
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json)
Hash identifier: HRZNQDRk9C4bgCfq95BHrxusoucfWV5HkoGSdfDhvTc=
Subject key identifier: 7D:2C:C1:3C:20:3D:A7:D2:4D:3B:87:F7:BE:0C:4A:11:7B:BF:DF:71
Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585
Certificate serial: 74815C56B357162899EF811C2589F9803F8DC1D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 21:20:22 +0000
Manifest this update: Wed 16 Sep 2026 21:15:22 +0000
Manifest next update: Thu 17 Sep 2026 22:01:22 +0000
Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=)
2: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: Ccwv5V6oYQhhJi23U3xi4S3HVg2XA6YpKGd84StoEr0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:81:5c:56:b3:57:16:28:99:ef:81:1c:25:89:f9:80:3f:8d:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585
Validity
Not Before: Sep 16 21:15:22 2026 GMT
Not After : Sep 17 22:01:22 2026 GMT
Subject: CN=7D2CC13C203DA7D24D3B87F7BE0C4A117BBFDF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:76:99:59:1b:d2:db:2a:9c:b6:d7:3b:58:
ae:0d:8e:32:ab:ef:2c:ad:3e:e5:a5:f7:e2:f2:b0:
00:65:c0:8b:16:6d:4a:fc:ee:10:8e:64:54:55:7b:
2f:c7:73:0b:53:d9:ab:91:73:d7:20:14:fb:d8:73:
ae:38:74:37:be:1d:83:b2:08:36:a7:80:76:ae:4c:
b8:b7:35:82:87:a7:67:7d:e4:34:3f:78:24:8f:ba:
c6:7d:22:41:46:a5:ea:0e:53:35:74:6b:f4:d2:08:
94:35:b6:e5:b4:d4:13:72:38:7a:56:0a:ba:e4:0d:
e7:0a:d6:f1:2b:9a:e4:c2:56:2b:fa:27:47:c5:65:
5e:d6:e6:0c:7e:70:07:f8:4f:d2:e9:55:0c:19:b5:
e3:00:63:78:90:02:55:04:a0:1a:d6:2a:a5:cf:1c:
93:06:42:8e:50:b3:af:10:f0:2e:63:12:28:a0:49:
1e:83:46:08:10:61:53:61:fe:4f:6d:7a:23:05:73:
82:b2:da:c7:af:db:49:f6:7c:24:55:48:26:25:02:
3d:d3:72:8a:7b:2e:f6:dd:92:ac:8d:39:9b:89:5e:
a0:7b:e9:bc:76:6a:1a:ff:11:df:9c:63:ca:f2:e8:
ea:2b:bf:13:3f:0a:94:29:e8:a9:b0:fe:a1:6a:1a:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2C:C1:3C:20:3D:A7:D2:4D:3B:87:F7:BE:0C:4A:11:7B:BF:DF:71
X509v3 Authority Key Identifier:
keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:e2:80:45:5b:6a:e7:26:d9:7a:2e:8f:b5:95:63:46:fc:
81:61:50:55:86:a1:7d:74:11:b7:17:fa:df:1c:8f:63:87:87:
20:e2:42:f1:3b:95:d5:3d:33:d6:b2:e9:2c:87:42:65:25:81:
70:15:85:6d:35:e2:6c:5c:f7:18:40:29:5e:f7:25:c8:e9:2d:
06:2f:ee:87:1c:0d:71:fe:39:a5:f3:5e:3d:9b:78:73:6c:91:
9d:0f:bf:44:5f:df:90:3b:ab:e9:9a:a1:a4:2e:b4:69:90:96:
f2:ec:56:c1:9d:d4:27:4b:fa:b0:66:19:08:92:8d:3f:1b:b4:
9b:cc:e0:78:3b:7c:a1:4c:f7:8d:74:59:74:32:00:8e:19:12:
aa:7c:a4:b0:d6:b3:34:5e:0d:3e:70:1b:98:f2:e3:ff:cc:61:
83:07:37:1c:2f:b2:f2:06:35:fb:82:38:06:4a:8a:3e:a8:cf:
e5:12:52:61:09:62:96:91:d9:82:3b:e6:15:b5:2e:85:61:f1:
d4:05:de:bd:f5:7b:1c:d0:b3:c7:6d:6c:c3:03:f7:a8:59:75:
73:f6:32:72:ee:61:66:94:19:ab:a7:14:1b:96:a2:ef:1a:7d:
14:23:b6:db:28:57:9c:3d:c7:bd:e9:48:37:90:f6:24:e8:2c:
41:01:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:42:09 2026 by rpki-client