
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
File: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft (raw, json)
Hash identifier: Tz0V1HiovF0px2Tnjx+djVEAZg/GXteKXelMMZymLNg=
Subject key identifier: 82:2C:8A:B3:78:BF:FC:0B:36:05:B8:4E:1F:BD:AC:26:75:77:C1:7E
Authority key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31
Certificate issuer: /CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
Certificate serial: 121086EF68E9873FB35A8E630616800EB6183228
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
Manifest number: 8C
Signing time: Fri 14 Aug 2026 12:51:05 +0000
Manifest this update: Fri 14 Aug 2026 12:46:05 +0000
Manifest next update: Sat 15 Aug 2026 13:44:05 +0000
Files and hashes: 1: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl (hash: BNX52n0n2pgZVpKZefykFmmsWeY45th/lcN2149ANjo=)
2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: orsjKTV02O8TMgWpMnovRo4VVZwRW9a2U4tEzVvr014=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl
rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 09:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:10:86:ef:68:e9:87:3f:b3:5a:8e:63:06:16:80:0e:b6:18:32:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
Validity
Not Before: Aug 14 12:46:05 2026 GMT
Not After : Aug 15 13:44:05 2026 GMT
Subject: CN=822C8AB378BFFC0B3605B84E1FBDAC267577C17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:69:7e:70:5c:d2:d6:87:d4:4b:3e:78:c6:
90:2f:dc:a0:57:b8:89:cb:49:5c:83:a0:86:c1:b3:
17:05:13:e6:7b:16:55:82:5d:77:99:cf:e3:ff:97:
0c:91:95:55:5e:4f:7e:21:c3:4b:a0:bf:33:5f:4d:
7e:7f:84:ed:5e:bc:ae:37:ad:9b:09:ac:dd:87:70:
85:41:b6:78:02:94:6f:97:cf:49:54:12:ac:e5:25:
57:55:7e:cd:c3:cf:cf:fe:71:c2:b0:d9:e6:7a:e7:
0a:f7:cd:76:5f:5c:96:cc:84:3d:7a:76:0f:cc:d5:
c0:b5:b5:44:27:ac:34:92:49:8c:db:6f:55:32:ba:
1f:8d:77:43:e2:df:c2:21:4c:f7:53:1d:00:0a:5b:
7b:2a:cc:fe:ae:d1:7d:6f:3b:62:3c:62:f4:f7:62:
df:fa:2d:f3:70:5c:bc:cc:cc:03:76:28:88:4e:ff:
ce:a0:6a:d8:94:3b:0b:e3:ae:e3:2d:c8:62:56:8c:
5a:37:b7:d5:1b:2d:18:0a:05:17:a3:c2:68:8b:3d:
6a:9d:67:7f:90:8f:12:63:37:51:f1:06:ca:c7:61:
11:a3:05:65:46:4b:33:f7:23:ba:8d:ae:b8:1c:21:
ff:2a:20:ea:4f:f4:0b:7a:2b:65:56:84:e2:d3:7f:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:8A:B3:78:BF:FC:0B:36:05:B8:4E:1F:BD:AC:26:75:77:C1:7E
X509v3 Authority Key Identifier:
keyid:FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:94:23:77:7f:02:48:08:52:31:2f:9d:0c:47:d6:c6:19:
fc:18:50:c4:1f:c4:93:33:17:9c:f4:5a:cf:ff:e5:93:52:41:
d1:b4:5b:03:18:d6:2d:3c:22:4f:2b:f6:cd:33:c8:31:2c:aa:
3f:43:88:ad:d3:8d:81:d0:64:58:53:c1:40:71:c5:0b:02:65:
75:58:c5:d0:db:63:78:be:09:99:36:53:1e:30:29:1b:fc:e1:
8c:69:2b:cb:a8:54:64:37:59:e0:89:6a:0b:28:5b:fe:37:4f:
ff:b8:8f:d1:0c:7a:56:2b:fc:59:01:ba:de:35:8d:7f:5c:09:
9a:80:ac:b3:98:a9:80:7e:80:a4:bc:fd:a4:42:d0:06:20:83:
d5:d6:85:93:b8:43:af:3b:b8:c3:41:72:5a:93:21:c6:a3:9f:
6f:52:fc:eb:ed:0d:02:d6:93:08:97:1e:7a:0f:4f:24:e4:f9:
29:ea:34:10:e3:08:01:22:d4:85:19:22:f0:13:6a:41:a2:0e:
68:f6:30:49:76:09:26:2e:6d:39:25:57:a6:64:98:a6:29:cb:
fe:39:09:7f:5d:0b:96:d9:70:e3:f9:ba:7c:81:d1:8c:19:fb:
0d:14:6e:2c:ea:90:c3:bd:3b:33:3a:78:83:f5:55:97:fe:2b:
a4:0b:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 15:29:43 2026 by rpki-client