
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
File: F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft (raw, json)
Hash identifier: ZRIpEBYN7h8ie2uuCXDcFN5Met/kT0rgaRfi7zrfSaA=
Subject key identifier: CA:0E:CB:95:EC:9A:FF:98:9C:4C:8B:12:C4:45:CD:6A:2D:54:C7:5F
Authority key identifier: F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0
Certificate issuer: /CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
Certificate serial: 38D421B643AE5AFEAA90E83005AB488CDA7C78F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 18:45:47 +0000
Manifest this update: Wed 02 Sep 2026 18:40:47 +0000
Manifest next update: Thu 03 Sep 2026 21:20:47 +0000
Files and hashes: 1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: lNGCOSIBuAHlgUExePnnpcuCF0p2D0MmHxxD31gMyhA=)
2: F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl (hash: PkntNx8cL04Lj+9b0zmRUAiA45jyvLH4emOh/rYcPuc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl
rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d4:21:b6:43:ae:5a:fe:aa:90:e8:30:05:ab:48:8c:da:7c:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
Validity
Not Before: Sep 2 18:40:47 2026 GMT
Not After : Sep 3 21:20:47 2026 GMT
Subject: CN=CA0ECB95EC9AFF989C4C8B12C445CD6A2D54C75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:b6:ac:8b:51:33:e4:87:8e:12:26:06:ff:
70:b2:bd:b9:51:e6:49:d3:06:d5:87:2d:63:7f:1b:
3d:58:13:a1:69:7a:1f:4f:49:96:70:2c:73:f3:2b:
a0:dd:53:4e:87:e7:8a:01:15:1f:75:f9:5d:47:d6:
19:b8:07:40:3a:40:4a:04:44:5b:1a:f5:91:cf:60:
88:b0:b2:42:69:5f:da:92:84:d7:77:c0:bb:f0:aa:
be:cf:a2:87:ad:1c:4d:35:f8:88:b5:8a:11:2b:28:
b7:bb:51:77:d1:21:89:23:df:5e:4b:13:b9:46:1b:
fe:f1:98:4e:9c:38:16:d2:37:31:1a:7d:93:2b:e3:
0c:bc:85:bb:a6:0b:9c:39:3a:78:3e:81:2c:e6:b4:
2c:b2:78:29:88:04:54:23:70:b2:67:d1:f0:c0:2e:
58:c6:7d:b1:ba:f5:4e:44:a8:03:bf:32:6d:e5:c4:
5a:e6:73:0a:95:bd:46:9c:66:c5:87:10:d5:45:7d:
86:e2:59:a8:85:dd:e2:31:ac:3d:1b:9c:cb:be:e4:
e3:ea:68:02:3e:2e:81:e1:8d:86:74:ca:6f:1b:ed:
23:7d:0a:87:16:74:d0:fe:fc:02:0b:45:2f:16:e8:
5b:f8:ab:29:25:d9:ba:f8:00:9b:8d:73:44:e9:6d:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:CB:95:EC:9A:FF:98:9C:4C:8B:12:C4:45:CD:6A:2D:54:C7:5F
X509v3 Authority Key Identifier:
keyid:F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:65:bf:5c:81:4a:78:c7:d3:d8:11:b5:b3:62:1f:41:51:34:
a0:04:c8:08:d5:71:fc:22:27:c6:f5:d7:8e:d1:ae:9f:6a:58:
bf:af:21:45:69:3e:2a:13:a3:50:a5:bb:ef:43:f0:89:85:6b:
55:11:76:e8:17:06:fa:c6:7b:d5:4c:bc:14:a5:a7:01:c0:f3:
91:76:b0:9b:11:41:61:e7:01:ad:8f:c9:46:b7:1b:0f:4c:c0:
53:05:e0:e3:71:8f:35:b3:aa:c8:de:cf:e4:7e:d8:08:6a:ac:
42:7d:79:08:c3:41:89:ea:25:e0:c4:d1:79:0f:40:1c:00:03:
ec:3c:6c:cc:42:1d:58:96:c8:3f:c8:02:e4:01:7e:73:23:9f:
28:cb:0c:87:a7:b5:10:70:f6:6e:c5:9b:5f:ba:a1:1e:39:e3:
7f:38:6a:80:9b:46:7d:3a:3f:76:bc:f8:83:d5:cc:23:0f:de:
59:7e:1f:90:b4:67:c0:5f:5f:a9:54:15:6f:3e:bb:ed:e8:55:
37:a0:41:16:e9:f9:ee:11:2b:b0:a3:df:ca:e9:8f:93:06:e9:
98:62:9f:a2:6b:16:bd:42:96:69:dc:61:72:e3:26:30:3e:04:
cc:f2:71:ac:9c:d8:03:b0:95:71:15:5a:60:99:c2:ae:4f:c9:
98:18:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:38:18 2026 by rpki-client