
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
File: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft (raw, json)
Hash identifier: hqg/udziDIDXg+96Mtsn4oBTqjLvHrQU0x2wNMfLatc=
Subject key identifier: 59:BD:23:D1:E6:B8:3C:91:99:95:FB:71:47:78:C6:1F:B7:69:AB:AC
Authority key identifier: F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3
Certificate issuer: /CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
Certificate serial: 653EB886A180E1EAFED036D1CFE07716821997E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 18:23:01 +0000
Manifest this update: Fri 19 Jun 2026 18:18:01 +0000
Manifest next update: Sat 20 Jun 2026 21:57:01 +0000
Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: 01F1UoKRV2E0gP5aPTGtczRefIGjQne0iajygCNTbZQ=)
2: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl (hash: W+iDgwW3W9YE4pxfkapUfpKeu4RPawIZDtOkz1obxUA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl
rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 21:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3e:b8:86:a1:80:e1:ea:fe:d0:36:d1:cf:e0:77:16:82:19:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
Validity
Not Before: Jun 19 18:18:01 2026 GMT
Not After : Jun 20 21:57:01 2026 GMT
Subject: CN=59BD23D1E6B83C919995FB714778C61FB769ABAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:4c:c3:7f:b5:2e:8a:e1:4e:6f:55:cd:2c:
08:04:1f:3d:dc:40:ad:25:38:5f:f2:ca:5c:f3:36:
d0:6f:0a:66:85:c5:c5:2a:ba:bb:c9:cc:92:08:d0:
c2:42:a3:60:c8:a6:69:71:33:58:a5:bf:bf:8c:c0:
d9:83:57:f8:86:21:4a:24:e0:b9:d9:31:80:ae:cc:
bb:9a:ac:c3:fa:0c:b4:5a:e0:eb:fd:38:c7:01:e4:
bc:43:b4:d0:e8:43:8f:27:f8:76:3f:05:b7:8b:c4:
4a:86:9f:19:eb:b8:e7:ef:c5:11:0e:94:ef:83:2e:
d7:d4:03:1f:a6:a6:a3:d7:4b:5d:bf:5f:18:a3:2c:
28:dd:57:c4:e3:94:0d:73:ce:67:1f:56:8e:18:27:
86:8e:18:2f:fd:e6:f8:74:ee:4f:6a:41:da:10:a0:
3a:63:52:8a:02:b3:3b:12:c2:2e:b5:92:62:fe:1f:
47:4c:41:30:39:1c:32:7b:ec:31:86:67:5d:a1:68:
70:a9:52:3f:fa:69:e1:c6:40:bd:b6:46:47:f5:50:
8f:53:09:36:7c:04:dc:89:95:54:17:1d:27:40:79:
3c:a6:a0:7c:6b:b2:f9:c1:bd:85:01:df:74:20:35:
bf:8b:1a:f0:71:ce:ab:f5:6a:80:2e:68:54:7e:d4:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:23:D1:E6:B8:3C:91:99:95:FB:71:47:78:C6:1F:B7:69:AB:AC
X509v3 Authority Key Identifier:
keyid:F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:af:d6:74:c4:55:09:fa:65:6d:95:7c:f9:73:7e:83:aa:
52:01:c2:ca:40:5c:f1:7f:a5:04:40:d2:2c:d6:c0:29:c1:19:
d0:df:d9:98:48:36:ed:c2:53:d8:73:3c:c2:47:24:0c:76:33:
09:3d:e4:d7:6c:44:b8:50:3e:0e:cc:98:cf:8a:b3:2e:39:0a:
0c:97:98:fc:8b:f8:a5:b4:cb:ac:b3:c3:53:68:a5:76:50:3c:
62:57:4d:af:c7:c9:77:8a:fd:c9:24:2e:be:65:66:28:1f:68:
4f:1f:b0:8d:2b:07:5e:4e:e6:ce:a4:ae:d8:c9:87:63:35:16:
08:14:95:53:2d:f4:19:5d:e2:8d:49:95:8f:75:eb:7d:1d:80:
fa:58:5a:44:cc:e0:32:e1:53:3f:f0:d6:5f:f4:96:0c:83:92:
2a:7d:32:7b:53:4e:a5:8c:78:3e:f2:c0:7d:59:5a:10:4e:21:
00:17:13:b9:c4:e7:64:87:f3:c3:bd:bc:74:41:1f:e1:e9:c1:
da:21:24:87:3f:08:a5:6b:f6:87:5e:56:90:6f:a2:5f:86:29:
7b:ae:36:58:96:42:e8:8d:28:22:35:46:1b:2f:7f:2b:4d:8e:
44:68:ec:48:a3:41:f9:7c:5a:8b:7e:4d:a7:e2:80:39:4b:4e:
04:a4:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:17:45 2026 by rpki-client