
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: +GKiY04e3q6czFZBJJY+ezHa7RvIloqwEO+j1fzvOEk=
Subject key identifier: 9E:24:6A:D3:D0:DE:6E:53:73:B1:47:66:98:F3:6E:00:F6:69:27:F7
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 0C7E2CBD1820FA8CF7E7DD16E5EB5F939008C3DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: 13
Signing time: Fri 15 May 2026 20:00:15 +0000
Manifest this update: Fri 15 May 2026 19:55:15 +0000
Manifest next update: Sat 16 May 2026 22:01:15 +0000
Files and hashes: 1: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
2: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
4: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: KGbDEj79+fZo5F+L5AbIpga+ioR6ZlZw1WsLR8HxxKo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7e:2c:bd:18:20:fa:8c:f7:e7:dd:16:e5:eb:5f:93:90:08:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: May 15 19:55:15 2026 GMT
Not After : May 16 22:01:15 2026 GMT
Subject: CN=9E246AD3D0DE6E5373B1476698F36E00F66927F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:67:e0:c3:f0:c2:47:d0:b2:32:72:b1:2e:
6c:fc:c5:99:09:f8:f5:1e:51:7a:30:1c:b3:94:de:
91:c6:7f:c4:f2:a3:1c:b0:0e:09:2b:5c:02:fc:45:
8e:a9:5b:be:bd:51:a1:57:68:61:54:e5:94:c4:ec:
00:d5:a2:38:fe:ed:20:51:98:b0:ce:df:5c:91:e9:
22:0a:c3:5c:54:e8:d0:c8:e2:e8:9f:35:b1:9c:67:
23:eb:50:e7:a5:c3:4b:3b:fc:57:ef:e5:91:63:d6:
d8:29:03:c7:8b:7d:3e:33:62:1c:1e:9f:a1:f4:30:
7e:da:d2:e6:19:b2:9d:fd:2c:23:11:3d:f9:6a:31:
82:d3:71:5b:ad:29:08:ff:0f:c1:bf:f8:e0:e6:64:
39:e5:be:62:29:1c:55:b0:ca:e5:4d:1f:77:76:63:
ab:da:49:63:35:a0:ef:e1:c4:cf:e9:1c:0a:d0:39:
52:7a:be:9e:75:db:c3:f6:80:6b:8c:f6:fc:f1:38:
ea:3b:37:85:1b:d4:f2:2c:73:ff:e9:12:3e:56:15:
75:52:ea:eb:a5:f5:64:2b:e2:fa:01:ff:e7:fd:21:
93:c9:77:3d:53:1e:17:2e:09:05:28:f7:99:e1:9e:
dc:43:65:24:e3:b4:d3:52:ed:1f:55:8e:23:61:39:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:6A:D3:D0:DE:6E:53:73:B1:47:66:98:F3:6E:00:F6:69:27:F7
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:a8:a6:3c:5c:c7:2a:b9:c7:5e:ba:e5:a3:59:8c:d5:16:
9d:1f:16:94:14:17:51:23:d9:d4:11:3f:4a:cf:7e:19:21:83:
69:f0:b2:19:cf:dc:27:b0:4c:ce:5f:f4:f9:0d:0e:7e:5e:49:
86:86:65:42:9a:30:51:59:48:3a:06:a8:28:23:43:f9:fc:6e:
51:e9:a9:27:18:65:e4:20:1a:87:90:a2:0b:4b:b4:10:c4:c5:
86:16:74:9e:03:6a:f4:8b:91:43:39:3c:24:22:22:e8:08:3c:
ce:de:76:f5:99:82:8e:05:ed:ce:3d:01:74:a9:0b:31:fc:98:
52:ed:11:df:de:49:49:ba:11:f8:74:e7:0e:91:29:c9:41:e0:
28:20:c7:55:ae:af:f0:d3:c2:b8:e0:a7:2c:c4:c4:47:c5:cf:
51:47:46:d0:fa:70:d6:68:99:2a:9b:74:9c:af:bc:14:d9:55:
c4:1e:9a:8c:af:09:aa:7d:88:74:d3:49:cf:dc:3e:28:de:1d:
e5:10:da:a7:06:a9:5c:17:49:f3:7a:77:d5:57:d6:da:51:fb:
6c:0e:24:23:34:49:ad:0b:7e:66:06:c4:fa:59:00:8f:eb:f0:
12:e3:39:45:a7:a4:98:ce:24:9f:c0:bb:fb:50:f8:04:68:ac:
e7:3b:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:35:08 2026 by rpki-client