
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
File: FE6CF07DCDA4007E69D319C5B6A7157546851773.mft (raw, json)
Hash identifier: soYeaA0TxmuH98Sr3hX0RCS348OX9bVfoIC/x2HmagA=
Subject key identifier: C0:EB:2A:FB:EA:07:42:C9:25:39:F4:DB:BD:48:B6:76:21:61:1C:A0
Authority key identifier: FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73
Certificate issuer: /CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
Certificate serial: 2CF737CE897C49E512F34EBEFDB25657F20BFD50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:25:54 +0000
Manifest this update: Tue 02 Jun 2026 17:20:54 +0000
Manifest next update: Wed 03 Jun 2026 18:04:54 +0000
Files and hashes: 1: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (hash: FPfOobtrwIT5DPTt3vx9P8vrh+iShlttANXU6LKDey8=)
2: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (hash: VI7yekXKKEYfmHRZY/aCKB4dy5e6lccxCxDcnwF1ciE=)
3: FE6CF07DCDA4007E69D319C5B6A7157546851773.crl (hash: nmO6knw60QogFAy/c9F+RsBWMxiFtvmOVJVio2DbLbI=)
4: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (hash: Zn3a9lWqIw9dMoLKiTk5132HyGc8GjJT/8jbuNUT8E8=)
5: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (hash: C+Vqc9m27p2GBCzpSrs2gudAsWAL5r9tP2C/aH7Cv8o=)
6: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (hash: O4Glygba7+ARFR+VpjVrW+icVuwm8qP2xXgaTU4alAc=)
7: 3130332e36382e322e302f32342d3234203d3e20313530323635.roa (hash: 3cWQas52pwAw1uujPKPnRiHi6MLrIyFC4wXOlAdEZj8=)
8: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (hash: 0CZkz6a+5+osvi5PALP9I1DsZqwtG6rkGAZa2o+VsKA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl
rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 18:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f7:37:ce:89:7c:49:e5:12:f3:4e:be:fd:b2:56:57:f2:0b:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
Validity
Not Before: Jun 2 17:20:54 2026 GMT
Not After : Jun 3 18:04:54 2026 GMT
Subject: CN=C0EB2AFBEA0742C92539F4DBBD48B67621611CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:ea:f5:c9:2f:fa:58:89:11:47:b1:7a:8d:
c6:92:77:8c:73:e0:4a:00:69:ef:77:f2:2e:81:7b:
bf:0e:f2:fb:80:ea:29:3b:04:60:a8:3a:98:e5:b3:
b5:0d:6c:36:52:81:34:38:f2:8a:50:09:80:89:50:
bb:78:3a:ee:a8:c8:b0:5b:2d:ab:0b:4f:fe:3e:78:
97:ed:16:f8:c9:ce:14:67:f7:63:a6:bf:ea:aa:c3:
7b:7c:9f:04:f1:6f:17:bd:8e:41:38:e2:13:03:60:
f0:d6:45:86:dc:c6:95:3c:ff:1d:84:a4:14:ed:69:
1e:e2:e3:1a:90:02:57:29:52:84:9c:ce:1f:fa:9b:
73:ba:c1:68:50:ec:de:54:98:6b:4d:0f:8c:26:fd:
97:fd:aa:47:2d:46:04:ab:00:a9:61:fd:a1:f6:2f:
46:ae:a8:d9:b0:6e:73:e5:37:2b:c4:f8:bd:4c:9e:
b5:9c:07:81:ae:75:cf:50:dd:ce:00:b1:33:53:e9:
5c:d1:4b:26:6e:fc:a4:8a:fc:a8:65:28:2a:46:88:
7d:80:b6:67:a2:a1:4e:e7:db:a6:52:62:76:29:07:
3b:b9:ea:28:7d:b7:f3:7a:3c:3f:76:20:fd:79:c4:
7c:41:61:54:95:f0:b5:ba:9e:a5:3e:e6:cd:99:4c:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:2A:FB:EA:07:42:C9:25:39:F4:DB:BD:48:B6:76:21:61:1C:A0
X509v3 Authority Key Identifier:
keyid:FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:66:44:af:62:34:7b:c8:48:40:c1:4b:2e:0a:85:9c:5b:
0d:04:04:49:77:55:70:99:42:ae:a3:b3:0f:c4:54:5c:e3:3a:
73:8e:65:0f:1f:a0:2d:17:d2:6b:a6:4d:f6:9f:ef:66:97:71:
33:b9:93:c3:7a:4d:67:1f:6e:e8:19:dd:ac:ee:ae:31:41:69:
b7:99:41:b6:14:5c:65:07:74:9f:a9:9d:1b:88:27:e6:69:ed:
e4:cd:09:fe:56:35:a6:ff:e5:f7:14:65:1c:ae:41:63:22:aa:
7e:70:fa:4a:a1:ce:c2:fc:b5:d3:3a:0b:b6:2e:9b:5e:d4:9d:
b7:85:fb:1d:87:0e:ef:a3:29:ba:4a:0b:e4:65:c2:4d:c1:2c:
58:e3:96:7d:99:4e:bf:0c:69:96:65:99:35:57:d5:f2:2d:09:
7a:d8:ed:bd:d6:45:df:b2:fc:83:47:af:81:84:2a:7f:b8:08:
df:ae:cb:3d:44:98:35:98:f9:1f:cd:f5:5c:23:19:e7:71:50:
9e:4b:0f:cb:02:f1:f4:87:e2:d6:21:6e:c0:02:51:a1:ab:89:
10:d0:37:5b:26:b1:28:22:79:aa:6f:e5:3a:a7:17:64:3f:0a:
8f:23:21:13:fd:bc:37:49:3e:50:85:91:12:41:ee:d9:b3:dd:
97:2c:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:33 2026 by rpki-client