
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft
File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json)
Hash identifier: LDf7DCyXpdnjce2cOOQBkNPxhek3cq6kJw4GW0ccvEQ=
Subject key identifier: DC:90:AF:32:A1:F1:06:3D:32:63:07:E9:80:95:AB:2C:29:3A:D1:9E
Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8
Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8
Certificate serial: 1DE3F77C5BDDAC1EBD7E62B8C32C742AA4FF95A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 20:32:30 +0000
Manifest this update: Sun 25 Oct 2026 20:27:30 +0000
Manifest next update: Mon 26 Oct 2026 22:17:30 +0000
Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=)
2: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: 2DrOMbdO29vIhEn+uWnj9Czhb5we0vWijOYSfLMLnio=)
3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl
rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e3:f7:7c:5b:dd:ac:1e:bd:7e:62:b8:c3:2c:74:2a:a4:ff:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8
Validity
Not Before: Oct 25 20:27:30 2026 GMT
Not After : Oct 26 22:17:30 2026 GMT
Subject: CN=DC90AF32A1F1063D326307E98095AB2C293AD19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:64:52:05:7e:cc:0a:1f:0c:c4:a0:5e:f6:
f5:a1:74:0f:d7:ab:e6:c7:b9:bc:0e:c0:ef:29:13:
df:79:bf:0e:c5:21:a1:6a:f4:79:6a:84:5e:6f:38:
1e:aa:20:58:e0:a0:77:58:3b:da:38:50:d0:83:05:
78:ee:65:06:ed:c5:1e:7c:d6:40:86:64:12:fe:c4:
4d:30:27:1f:2f:e7:07:cc:06:0a:ca:04:af:a8:5f:
38:73:1b:08:cc:c7:47:e3:46:a2:83:a9:4b:0e:5d:
73:e9:78:15:dc:38:f6:1b:69:a1:27:05:d9:c0:24:
04:79:7b:2b:d4:b2:0d:7a:fc:e0:74:b3:26:e1:86:
ec:9b:f9:80:e1:4d:c2:32:b3:ac:cc:2c:0a:b8:83:
d2:98:33:4b:e9:ed:bf:d5:6b:21:3e:24:7c:5f:01:
f2:3c:3c:57:6a:40:7c:c0:fa:c8:e4:65:c6:7f:18:
6c:da:89:0c:51:7b:17:b2:66:7c:97:4d:bb:c5:b6:
82:0d:13:0a:2f:9e:a6:c5:26:05:cb:52:7f:ae:19:
09:e2:5e:65:59:61:2e:51:2a:92:05:83:f4:b2:2d:
a9:c9:25:b9:fe:f7:df:10:6c:cf:4b:4d:d4:eb:b2:
6e:49:d1:aa:35:f5:16:26:d5:98:22:a9:2a:ca:8a:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:AF:32:A1:F1:06:3D:32:63:07:E9:80:95:AB:2C:29:3A:D1:9E
X509v3 Authority Key Identifier:
keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:6b:8d:45:93:4b:62:32:db:aa:fb:ec:05:87:e8:d8:8b:
30:04:ba:d2:96:f3:05:e1:3b:47:f1:86:78:db:5b:3a:97:91:
82:78:fe:d2:5b:fd:d8:bd:79:6c:53:42:5d:88:b9:57:b1:3d:
f0:fa:5c:a1:95:12:c6:b4:79:57:71:c3:13:1d:44:89:6c:27:
9b:7d:de:bf:0e:ee:5c:21:6a:15:b3:a6:d1:3c:31:bb:73:b2:
29:2d:75:a1:93:49:5d:29:8d:1b:08:4f:d8:92:5f:5b:8c:d2:
e1:ac:39:2a:cf:7d:9d:40:ba:c5:ef:e2:70:81:4b:46:e3:78:
51:da:12:31:5a:e3:bc:f1:4b:62:68:2f:3f:22:74:76:bd:9d:
c4:60:e9:57:1f:4b:bc:14:b5:5e:69:97:83:b2:c2:68:d9:64:
6b:b3:df:05:22:45:2b:2d:62:19:74:e2:d5:44:72:dd:2c:09:
f4:65:1c:9c:11:b4:d0:e7:97:24:0c:25:34:8d:dd:1e:35:77:
6f:a3:0d:e6:94:09:d7:25:52:a3:06:ac:0c:06:e8:40:31:05:
48:13:79:5f:42:4f:6e:72:ef:67:af:a1:8d:b0:e7:91:07:33:
d5:77:bb:44:70:62:4d:b1:fa:38:21:5d:3f:22:11:c6:77:76:
e5:09:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:12 2026 by rpki-client