
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json)
Hash identifier: jcb8tchWisvcnc6YXqlmwtyoOmpJJri0EM6lb4BUpTw=
Subject key identifier: A5:7A:FB:25:21:EA:5C:11:B4:22:53:DE:AD:C0:A6:E3:02:30:C5:D7
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial: 45147F77121803B5B43E56FEDC1E13E0677FC9F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
Manifest number: 50
Signing time: Tue 30 Jun 2026 10:48:23 +0000
Manifest this update: Tue 30 Jun 2026 10:43:23 +0000
Manifest next update: Wed 01 Jul 2026 12:59:23 +0000
Files and hashes: 1: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=)
2: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=)
3: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: jty28qDoLBRciQ8r7tflQk4HmqTeQg3u9rXyiBZz/ZU=)
4: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=)
5: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=)
6: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 09:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:14:7f:77:12:18:03:b5:b4:3e:56:fe:dc:1e:13:e0:67:7f:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Validity
Not Before: Jun 30 10:43:23 2026 GMT
Not After : Jul 1 12:59:23 2026 GMT
Subject: CN=A57AFB2521EA5C11B42253DEADC0A6E30230C5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:a8:a8:c0:a4:68:14:52:16:e8:80:e7:3e:
bf:f0:f3:04:31:7a:d4:3c:4d:81:d9:20:26:c4:4c:
51:41:23:2f:b0:46:9c:25:c3:8e:e8:cd:b0:0b:ba:
b8:9d:02:66:bd:ac:31:3f:c0:1f:82:5e:0b:ce:e0:
1f:64:96:ec:54:bf:5c:db:cd:2e:70:de:59:79:96:
6e:d9:17:b7:14:fe:ff:e1:5f:e5:93:5f:ec:0e:21:
98:32:30:67:b3:ae:fa:9c:48:66:73:56:68:1e:05:
e3:e8:f3:76:aa:82:70:17:c0:5d:9d:30:63:5b:c5:
b6:86:b0:c5:55:25:43:36:d9:e6:e1:c2:4a:d8:b5:
b1:9a:79:f1:02:63:7e:92:b1:9e:8a:40:07:1d:33:
9c:ac:c4:17:7e:a7:ae:10:d4:8d:9e:41:28:70:2a:
7f:97:75:5c:d7:e8:af:0d:2f:d6:b6:e3:f0:08:86:
4f:0d:29:5c:d0:a6:ee:f8:e9:19:86:1e:7e:08:5b:
b7:c5:6c:ee:32:e7:5e:bc:a6:bc:07:84:ee:cc:e4:
05:93:81:47:6b:a5:2f:94:f6:bb:d6:bf:15:51:e4:
0a:d2:0c:e9:d0:58:68:e5:5c:5d:a2:61:2d:9f:e5:
de:1b:21:6e:c7:e1:b2:63:3a:b7:e8:1c:b3:c7:c9:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:FB:25:21:EA:5C:11:B4:22:53:DE:AD:C0:A6:E3:02:30:C5:D7
X509v3 Authority Key Identifier:
keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:32:4f:c1:ff:95:a7:09:b1:41:85:28:01:48:db:e9:0e:
6b:c0:1a:c9:4a:03:a1:d5:77:8a:a8:ab:f1:19:40:41:c9:14:
9e:0d:7b:6e:35:8b:b7:29:ec:4a:b0:87:ba:0d:d7:41:83:69:
24:27:db:b7:c0:2b:24:46:90:48:f7:e5:64:41:7a:4e:1a:9e:
a8:f1:85:8d:0a:7e:ed:98:a4:c1:46:77:3a:d7:72:a4:c2:96:
fa:9d:53:4f:67:79:23:d8:58:a7:c9:6a:e6:c5:6c:e5:cd:a0:
03:5a:7d:b4:7d:33:38:a1:8d:c3:05:ef:47:1c:08:e5:12:39:
d6:26:68:53:a8:17:2b:bd:ee:60:86:e1:a8:bd:94:13:d2:76:
7c:48:30:bc:d8:32:c7:a0:cd:e2:de:d3:e3:47:1b:ca:0d:11:
f4:64:5f:f2:bc:be:64:53:54:15:df:d0:d8:3f:32:85:64:85:
a4:0b:a7:62:50:75:9d:09:1b:19:2a:43:a3:95:0f:53:4e:8a:
ab:0c:42:af:89:cb:1b:65:fe:11:62:7d:b8:a0:ae:a7:89:a1:
3b:a6:9d:12:3a:02:c6:99:93:9c:81:c8:10:b2:67:45:78:21:
75:ba:a2:40:cf:1d:21:0c:a5:28:79:5c:fc:30:60:f1:85:5e:
28:cb:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:20:11 2026 by rpki-client