
$ rpki-client -vvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json)
Hash identifier: mFMkTegWFGhjtPTuBv7wc55tz6z01xECLcI9oF41Z80=
Subject key identifier: 97:B7:F2:AF:9D:48:A5:AD:90:44:37:C0:61:32:FC:74:88:CF:6D:75
Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F
Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F
Certificate serial: 14CD75CB9F5EABF42117101640A9467D57520E5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 16:59:29 +0000
Manifest this update: Wed 19 Aug 2026 16:54:29 +0000
Manifest next update: Thu 20 Aug 2026 19:59:29 +0000
Files and hashes: 1: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: FKghNMjWBf7ug34P9VcbWmLuXdGOcYP5ywPGxYgKyPs=)
2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl
rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 19:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cd:75:cb:9f:5e:ab:f4:21:17:10:16:40:a9:46:7d:57:52:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F
Validity
Not Before: Aug 19 16:54:29 2026 GMT
Not After : Aug 20 19:59:29 2026 GMT
Subject: CN=97B7F2AF9D48A5AD904437C06132FC7488CF6D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:33:e6:94:c7:29:fc:eb:06:36:48:cc:4d:
8e:a7:bf:ac:01:38:1b:d6:d1:0b:58:02:09:93:3b:
7e:c8:fa:c7:f2:9a:fe:b5:20:74:56:d9:96:24:85:
da:93:9f:cb:9b:d8:42:7b:af:f9:f5:bc:2d:ad:f5:
8b:2f:ec:d6:ed:98:bc:41:07:d4:9a:16:4b:0f:a3:
89:33:05:3c:f1:f2:c4:85:43:ec:82:a2:9c:7e:73:
bf:6c:05:17:24:08:a5:75:67:2f:ce:42:f2:00:5f:
d4:f5:2d:0b:51:bb:63:9a:2f:0b:71:72:97:08:71:
c5:39:00:3e:34:3d:8e:63:f7:42:bd:3b:99:50:5d:
04:d3:8c:e1:f5:82:f3:72:4d:41:c1:b1:57:fc:da:
ca:43:4c:93:3b:ce:cd:9c:04:33:4c:3b:85:8e:1d:
d3:72:3d:f6:2d:d2:0c:a4:01:99:06:3b:32:b1:8e:
39:69:df:60:9b:db:82:4c:43:c3:fe:a2:6f:64:9a:
6f:99:fd:e9:3a:13:78:dd:ba:eb:d0:1d:f7:c9:ac:
b3:a3:2f:7d:d7:9c:6b:63:da:30:ea:88:f9:32:8b:
65:5d:aa:d0:13:01:2b:df:09:0d:46:ec:6d:63:78:
6f:31:5d:3e:d3:99:d9:14:a7:71:e3:97:11:7e:e9:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:F2:AF:9D:48:A5:AD:90:44:37:C0:61:32:FC:74:88:CF:6D:75
X509v3 Authority Key Identifier:
keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:33:82:e3:ea:3b:0c:ca:ae:92:87:af:b4:69:4b:89:e9:
93:a4:94:f5:20:ed:2a:9c:80:a1:5d:68:66:b1:45:ad:79:91:
e3:59:df:7f:ce:d7:57:b5:a8:5e:c0:26:67:09:4f:88:85:b9:
64:e4:fe:12:50:2f:2d:e4:2d:be:5b:6d:81:06:67:c3:74:ad:
fa:5d:2e:36:b2:95:aa:13:2c:4f:bd:56:1c:22:f7:ed:c6:3e:
8e:15:44:a2:08:d0:1e:b5:bc:07:3e:d8:f3:ef:be:55:15:eb:
88:27:f2:76:7b:96:c9:fc:f8:79:ea:17:ea:64:47:6d:e5:de:
8e:e7:12:3b:fb:b2:96:64:1f:d2:21:7c:65:27:08:72:30:04:
fc:aa:9a:0f:ab:9d:7c:39:de:59:0d:68:de:e7:26:0c:73:72:
5e:20:27:67:6b:8f:3d:26:ef:1c:84:f7:71:d5:03:78:9c:26:
4b:c5:dc:7d:df:94:18:7c:bb:cc:65:89:dc:9f:20:9d:d8:15:
30:4b:0b:60:f4:b5:f3:39:77:2d:0e:ba:42:b6:16:55:46:21:
35:cb:4f:ce:15:5f:aa:2e:82:d5:9d:10:57:4d:00:5f:43:e6:
2d:bc:ed:71:61:86:6f:42:f3:79:15:f8:52:f6:c6:e3:ff:5c:
fd:d1:08:71
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFM11y59eq/QhFxAWQKlGfVdSDlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz
Q0ZGODM5RjAeFw0yNjA4MTkxNjU0MjlaFw0yNjA4MjAxOTU5MjlaMDMxMTAvBgNV
BAMTKDk3QjdGMkFGOUQ0OEE1QUQ5MDQ0MzdDMDYxMzJGQzc0ODhDRjZENzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcDPmlMcp/OsGNkjMTY6nv6wB
OBvW0QtYAgmTO37I+sfymv61IHRW2ZYkhdqTn8ub2EJ7r/n1vC2t9Ysv7NbtmLxB
B9SaFksPo4kzBTzx8sSFQ+yCopx+c79sBRckCKV1Zy/OQvIAX9T1LQtRu2OaLwtx
cpcIccU5AD40PY5j90K9O5lQXQTTjOH1gvNyTUHBsVf82spDTJM7zs2cBDNMO4WO
HdNyPfYt0gykAZkGOzKxjjlp32Cb24JMQ8P+om9kmm+Z/ek6E3jduuvQHffJrLOj
L33XnGtj2jDqiPkyi2VdqtATASvfCQ1G7G1jeG8xXT7TmdkUp3HjlxF+6emjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUl7fyr51Ipa2QRDfAYTL8dIjPbXUwHwYDVR0j
BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4
RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4
MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1
YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE
MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIgGM4Lj6jsMyq6Sh6+0aUuJ6ZOklPUg7Sqc
gKFdaGaxRa15keNZ33/O11e1qF7AJmcJT4iFuWTk/hJQLy3kLb5bbYEGZ8N0rfpd
LjaylaoTLE+9Vhwi9+3GPo4VRKII0B61vAc+2PPvvlUV64gn8nZ7lsn8+HnqF+pk
R23l3o7nEjv7spZkH9IhfGUnCHIwBPyqmg+rnXw53lkNaN7nJgxzcl4gJ2drjz0m
7xyE93HVA3icJkvF3H3flBh8u8xlidyfIJ3YFTBLC2D0tfM5dy0OukK2FlVGITXL
T84VX6ougtWdEFdNAF9D5i287XFhhm9C83kV+FL2xuP/XP3RCHE=
-----END CERTIFICATE-----
Generated at Thu Aug 20 13:14:29 2026 by rpki-client