
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json)
Hash identifier: /5uLWgTHWa81d/gBjELTs+GGDQqtwwsWyyOgun7P+js=
Subject key identifier: 25:C8:B3:32:2A:C2:EB:A3:29:58:37:81:6E:2C:20:4B:9A:78:F5:A8
Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0
Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0
Certificate serial: 123F6141FD8CCD81B18D922DE704F584CF1EEA01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 23:57:56 +0000
Manifest this update: Wed 19 Aug 2026 23:52:56 +0000
Manifest next update: Fri 21 Aug 2026 00:07:56 +0000
Files and hashes: 1: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: VpRz7zLeQEAK78T6cRNFvCR1Q593aSOE3bNFtVfXchA=)
2: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=)
3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=)
4: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=)
5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl
rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 00:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3f:61:41:fd:8c:cd:81:b1:8d:92:2d:e7:04:f5:84:cf:1e:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0
Validity
Not Before: Aug 19 23:52:56 2026 GMT
Not After : Aug 21 00:07:56 2026 GMT
Subject: CN=25C8B3322AC2EBA3295837816E2C204B9A78F5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:b3:5d:61:a7:f0:f8:9d:9b:97:bd:8d:27:
1f:83:c4:df:7b:f1:30:6c:43:c5:76:5e:53:af:63:
f2:8d:53:b1:95:44:ed:68:c1:ff:9b:bd:f4:46:23:
c7:e2:38:f2:5d:0f:22:c9:cc:fd:79:43:1b:b0:5a:
e1:c0:8b:94:76:fb:12:5f:77:75:a3:7d:cb:70:ed:
f7:60:67:8b:bf:37:b9:c9:df:88:a6:5b:83:f8:14:
49:59:1f:75:98:f9:7a:39:65:32:44:2d:0a:50:e0:
48:fc:4b:3f:00:93:ff:ee:58:c9:64:96:0a:04:92:
80:06:ba:13:29:e3:d1:ba:d6:c6:61:fb:8b:e7:29:
c0:01:7d:da:70:cf:79:9a:32:79:be:1b:b7:8f:65:
63:d8:5e:ba:f1:34:95:86:dc:65:1e:90:0a:96:aa:
ef:1f:9b:da:68:88:47:a8:95:21:8d:42:29:10:5e:
39:7d:f0:7d:fe:a6:f2:fb:76:19:6c:f2:61:ec:d1:
65:62:f2:b6:54:ff:1d:fb:ec:02:55:90:5b:0e:1b:
94:c6:23:df:1b:51:52:cf:f4:76:e7:d4:55:5d:62:
6b:1a:fd:23:0f:c4:a3:0a:ef:2c:e1:df:76:61:ce:
04:95:47:c5:b1:85:5d:6b:d0:b0:95:4d:0c:72:10:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:B3:32:2A:C2:EB:A3:29:58:37:81:6E:2C:20:4B:9A:78:F5:A8
X509v3 Authority Key Identifier:
keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:bc:82:a7:0d:9b:b6:ff:ec:82:8e:33:33:fb:6e:57:8e:
71:b1:63:27:01:e1:b0:93:76:a4:db:e8:a2:1e:62:a8:f4:22:
94:10:a8:f9:3e:d7:79:ca:b2:d1:58:ca:bf:34:c6:80:d8:d7:
33:7c:fc:fb:24:c2:55:31:b0:e6:d8:ea:01:84:d8:7d:5d:d1:
97:55:2b:0d:d9:5e:01:24:2d:1f:81:4c:e7:9d:23:44:1f:c7:
1c:78:30:71:dc:9a:48:89:a4:8f:96:1c:21:84:ce:63:c5:c1:
c8:10:15:9e:53:5c:c5:e2:48:72:bb:08:44:29:3e:b0:5f:bf:
2b:27:da:4b:3c:36:81:35:02:b9:4f:f6:e1:f6:6c:44:a3:24:
0c:ca:46:30:50:1f:a4:3c:56:d5:bb:31:5e:52:05:00:ad:7d:
01:7b:6d:76:a9:4a:79:b7:56:57:90:2b:37:01:6f:27:71:8c:
68:fe:06:26:8e:22:f0:9a:69:3d:4f:f3:6a:12:1c:9a:95:d4:
e4:07:56:40:1a:6e:c6:65:5e:3c:59:fd:62:86:20:db:80:b2:
39:0b:97:29:ce:bf:7c:f1:c0:e9:89:64:42:b2:dd:3b:df:6d:
30:62:73:36:5e:ff:29:7c:d9:8c:09:7b:9a:7f:f8:b8:13:62:
f6:61:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 13:18:02 2026 by rpki-client