
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
File: FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft (raw, json)
Hash identifier: OfEMW0epF2oATAK1DC7k99J964c9KZG/PiZs43dEq98=
Subject key identifier: E6:B0:93:F8:44:CC:A8:45:B8:7E:A4:87:FA:31:A7:82:EC:6E:25:4F
Authority key identifier: FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF
Certificate issuer: /CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
Certificate serial: 6D875942D45B75BF2C63738B901C381817E282AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 15:28:47 +0000
Manifest this update: Tue 02 Jun 2026 15:23:47 +0000
Manifest next update: Wed 03 Jun 2026 17:49:47 +0000
Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: dro/uVDmCCZVeSiHITBTTi+wa46OyEUBbiwxzlIppDE=)
2: FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl (hash: 6L+i+wPJejb1B0mPdk6l+3zY1ijzr/HgpTH0szZASqw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl
rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:87:59:42:d4:5b:75:bf:2c:63:73:8b:90:1c:38:18:17:e2:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
Validity
Not Before: Jun 2 15:23:47 2026 GMT
Not After : Jun 3 17:49:47 2026 GMT
Subject: CN=E6B093F844CCA845B87EA487FA31A782EC6E254F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:60:4e:2b:a4:f3:d1:19:b9:f7:60:1c:34:
45:b0:65:b4:ea:4a:5b:b4:cc:13:89:65:ea:c1:f9:
37:57:fa:73:d2:e1:90:64:69:ce:bb:71:bb:fe:52:
74:a8:17:c8:8b:52:be:3e:25:ca:45:56:b9:75:76:
55:2e:1d:0b:40:06:ca:a7:a4:98:5d:9d:64:3c:b1:
36:cb:6b:12:59:d3:88:e2:9a:39:f4:12:0a:4d:90:
fe:c0:48:09:a7:97:b5:a7:24:7d:10:74:89:b7:88:
43:9b:2a:7c:9c:66:39:11:a8:ad:32:22:3f:0b:09:
93:b8:fc:28:37:8e:64:69:61:75:76:13:a0:4f:f7:
dc:6a:1e:0c:f5:c5:29:1d:bd:6f:e0:05:d6:69:c8:
f6:e9:22:2c:6f:07:e1:7e:d5:20:f2:fd:ff:01:a9:
41:bc:ff:f7:bb:24:d6:26:d8:36:c4:ff:6f:cb:ce:
f2:b0:bc:32:77:e4:3d:ea:b7:56:62:54:cc:2a:3f:
ad:2b:43:a5:22:39:a6:20:54:97:75:00:4f:a0:db:
b3:97:1a:e5:80:4d:66:87:4b:21:55:e8:ab:2f:19:
97:05:45:fb:52:f1:c6:62:df:9e:fc:ad:a3:97:1c:
12:dd:5c:fc:72:51:8a:bc:a6:43:d2:f9:1c:56:fd:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:93:F8:44:CC:A8:45:B8:7E:A4:87:FA:31:A7:82:EC:6E:25:4F
X509v3 Authority Key Identifier:
keyid:FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:0c:a2:14:02:11:9a:f2:52:7e:f8:80:49:f4:81:c2:37:
c7:8e:11:44:4b:0a:a9:42:89:8e:ba:1f:99:f4:81:42:0d:b1:
2b:d6:11:1d:77:02:1d:14:3b:5c:c1:57:26:bb:20:34:fb:98:
b3:0b:41:a8:e3:34:30:79:20:ae:b5:52:ef:49:63:01:69:94:
7b:54:4a:29:fb:22:35:3f:fd:06:39:24:de:a5:99:f8:8f:3c:
e3:5a:4e:29:b7:65:d7:b1:49:dc:0b:85:25:ca:2f:d8:68:15:
ce:bd:75:49:2e:1b:63:a4:a9:7c:dc:c2:b5:7c:cb:b9:7d:6b:
79:57:26:5c:1e:b8:9b:40:d3:64:8c:01:1d:ea:f6:90:0b:cb:
a8:f9:16:7b:0b:22:8e:4b:c1:5c:e2:ea:7b:73:c9:03:d9:d4:
b1:88:b0:aa:45:a3:b9:49:94:57:0b:d6:be:ca:44:63:ea:ab:
7a:ee:f3:86:a8:c6:79:2f:e1:f2:3a:e3:f7:75:92:25:2f:54:
f4:f2:67:ff:d3:be:a6:7b:3f:f2:7f:36:c0:ca:32:2d:f4:bc:
6d:51:0c:fd:7d:10:5b:ab:6c:1a:cd:56:13:83:ef:0b:b0:c1:
c6:45:3c:e1:b4:a6:f4:25:27:4d:62:9c:24:bf:80:8a:dd:75:
08:ec:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:54:02 2026 by rpki-client