
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json)
Hash identifier: RTSSk2SiooqGqy7BsFuCVqd7+pJZ+0GmU3mdr2IS5n4=
Subject key identifier: BD:A3:93:28:5B:BC:41:A2:81:D4:3E:D4:6E:6B:99:A3:18:C2:58:B9
Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1
Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1
Certificate serial: 6D162DC1856C1891C04A77596261F2B047FCDB44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 03:57:32 +0000
Manifest this update: Mon 02 Nov 2026 03:52:32 +0000
Manifest next update: Tue 03 Nov 2026 07:56:32 +0000
Files and hashes: 1: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=)
2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=)
3: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=)
4: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: f2zCnySnF7YPHba1YHEno+D8KF5ScslP47EW+J0oyHY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl
rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:16:2d:c1:85:6c:18:91:c0:4a:77:59:62:61:f2:b0:47:fc:db:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1
Validity
Not Before: Nov 2 03:52:32 2026 GMT
Not After : Nov 3 07:56:32 2026 GMT
Subject: CN=BDA393285BBC41A281D43ED46E6B99A318C258B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:08:13:92:03:6e:e5:5c:21:16:af:9c:a9:
35:b8:76:b2:bb:3f:32:6a:64:10:00:b9:e0:fe:f5:
94:4f:27:59:79:ce:f3:a9:70:79:32:d2:1b:b7:e3:
e2:26:25:81:dc:e0:3e:1b:48:af:e2:5c:02:98:2b:
ac:eb:8e:1b:70:7e:d0:33:4e:6f:da:ef:6a:29:4b:
71:0f:45:fd:c9:ec:e3:76:38:4d:b4:78:13:9c:a9:
8d:bb:c2:aa:4a:5c:14:cc:c4:16:44:8e:71:1c:4b:
3a:cd:c6:89:5b:a0:9d:f6:e5:1e:e7:0d:fa:dc:fd:
05:06:8f:9a:85:35:fd:6c:f5:2b:22:8e:80:20:cd:
23:c7:99:82:57:fb:7d:d3:b8:c8:db:72:2a:e7:f2:
81:80:22:48:18:cf:d5:2e:93:ef:38:98:50:b6:80:
80:7b:ea:d6:5f:83:1a:fc:cc:83:a2:85:03:71:cd:
5a:9f:5e:29:90:e4:2f:12:b8:74:0f:d9:26:c5:8d:
3f:5a:38:45:1c:f6:0b:dd:13:12:6b:3a:72:b4:a4:
a6:6a:91:ec:a9:71:e8:e8:0b:21:26:90:e5:a7:b5:
25:9b:b0:9e:c5:97:40:74:d5:c1:07:0b:56:e8:03:
08:3c:be:b3:f7:ba:c5:04:18:46:2b:f4:42:37:9c:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:93:28:5B:BC:41:A2:81:D4:3E:D4:6E:6B:99:A3:18:C2:58:B9
X509v3 Authority Key Identifier:
keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:f4:76:46:92:6e:d5:6e:4c:d8:04:fa:d2:0d:54:d6:cf:
fb:6a:3a:61:5f:73:4b:41:55:0c:c5:49:ac:97:ea:a3:ae:fc:
43:bb:08:1e:14:39:69:19:8f:77:9d:35:b7:ae:be:80:d8:61:
09:c1:7d:da:bf:16:12:25:d3:e1:92:e4:91:d4:db:a1:65:e4:
34:a2:11:a7:9e:0e:06:2d:17:b7:ff:3e:36:13:06:07:af:06:
eb:f5:ac:05:81:a5:b5:d7:c5:bf:de:a5:9d:d8:ab:b6:40:6d:
4e:13:20:2b:aa:f3:b4:90:01:ef:24:46:2b:f5:ac:dd:1e:d1:
23:52:30:50:26:86:1c:a1:39:95:b8:a5:ce:ca:08:73:45:c4:
b6:c4:6d:5f:1e:a3:42:38:b3:28:59:cd:9b:74:bc:a2:fb:46:
89:37:45:19:46:a8:64:14:b6:18:8b:21:88:46:bf:36:2e:02:
44:8d:d2:85:06:97:20:88:6c:74:48:56:fe:c3:7f:61:db:2d:
94:ed:e0:c6:bb:78:d1:dd:52:f6:21:5a:0f:7d:83:e6:68:3e:
b1:9a:f1:ee:53:db:b8:89:eb:d6:1b:fc:1f:70:d5:7f:63:3a:
ac:a3:1a:16:a7:44:eb:b6:5e:a1:3d:5d:3e:46:f7:5c:06:22:
1d:d4:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:28:06 2026 by rpki-client