
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft
File: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft (raw, json)
Hash identifier: QTnOBcAZBkIFt7nCNNfODs3GiqOWTz7R1ARWTL9Z90A=
Subject key identifier: 7E:22:87:A9:60:22:87:B6:08:EB:CA:62:FF:71:BA:03:51:49:22:F8
Authority key identifier: F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA
Certificate issuer: /CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA
Certificate serial: 70BC5AB2817A946513D84E540CCBA0B61B9B8A4A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 06:18:40 +0000
Manifest this update: Tue 21 Jul 2026 06:13:40 +0000
Manifest next update: Wed 22 Jul 2026 07:30:40 +0000
Files and hashes: 1: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: P6O2GRvb5cY6yS3BwOz9xCf5V2VK8SPqxHthNi6b0ow=)
2: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl (hash: Yoh57G/mSolA23vPRlfi6336opkEsFsW6P269DBQpJ4=)
3: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: itZ+8oqZQEHdOx3DPzPsElXFujBFH/zjw2oYoQ+F7xc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl
rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bc:5a:b2:81:7a:94:65:13:d8:4e:54:0c:cb:a0:b6:1b:9b:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA
Validity
Not Before: Jul 21 06:13:40 2026 GMT
Not After : Jul 22 07:30:40 2026 GMT
Subject: CN=7E2287A9602287B608EBCA62FF71BA03514922F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:93:43:b0:7b:ea:b4:c0:4f:7d:3c:8c:4a:
4a:85:7e:f9:f5:04:b1:a6:57:c2:a1:e5:26:aa:52:
4c:c5:55:1f:aa:85:bc:5d:a3:e4:f6:d8:91:03:26:
c4:ff:85:45:be:49:1b:fe:21:c4:62:61:68:7b:dd:
f0:8e:60:3e:c6:af:00:ea:5d:88:33:b3:36:53:9c:
19:4c:d4:56:64:06:7f:81:3f:e2:af:4e:d4:1e:f0:
cb:41:49:4f:a0:f1:7e:e8:45:0b:0a:d5:b1:e9:ae:
8c:88:01:05:f6:59:84:b6:e0:5e:6b:e0:e3:5c:5d:
dd:55:36:2e:de:24:1a:ce:d3:c7:e5:45:41:8b:cf:
33:50:90:96:d3:97:e1:26:51:af:fa:9f:d2:71:34:
92:4c:0c:a4:86:5d:56:ba:b6:4c:45:6d:ca:fc:6f:
4c:21:4f:81:ff:e9:be:2d:2a:78:8c:97:e6:a8:97:
cf:7e:14:84:03:0a:f7:59:5f:82:65:cc:a4:72:1e:
f0:08:ba:88:cc:7a:f1:d5:db:d4:7e:e4:30:d9:77:
33:37:cd:7a:05:74:0b:89:62:c9:c9:a9:a2:78:dc:
82:d6:18:2f:0c:b0:45:dc:89:f5:a5:e8:80:1c:ec:
99:54:ce:73:ad:95:25:0d:f5:a5:0f:31:16:35:2a:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:87:A9:60:22:87:B6:08:EB:CA:62:FF:71:BA:03:51:49:22:F8
X509v3 Authority Key Identifier:
keyid:F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c3:6c:1d:82:13:c2:cb:37:d9:8a:00:72:39:68:90:70:f3:
f8:76:5a:07:1b:40:68:88:e0:bd:46:a3:fa:03:96:ab:08:5c:
09:e4:ee:d3:03:68:de:73:d3:90:74:df:b8:a5:f3:91:06:3a:
14:1e:db:c0:29:aa:e6:79:e8:ea:7a:8a:b2:e0:7b:c8:c8:87:
dc:e0:32:93:cd:56:6e:91:87:af:f2:0f:0e:c2:b0:ed:68:40:
0f:a6:ff:bd:d1:4b:2c:38:2e:18:a4:cd:1b:56:39:95:1e:1c:
b6:88:0e:5a:ed:63:a5:2d:da:9e:2c:82:70:62:a7:3f:06:f0:
a2:1b:82:1c:e8:34:6f:2f:d5:54:cb:da:26:8b:78:d9:7e:ce:
aa:35:78:52:cd:16:80:d2:53:45:c9:d0:81:43:fc:bd:60:d0:
6e:41:85:d8:23:ca:0b:21:56:93:81:db:be:81:a0:ba:ed:e5:
31:8d:c6:ce:fc:5a:16:34:e0:92:55:fc:cb:4f:5d:70:80:e1:
42:d3:e1:65:26:71:d1:09:4d:6c:b6:b9:54:92:52:cd:a6:c5:
5f:3f:a5:67:97:52:f0:52:1e:3c:af:33:2f:2c:9b:be:bf:13:
bf:d8:08:89:d0:ef:9a:0a:1f:70:54:c8:3b:3d:95:94:28:34:
ad:73:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:34:23 2026 by rpki-client