
$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft
File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json)
Hash identifier: 80QA+ajIWQjxR07x/wOfTE/22aaS2hJXG/eoCKA45ps=
Subject key identifier: AD:8B:4A:E8:19:2D:1C:CF:59:72:C5:C7:AA:78:2C:18:DE:74:C6:2F
Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A
Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A
Certificate serial: 4BDA387FC9B212369F9DF702A693ACFDF64537F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 05:34:13 +0000
Manifest this update: Sun 02 Aug 2026 05:29:13 +0000
Manifest next update: Mon 03 Aug 2026 07:26:13 +0000
Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: SyI6QdgIPKkpcxybLhmHolruvEwArLEqfwbamqspgUY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl
rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:da:38:7f:c9:b2:12:36:9f:9d:f7:02:a6:93:ac:fd:f6:45:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A
Validity
Not Before: Aug 2 05:29:13 2026 GMT
Not After : Aug 3 07:26:13 2026 GMT
Subject: CN=AD8B4AE8192D1CCF5972C5C7AA782C18DE74C62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:7c:1c:e5:af:6c:dc:60:f6:8d:48:3b:83:
aa:2e:88:a1:35:41:0d:81:4b:d5:49:29:e9:43:ed:
12:f5:dd:88:7e:5d:ec:40:d2:a3:46:8f:21:ca:dc:
dc:e6:a9:7c:c4:06:7b:80:86:2b:ec:06:1e:45:4d:
33:03:42:92:3e:86:38:8f:f0:e0:1f:67:db:89:94:
45:c4:21:46:fb:48:05:fd:03:2a:bc:21:cb:fd:4a:
3b:4d:08:a4:29:e3:67:ea:2d:1d:aa:6e:88:fe:e8:
86:2a:30:9a:b6:bd:13:98:b6:96:29:2e:c9:a7:b8:
6f:74:60:c1:01:2a:8a:65:5f:52:19:42:14:a4:8d:
a1:b6:81:cc:b3:61:54:78:0b:dc:fa:aa:55:c4:b4:
76:d5:1d:45:62:a4:36:43:c8:2b:e1:fb:f4:9c:da:
66:0e:e8:8f:8a:43:9c:da:3f:a1:a1:48:f4:af:d9:
2c:f8:24:8d:86:6f:c9:71:ff:fe:83:1e:e9:f6:de:
2e:d2:73:21:58:9d:28:72:4d:0e:47:ff:04:0b:6f:
a4:80:61:1d:ae:a4:38:71:d2:47:37:b1:a2:b9:a8:
9b:e5:da:c7:35:bc:db:27:9f:ee:99:04:27:e7:26:
53:ec:6c:ea:7b:5e:7b:59:3a:02:09:0f:ed:a0:87:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:4A:E8:19:2D:1C:CF:59:72:C5:C7:AA:78:2C:18:DE:74:C6:2F
X509v3 Authority Key Identifier:
keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f3:ae:d1:a7:3a:7e:9b:29:da:8a:3e:8a:d5:37:50:fa:f6:
e1:c4:0c:a3:6c:41:a0:4a:3a:de:bb:ab:23:77:8b:fe:86:63:
72:c7:bf:f6:c2:21:36:23:ac:48:86:da:9d:51:2e:d3:dd:d2:
6a:ce:dc:d5:86:dd:3c:b7:42:e1:da:cf:a8:58:d2:3c:23:f4:
cc:54:b9:4a:9d:70:c6:5a:d1:6a:54:d2:37:45:04:58:08:89:
91:bf:fc:d4:8a:ac:55:8a:e6:b1:ee:f9:5c:ef:57:80:58:f5:
f7:4c:4b:a8:17:0e:31:cb:3d:49:79:dd:9a:ec:68:5d:cb:0a:
ef:24:be:f2:96:97:1c:91:03:7a:d6:82:79:e5:1d:40:7d:5c:
dc:fd:29:b4:f1:e0:66:65:7d:2b:e4:49:7f:9a:9f:8b:09:7b:
a8:a7:cc:53:a2:a7:15:b5:b8:65:bc:23:0f:51:f8:36:61:7c:
e6:f6:af:9d:c3:20:f5:aa:92:ad:fb:a6:35:50:4e:e8:cf:29:
17:53:bf:b7:96:a1:f6:db:11:a2:5d:5e:a4:0b:cc:c7:e1:ee:
4d:2d:03:f1:0d:39:9c:f0:0b:cd:d2:6f:02:b2:b5:4c:53:69:
66:ad:19:84:26:cc:09:c4:99:d8:c6:90:1d:6e:ee:bb:a6:cd:
73:09:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:35 2026 by rpki-client