmZmd+yi9WUKq5NlBm9I=
Subject key identifier: 3C:B0:0F:7B:41:4C:21:CE:EA:0A:75:62:87:12:8A:6D:83:03:F2:90
Authority key identifier: F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7
Certificate issuer: /CN=F82E16FA44E704F6B79945E8313425503473FFC7
Certificate serial: 6A137CFAEB84A95568449530A9E61D26D1D75CBE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
Manifest number: F5
Signing time: Tue 03 Nov 2026 22:41:05 +0000
Manifest this update: Tue 03 Nov 2026 22:36:05 +0000
Manifest next update: Wed 04 Nov 2026 23:34:05 +0000
Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: 2lpnidzjfeZ4F/k2aPIOLu5qIVfYgZh5PoTfkKI6g5g=)
2: F82E16FA44E704F6B79945E8313425503473FFC7.crl (hash: J6BtnBwRrYQogbOsI988ZYNymwSyXVLL3pt+XE82UcQ=)
3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: E/btGwSpPVnr4uB6ixvWNVyUJ9J3wgIEyIH8A1Fswso=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl
rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:13:7c:fa:eb:84:a9:55:68:44:95:30:a9:e6:1d:26:d1:d7:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F82E16FA44E704F6B79945E8313425503473FFC7
Validity
Not Before: Nov 3 22:36:05 2026 GMT
Not After : Nov 4 23:34:05 2026 GMT
Subject: CN=3CB00F7B414C21CEEA0A756287128A6D8303F290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:37:52:cd:25:cb:88:ea:0b:f4:60:04:77:
d6:46:99:4d:5d:cf:6a:15:9e:02:1f:9b:cd:a7:30:
d7:d1:f1:ea:8d:af:0d:2c:aa:95:a7:9c:40:d1:56:
36:be:3f:c6:9d:74:ba:25:67:ba:37:36:76:20:b4:
27:c5:8f:cd:2c:dc:9a:91:91:71:df:cb:d9:a0:b5:
fd:ff:2c:b9:ad:ad:ce:61:01:73:0c:bb:6b:09:93:
2a:5b:74:ff:7f:3c:d8:eb:34:39:30:12:41:44:8e:
1d:89:f1:50:f1:19:14:af:c7:20:80:91:57:c6:87:
20:fc:6a:7a:c5:6d:39:fd:7e:2f:b8:bb:70:03:b7:
03:91:3b:9e:a8:49:26:d9:27:c1:14:29:a5:82:4a:
a9:86:25:06:1c:2a:60:9b:5c:76:b8:d4:27:75:98:
86:4e:f1:05:fe:a7:80:6d:10:95:0c:b5:d2:36:23:
2c:8c:ca:4c:32:f5:87:b1:5d:7a:88:e7:fa:1e:ec:
ca:af:91:50:af:f3:dc:5c:4a:58:e7:f3:b3:4b:ea:
1f:04:42:8c:48:03:f7:d2:82:88:e7:ba:13:6e:7d:
cc:c7:6f:62:52:4b:16:28:d8:5c:f8:79:45:c6:8a:
80:df:ec:f1:57:6c:80:7d:2f:0c:64:9b:23:b0:18:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:0F:7B:41:4C:21:CE:EA:0A:75:62:87:12:8A:6D:83:03:F2:90
X509v3 Authority Key Identifier:
keyid:F8:2E:16:FA:44:E7:04:F6:B7:99:45:E8:31:34:25:50:34:73:FF:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F82E16FA44E704F6B79945E8313425503473FFC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/F82E16FA44E704F6B79945E8313425503473FFC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7b:bc:43:e3:fd:2f:79:53:cb:f1:3b:f8:3f:93:ab:89:f3:
0a:b0:d9:ce:fa:75:25:a1:ae:87:47:bf:98:cc:7a:de:66:60:
8d:5f:61:cc:82:e5:ba:bb:95:07:37:fe:b2:4b:bc:29:e3:a3:
6c:8d:4d:f4:be:0b:28:3a:a0:5e:c4:5a:f3:e9:b5:38:f2:34:
d1:28:e1:e7:f4:02:6e:f9:f9:84:a3:32:84:5e:ce:e5:77:85:
42:b2:e2:3f:1b:15:55:26:ee:ec:a8:92:35:a3:a3:94:27:c7:
63:4d:ee:38:c2:00:54:18:fe:31:32:d3:14:cd:77:34:bb:8e:
29:06:99:42:a8:d0:c3:84:86:f8:6f:15:a0:71:e1:e2:c0:f5:
28:f2:e8:77:b4:08:e9:17:ba:0b:4c:62:42:0e:45:ca:70:80:
20:44:03:7c:13:19:0d:cc:81:cf:a9:c7:9b:3e:fa:f4:39:73:
0e:3f:5f:57:13:d7:c8:a1:2d:32:fa:df:12:90:56:e1:5d:1a:
e0:98:4a:aa:1e:6c:d4:64:89:7e:28:72:bc:0a:d4:62:d1:6a:
ce:fa:89:06:1f:5b:c6:5b:56:7c:e0:9b:8b:a9:11:c4:f4:7f:
72:1d:2e:39:ab:72:2e:0e:7d:ec:83:0a:76:2a:a6:be:e3:47:
93:de:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:24:28 2026 by rpki-client