
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json)
Hash identifier: G96llajBl7OJGWD2hx9JIPwsTrk5/OAOwCkYnTQBCuc=
Subject key identifier: D0:72:4B:EE:4D:A1:02:FB:3F:4F:24:A4:4E:73:B2:F7:D7:71:0D:64
Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Certificate serial: 6E35DBCFDF855946811525D0C1B74A185B0BED2B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
Manifest number: A7
Signing time: Thu 03 Sep 2026 16:37:31 +0000
Manifest this update: Thu 03 Sep 2026 16:32:31 +0000
Manifest next update: Fri 04 Sep 2026 17:58:31 +0000
Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=)
2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=)
3: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: 9K49qDoHxH+wEl8bOdXykTS96h3LhJLkYyO2mxCXuC4=)
4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:35:db:cf:df:85:59:46:81:15:25:d0:c1:b7:4a:18:5b:0b:ed:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC
Validity
Not Before: Sep 3 16:32:31 2026 GMT
Not After : Sep 4 17:58:31 2026 GMT
Subject: CN=D0724BEE4DA102FB3F4F24A44E73B2F7D7710D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:ca:b4:c1:91:b7:32:e4:0c:48:34:c1:68:
4f:69:f7:9b:2f:08:51:32:28:23:db:e4:66:8e:5f:
10:aa:61:7f:6d:17:c6:2f:58:60:32:4b:fa:2a:23:
22:72:bb:83:e0:01:5d:ef:c9:4c:e3:1a:98:49:17:
7e:95:bd:cd:e8:45:ac:83:dc:30:2b:eb:9f:f4:62:
ca:f8:27:e2:02:44:45:71:d2:54:c3:4c:3b:ab:7d:
5d:96:64:33:79:c4:8d:d4:6d:03:34:f1:d2:20:55:
aa:13:8d:b8:9e:b3:54:36:de:f7:36:6b:24:47:87:
45:b7:c5:78:9b:7a:91:3b:09:36:ea:b7:0b:f4:cf:
12:c3:2f:94:4c:5c:c0:d3:48:e4:0f:e9:62:f0:d1:
d2:0f:fd:2d:37:71:46:46:89:98:31:7e:ef:83:ae:
b8:ce:b2:09:e7:65:25:ce:d6:e9:27:58:cd:18:17:
d6:65:7a:bb:8a:ae:f5:71:b8:dd:81:9c:28:8a:61:
21:13:d5:6c:2d:87:dc:46:2b:ad:bb:22:83:ea:c3:
86:20:40:ca:d1:f7:81:29:a0:8a:bf:ff:aa:e6:85:
25:e9:56:59:7d:20:96:ed:96:be:99:41:62:7d:9e:
f0:6d:80:3f:60:77:a6:cb:5f:3c:0a:58:c1:bd:15:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:4B:EE:4D:A1:02:FB:3F:4F:24:A4:4E:73:B2:F7:D7:71:0D:64
X509v3 Authority Key Identifier:
keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:03:a3:32:f2:0f:58:44:a7:92:6e:dc:c4:76:3e:e4:c0:
db:7e:32:17:d8:aa:d7:fb:8e:84:13:e8:fb:a0:9c:41:6c:60:
f2:e2:34:ab:b1:32:b0:a4:80:4d:64:3e:61:35:5b:3e:c5:23:
52:dc:35:13:d3:05:a4:ac:3e:f0:ec:a0:ab:4b:14:d0:1e:2c:
f9:84:89:d1:66:e3:f6:c2:bf:47:1f:52:df:15:60:d8:04:50:
cb:00:82:ae:ca:4c:82:13:54:d4:3e:03:97:71:78:96:e5:08:
59:a9:65:0b:77:dd:26:3b:f1:8f:5a:a0:60:fb:27:79:39:47:
61:6f:ab:af:91:2b:93:dc:05:45:7e:af:78:97:81:c6:99:f3:
55:1e:e6:39:e1:1d:1b:57:96:be:1d:52:ea:8b:29:ba:72:aa:
5c:9e:b7:67:c3:4e:b0:e5:08:bc:b5:47:50:90:fc:fb:fb:8c:
39:da:8d:91:d1:7f:6c:c6:c5:39:4b:7a:0a:fc:2f:71:0e:2d:
91:a0:1f:6d:ff:d3:50:36:6d:d0:d0:e9:c4:de:45:d3:71:df:
cc:da:01:26:29:69:30:c5:5d:94:31:54:73:ed:5b:0e:c7:41:
28:da:25:55:00:83:26:2a:91:53:76:9d:e2:4c:29:fc:a8:3c:
35:f1:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:48:20 2026 by rpki-client