
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json)
Hash identifier: d0J0MsQUVzTXZrKnnhlzscG3uJyWD2rBxHTKqb9TVJU=
Subject key identifier: FD:81:23:22:30:29:97:B4:F2:45:D7:C9:2B:80:9E:27:2F:00:53:C7
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial: 36703C541DEFACAF1229178E81D0FA85468DF39C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
Manifest number: 12
Signing time: Fri 15 May 2026 02:39:07 +0000
Manifest this update: Fri 15 May 2026 02:34:07 +0000
Manifest next update: Sat 16 May 2026 06:16:07 +0000
Files and hashes: 1: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: ttsvwuGYCRJzmCfgn2etiQc/KbUfMKCh2DefwpE/vOo=)
2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=)
3: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=)
4: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=)
5: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=)
6: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 15 May 2026 20:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:70:3c:54:1d:ef:ac:af:12:29:17:8e:81:d0:fa:85:46:8d:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Validity
Not Before: May 15 02:34:07 2026 GMT
Not After : May 16 06:16:07 2026 GMT
Subject: CN=FD812322302997B4F245D7C92B809E272F0053C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:71:94:f8:e8:4a:7e:14:57:df:c4:71:45:
37:51:35:24:75:da:35:61:27:d4:c5:62:18:91:de:
bb:74:c6:24:51:52:fc:88:50:25:0c:43:ef:94:7b:
d9:83:a1:1a:e4:bf:b3:51:8d:ea:10:e8:bb:fb:e7:
1c:fd:69:5d:03:7e:be:28:d4:63:76:c3:1d:d8:4a:
a7:e6:cc:5f:9a:5c:9c:50:45:47:f5:81:62:b2:dd:
6e:da:6c:97:70:90:23:80:34:3d:03:5a:c2:a9:ca:
c7:e5:1e:af:79:b4:53:25:3c:d2:d2:67:53:29:45:
ff:57:3e:bb:fd:7f:b7:9f:e6:e1:ab:16:30:61:73:
a5:ca:39:f2:c1:3f:7b:6f:63:12:ce:d4:53:75:64:
8f:50:1d:c3:65:f8:1d:59:5f:5d:96:1d:ec:44:8c:
d7:31:6e:a6:4c:07:c0:ce:33:8c:e1:ac:86:9f:23:
12:e0:72:2e:ac:60:b8:d8:82:cd:a7:b8:ca:75:d0:
00:15:3f:57:91:84:76:81:16:0c:c4:a8:35:3b:b9:
91:28:c1:3d:c4:1e:a2:96:91:ba:41:6d:4e:7c:d1:
2e:c6:03:9c:84:13:bc:7a:b2:f7:22:a9:59:da:6e:
ff:8d:98:12:4b:61:7a:9d:b4:95:98:7e:b5:18:ca:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:23:22:30:29:97:B4:F2:45:D7:C9:2B:80:9E:27:2F:00:53:C7
X509v3 Authority Key Identifier:
keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c5:9b:7b:c2:ed:64:82:91:a2:62:10:1e:4c:35:47:72:65:
e1:8d:97:93:11:3a:e5:d2:75:cf:35:4b:98:4b:7d:cd:b4:0a:
66:f5:fc:f6:ac:a5:d3:42:83:5e:9c:a8:f1:19:e8:b8:81:52:
0a:74:f1:34:d3:08:38:8a:11:f5:bb:5e:ab:66:01:11:95:9c:
1e:53:17:1b:8a:8a:a9:cb:91:81:ef:13:c3:d5:73:54:9a:9e:
a6:65:76:87:b2:6e:4f:2a:44:7e:32:ba:c2:9b:70:9a:1b:80:
80:15:60:26:cc:ee:07:c0:a6:43:43:49:f9:8e:17:85:fb:f4:
58:30:e7:bf:f3:0a:15:47:91:a9:60:66:b7:1a:75:9a:90:22:
68:eb:5c:84:5b:39:46:07:89:53:3f:ae:be:b8:69:da:d9:4a:
f7:c4:93:ad:aa:5b:00:f6:49:f2:ce:cd:d9:94:f4:67:04:a8:
f3:2f:4d:d8:1a:5b:42:af:88:3c:3c:35:50:a1:81:5c:da:83:
7d:b5:55:08:35:d9:b0:6d:f1:9e:1f:22:c2:40:14:b8:58:0d:
47:f2:cc:5a:30:1d:94:cc:a7:f1:84:7d:80:5f:d2:03:34:26:
36:39:5d:7f:25:60:b2:b5:78:4d:62:39:49:59:99:9b:72:91:
f2:87:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:32:31 2026 by rpki-client