
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: yMaUkG3mjsMR8lDFY2MEPdifGEda1hfx1Pd9lMAE20s=
Subject key identifier: A5:D9:2C:82:BB:47:DA:F4:CC:A1:0B:05:9D:F1:F5:4C:6F:CC:A0:6A
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 7244AECC198338A2AA3600FE65C00C2726440180
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: EF
Signing time: Mon 26 Oct 2026 22:23:16 +0000
Manifest this update: Mon 26 Oct 2026 22:18:16 +0000
Manifest next update: Wed 28 Oct 2026 00:11:16 +0000
Files and hashes: 1: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
2: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
3: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: latkYJjY0C8Y2g4lf86Ztw+oJKh4oROi6ejqlybvsiw=)
4: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:44:ae:cc:19:83:38:a2:aa:36:00:fe:65:c0:0c:27:26:44:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: Oct 26 22:18:16 2026 GMT
Not After : Oct 28 00:11:16 2026 GMT
Subject: CN=A5D92C82BB47DAF4CCA10B059DF1F54C6FCCA06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:60:d1:b5:58:fd:bc:52:76:00:80:f4:4a:
b4:33:3c:c7:79:ef:50:cb:13:cf:a4:0e:4e:2b:65:
c2:dd:ea:86:30:04:bd:9b:4b:c6:55:96:d4:96:e3:
68:5c:c2:04:6d:b4:02:05:ca:d9:e2:39:4d:0d:92:
c9:42:a0:3c:1b:8a:24:b7:d5:9b:f0:86:5d:e1:ae:
52:61:64:68:9e:9d:7f:73:44:1a:ca:4c:6a:34:db:
69:b9:af:e0:55:11:8f:eb:21:ed:ae:a5:31:4a:d2:
a4:98:73:92:6b:4f:d6:3e:29:cf:ee:d6:05:1f:9c:
d7:15:cb:49:d3:8c:6e:b1:c9:f6:0e:14:eb:3f:08:
4a:0e:f4:f7:b8:1a:2a:4a:dd:96:01:9a:e4:2c:18:
d9:24:da:13:48:85:ea:5c:72:49:17:57:9d:5a:48:
5f:e0:69:12:5a:45:4f:61:21:ab:e2:5e:52:2e:2a:
52:81:2a:ed:81:4e:08:1c:9e:19:9c:56:f7:b8:b2:
33:83:c2:2c:70:87:70:8a:73:7c:59:ee:d6:2c:9d:
70:18:ed:50:42:31:ac:9c:48:1e:fb:e0:b7:e1:45:
10:fc:70:d7:83:62:58:7a:8e:8d:f7:8c:6b:c3:c7:
6a:fe:60:73:52:9b:28:24:71:a3:d6:fb:a7:33:26:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:2C:82:BB:47:DA:F4:CC:A1:0B:05:9D:F1:F5:4C:6F:CC:A0:6A
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:18:94:fd:a2:41:5d:d8:f9:39:41:98:69:44:ce:e6:d3:
fc:55:4a:4b:79:4e:c4:00:69:fe:27:30:7e:f2:07:98:76:ae:
57:9b:d9:b7:5a:83:b3:75:6d:bd:22:41:d3:fe:aa:96:92:70:
e4:ba:39:5d:f3:31:5d:46:bd:bc:62:f7:c4:f2:e1:39:96:20:
38:9f:b1:a1:03:8b:88:b3:02:e8:52:fd:d1:93:97:04:a4:89:
31:73:a4:fc:3f:f6:bf:40:f9:66:eb:44:f4:6e:c2:b9:d6:6a:
90:5e:a3:78:71:2c:27:8f:f5:5f:86:ab:4a:0f:68:96:75:a6:
39:c8:61:4e:4d:97:5f:96:8d:95:19:2d:5b:10:f7:1d:43:0d:
10:fc:53:32:39:58:b7:ae:29:05:ce:cc:bb:cf:43:b6:4e:80:
ef:37:ac:fe:f0:ef:b5:f4:54:c0:b9:92:e3:3f:b0:87:e8:3d:
53:c8:9a:60:19:32:ff:de:8e:f9:0f:bd:f0:a0:08:1d:42:fe:
7f:a6:cc:de:0d:03:4c:5f:ff:1d:12:d3:7b:76:2b:64:6a:62:
a0:e7:22:c2:7f:61:e6:19:85:2e:3b:cc:61:da:52:5e:1e:d2:
91:87:47:c6:61:07:67:e5:c7:dc:72:ae:fd:4e:d6:49:eb:7e:
72:64:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:18 2026 by rpki-client