
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft
File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json)
Hash identifier: vmhvjAlnwvvjvSBWOt3BYdc43H92AreuI0kLsAurvwM=
Subject key identifier: 2E:3E:81:09:7C:E9:C0:DC:77:3C:BE:D5:0A:20:97:A2:27:D6:78:8A
Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F
Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F
Certificate serial: 129903846DE643711CE90CE79F23CDB29768D602
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 22:28:07 +0000
Manifest this update: Fri 19 Jun 2026 22:23:07 +0000
Manifest next update: Sat 20 Jun 2026 22:29:07 +0000
Files and hashes: 1: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: Tad0lcIZbUAk0dmh8BGEbs7sa+/HbmwBligvrikz6vg=)
2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl
rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 22:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:99:03:84:6d:e6:43:71:1c:e9:0c:e7:9f:23:cd:b2:97:68:d6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F
Validity
Not Before: Jun 19 22:23:07 2026 GMT
Not After : Jun 20 22:29:07 2026 GMT
Subject: CN=2E3E81097CE9C0DC773CBED50A2097A227D6788A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:08:61:05:80:82:96:9a:c2:ed:a6:d3:78:
b6:b4:35:4a:75:7c:3e:08:ea:97:50:8b:13:aa:88:
46:21:ab:2c:1a:44:7f:13:b8:ce:c7:dc:a6:70:5f:
92:f2:1d:db:57:e2:c1:36:ff:e0:c5:ea:af:79:21:
72:53:16:5c:1a:66:53:36:0a:16:33:a3:8e:86:bb:
04:ed:52:32:d1:f3:5c:48:86:7e:6d:7e:3b:2f:50:
dc:a7:95:da:16:3e:3e:14:22:57:0d:17:03:b9:aa:
d8:55:c5:19:42:e3:50:79:a5:c8:2d:f9:87:69:34:
af:67:cf:a5:ca:7c:17:34:48:a3:ef:ad:b6:88:3e:
5d:70:ee:2b:18:4b:3b:66:1f:ce:70:31:73:ec:74:
ea:9f:6a:1d:d1:37:5e:b1:5a:89:43:38:a5:93:ea:
34:42:1d:ac:8b:bd:f5:93:71:25:10:78:1a:e7:df:
fa:26:e3:cb:1e:9a:8b:c2:85:9a:10:b5:3f:8a:e5:
e0:3d:bc:27:ae:4a:39:8d:aa:ba:4f:90:e0:95:dd:
48:84:f2:a4:0b:78:1e:f7:70:dc:61:2b:83:9f:44:
27:92:66:c6:d0:05:61:fc:30:ad:53:ce:a3:d2:ee:
33:58:da:f5:06:cb:c3:3a:d7:d4:9f:93:6e:ad:c5:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:81:09:7C:E9:C0:DC:77:3C:BE:D5:0A:20:97:A2:27:D6:78:8A
X509v3 Authority Key Identifier:
keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:de:4e:cf:d4:ea:4f:be:d7:25:0f:b1:f5:10:a7:05:de:
80:00:78:b4:bb:95:ae:1e:f0:36:86:52:3d:33:b6:45:73:a6:
2d:fc:dd:05:3b:48:22:a3:f0:48:f7:01:e3:1d:12:16:c1:33:
85:b9:fa:db:3e:04:06:de:ac:38:30:6f:36:d7:2f:de:b3:f9:
60:9e:e2:7f:4f:38:d2:24:15:c1:0c:27:62:22:26:63:33:ec:
a7:eb:88:e1:c9:7f:4a:a6:c7:21:1c:95:07:0c:30:57:70:6c:
19:73:46:6f:60:5a:d0:44:6e:42:9c:f9:f7:83:86:ee:b1:26:
1e:4c:69:1d:4b:3c:ce:03:44:d1:d2:a9:84:e7:0c:df:4a:68:
90:dd:24:77:eb:29:8b:fd:0a:44:36:4a:22:54:ef:38:d2:01:
04:0d:34:a8:bf:7e:15:62:f3:b3:76:6d:b2:be:ec:61:8a:1a:
cf:9b:50:e0:06:f3:6d:1a:33:02:61:7d:53:35:14:57:9e:d4:
dc:ec:af:44:e0:22:aa:e2:0a:66:f6:dd:7d:6d:c0:93:b7:49:
b3:da:d5:40:ca:37:3b:81:68:25:7d:09:f9:37:43:1b:8b:b5:
ea:5c:b1:02:39:24:2f:98:d7:aa:98:64:76:d9:ec:fb:99:61:
0d:e2:50:d8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEpkDhG3mQ3Ec6QznnyPNspdo1gIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5
Q0MzQUY1RjAeFw0yNjA2MTkyMjIzMDdaFw0yNjA2MjAyMjI5MDdaMDMxMTAvBgNV
BAMTKDJFM0U4MTA5N0NFOUMwREM3NzNDQkVENTBBMjA5N0EyMjdENjc4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdAhhBYCClprC7abTeLa0NUp1
fD4I6pdQixOqiEYhqywaRH8TuM7H3KZwX5LyHdtX4sE2/+DF6q95IXJTFlwaZlM2
ChYzo46GuwTtUjLR81xIhn5tfjsvUNynldoWPj4UIlcNFwO5qthVxRlC41B5pcgt
+YdpNK9nz6XKfBc0SKPvrbaIPl1w7isYSztmH85wMXPsdOqfah3RN16xWolDOKWT
6jRCHayLvfWTcSUQeBrn3/om48semovChZoQtT+K5eA9vCeuSjmNqrpPkOCV3UiE
8qQLeB73cNxhK4OfRCeSZsbQBWH8MK1TzqPS7jNY2vUGy8M619Sfk26txayFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULj6BCXzpwNx3PL7VCiCXoifWeIowHwYDVR0j
BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx
NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB
RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1
MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF
RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAISJ3k7P1OpPvtclD7H1EKcF3oAAeLS7la4e
8DaGUj0ztkVzpi383QU7SCKj8Ej3AeMdEhbBM4W5+ts+BAberDgwbzbXL96z+WCe
4n9PONIkFcEMJ2IiJmMz7KfriOHJf0qmxyEclQcMMFdwbBlzRm9gWtBEbkKc+feD
hu6xJh5MaR1LPM4DRNHSqYTnDN9KaJDdJHfrKYv9CkQ2SiJU7zjSAQQNNKi/fhVi
87N2bbK+7GGKGs+bUOAG820aMwJhfVM1FFee1Nzsr0TgIqriCmb23X1twJO3SbPa
1UDKNzuBaCV9Cfk3QxuLtepcsQI5JC+Y16qYZHbZ7PuZYQ3iUNg=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:05 2026 by rpki-client