
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier: OBW2fV4fG4xikH5Q+Lv6Ou+DOKkSJQUivMPYdFB6V84=
Subject key identifier: F2:6C:45:67:84:16:37:6E:95:E2:04:B6:C7:81:4A:D5:C4:37:88:B8
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial: 0C0968DE675E4DD7DA986A49DF077AFE064F295A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number: F7
Signing time: Mon 02 Nov 2026 13:24:52 +0000
Manifest this update: Mon 02 Nov 2026 13:19:52 +0000
Manifest next update: Tue 03 Nov 2026 16:39:52 +0000
Files and hashes: 1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: JkSGqetAH/MH7pkzfnJsOqqZwC3FaLhWpsuP0Hn3SWM=)
3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:09:68:de:67:5e:4d:d7:da:98:6a:49:df:07:7a:fe:06:4f:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Validity
Not Before: Nov 2 13:19:52 2026 GMT
Not After : Nov 3 16:39:52 2026 GMT
Subject: CN=F26C45678416376E95E204B6C7814AD5C43788B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:e9:a4:82:36:73:65:ec:24:fc:4c:ce:8e:
d8:43:b1:4b:ab:63:07:a9:8c:fa:84:29:5a:ab:8d:
d7:1c:3e:a1:ba:ca:8a:65:3d:9c:1e:02:70:27:d3:
aa:72:ba:ff:83:e3:3c:0c:6c:11:7a:c5:8f:01:9e:
e5:0f:ea:1e:2c:9d:09:38:c7:32:9f:68:f2:7d:8e:
9a:61:7e:bf:54:15:e2:fa:fa:1e:da:6a:da:5d:68:
9f:65:fe:82:b0:da:9d:c9:77:4d:41:98:f8:f2:9f:
a6:6e:97:22:a8:17:13:ff:3d:c0:d0:6a:86:4a:c5:
93:cf:6f:96:87:3d:7d:92:0e:67:61:ef:75:12:96:
a0:b6:17:ae:6a:4a:37:35:7b:f0:b8:39:a4:7c:f1:
ab:9e:64:da:52:95:c2:9a:73:46:a9:2d:90:d1:62:
80:5e:83:25:f9:b5:9e:4c:f4:0d:37:cf:24:72:4a:
46:2f:00:8a:10:31:7e:8b:86:d8:a0:47:78:aa:73:
2f:54:1b:8e:13:8f:00:87:c9:3e:a3:2f:ad:e1:bb:
ca:d8:0d:24:3e:5f:84:d1:76:71:f7:44:d7:9c:17:
4b:7d:58:bd:f2:83:6a:d7:3d:b1:55:be:a7:ba:9c:
0b:58:9b:00:d1:c6:8d:38:75:34:02:0b:fc:ab:ae:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:45:67:84:16:37:6E:95:E2:04:B6:C7:81:4A:D5:C4:37:88:B8
X509v3 Authority Key Identifier:
keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c4:04:de:f7:18:2b:9e:f9:93:39:07:5b:17:86:b3:a9:40:
bb:3c:db:ef:98:c0:b8:de:f4:6c:f4:e3:f4:f9:50:85:ff:e7:
a3:c1:d6:c2:c8:35:e5:66:e1:d6:49:ff:be:4b:0e:3a:0a:2d:
57:af:12:b3:f1:60:cc:8b:54:23:c2:55:64:7f:91:80:b1:30:
98:b9:42:62:9f:bb:12:e7:5e:96:b0:3e:8a:41:67:2c:bd:71:
e0:5b:0d:6a:8e:dc:76:09:db:f8:07:20:7f:ec:9a:88:ea:ad:
e1:2b:2b:aa:b5:86:ad:a6:25:88:c9:6c:1c:2c:5d:89:72:61:
b6:08:73:07:27:57:a5:49:a1:bc:9b:98:ae:49:b3:f1:38:92:
66:e9:71:3a:59:ce:9b:cb:df:4b:86:09:ef:98:22:27:e8:13:
1c:04:1d:b0:56:49:53:18:49:aa:c8:08:ff:14:9b:88:1f:cb:
1c:9f:d5:49:2b:ca:61:ca:ab:0a:d2:48:94:5b:f7:25:e2:dc:
7c:dc:11:b4:49:a6:1c:b4:4e:34:08:4f:9d:8e:1a:5d:f5:58:
d6:ba:8e:6e:a8:99:88:1c:27:6e:50:28:2e:d2:ec:05:09:5a:
69:ba:4f:07:2e:56:b3:53:1c:a6:9e:9f:51:ed:6a:04:05:22:
cf:67:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:58:05 2026 by rpki-client