
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft
File: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft (raw, json)
Hash identifier: V03/0h13iBFSbl7dPDfFB6Q/d2Gvg+mHCJ5sNoQr/Pk=
Subject key identifier: 46:20:FA:B4:23:8E:8A:76:30:B7:9F:AE:D2:6F:CB:02:C0:54:62:AD
Authority key identifier: FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15
Certificate issuer: /CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15
Certificate serial: 016E7450E9F463F639632327645C13054556D57F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 06:51:47 +0000
Manifest this update: Wed 04 Nov 2026 06:46:47 +0000
Manifest next update: Thu 05 Nov 2026 08:11:47 +0000
Files and hashes: 1: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl (hash: d7BILQYYf3tCVI0/KGXcXYpzhbCZrnhPnaYkgwCdLaE=)
2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: vIUoSFhkJP5hkDIwcTRzx7ooCpVifIbFa0ihUfETBXw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl
rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6e:74:50:e9:f4:63:f6:39:63:23:27:64:5c:13:05:45:56:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15
Validity
Not Before: Nov 4 06:46:47 2026 GMT
Not After : Nov 5 08:11:47 2026 GMT
Subject: CN=4620FAB4238E8A7630B79FAED26FCB02C05462AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:c2:04:b1:2f:5b:b2:e2:de:a7:19:c6:0e:36:
56:1f:aa:b5:71:01:67:ae:6b:5c:c9:59:1d:f9:e2:
a9:1a:cf:f3:90:a8:04:00:a1:fd:00:12:8d:ed:95:
8f:57:9d:44:b9:98:8c:f0:0e:1e:69:4c:07:75:89:
79:8d:f3:d5:20:44:80:b2:ee:1f:f8:bc:ac:85:31:
7a:94:7d:20:5e:91:3b:cc:c9:98:1a:d9:88:bc:94:
12:a3:f8:70:af:3d:7d:05:88:d0:13:0a:9b:8e:84:
fb:86:e8:5c:da:93:d9:f7:67:59:8f:f8:63:0f:3c:
55:66:0e:aa:0a:5d:cb:b5:79:4b:97:a9:68:d3:9f:
5c:f8:bd:a7:0f:46:6e:0f:a4:62:d3:31:f7:65:de:
62:9b:76:59:7d:cf:eb:49:0a:f3:06:f1:f5:1b:b9:
08:7a:36:9f:0e:f6:54:57:78:4b:33:b4:cb:32:76:
98:15:4d:24:f0:77:a0:2a:fd:26:99:a0:0e:4f:e6:
ef:c3:72:dc:a9:9f:82:1d:12:91:c4:d4:83:9d:e3:
6f:81:69:dd:32:34:99:f9:9b:1c:51:4d:c0:3b:56:
f0:73:5c:0a:b8:4b:a7:95:fa:c3:c6:72:b6:ed:3d:
07:cf:59:31:17:72:c5:ef:4b:42:f3:10:59:72:b4:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:FA:B4:23:8E:8A:76:30:B7:9F:AE:D2:6F:CB:02:C0:54:62:AD
X509v3 Authority Key Identifier:
keyid:FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c0:e8:7c:cd:5d:58:3d:04:7a:ae:32:5b:bf:97:d2:5a:41:
f4:40:ff:8a:ba:1b:b4:8b:7e:85:c2:14:ed:bc:4f:3e:b0:d8:
fd:1e:c9:42:87:d6:38:3f:40:fb:92:1c:05:fb:38:57:0d:7d:
99:0c:18:ce:07:ed:32:7c:ce:26:3b:f7:82:bd:8d:a8:92:32:
e6:85:a0:d7:f2:a4:45:c4:3c:a8:68:b3:b1:c2:7b:bf:35:b7:
e2:d7:0d:ac:65:5b:52:75:17:77:20:4b:47:fb:7e:99:ed:a3:
b6:04:61:f5:79:dd:d2:fa:8d:a1:a5:c9:4d:18:1b:07:15:2b:
70:9b:9b:91:71:e9:92:e8:b0:34:8a:0a:0f:63:b5:1c:b8:8f:
34:21:59:49:d1:d8:4b:77:13:17:49:02:55:37:e9:d0:97:1d:
12:d4:39:03:b3:6f:52:06:9b:e4:d7:6b:95:d9:2f:1e:d8:53:
e6:0f:11:2b:23:8f:f7:ed:e5:ed:2b:1c:c9:7d:ee:02:1e:86:
d6:4f:d5:16:bb:c2:bd:93:a4:ea:14:0b:44:43:93:01:be:3d:
05:4c:50:2d:13:53:b5:de:a1:5f:32:c1:bd:20:4f:b9:50:a2:
b1:f8:66:d8:e9:c5:4e:29:81:14:1b:4d:4b:8b:31:70:b8:95:
af:ed:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:08:40 2026 by rpki-client