
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
File: FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json)
Hash identifier: 5uo9yUMYVxP/IynEkWafnopOrE0dB7mPodZOoEpTmBA=
Subject key identifier: 09:4A:C1:94:91:64:3C:8B:93:4C:1F:94:25:BD:70:3D:D2:9F:07:34
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial: 4DEB0ED360852C3671494CA267808A029E2559AB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
Manifest number: 23
Signing time: Wed 27 May 2026 18:09:10 +0000
Manifest this update: Wed 27 May 2026 18:04:10 +0000
Manifest next update: Thu 28 May 2026 20:13:10 +0000
Files and hashes: 1: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=)
2: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=)
3: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=)
4: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: WWhAzMKHJBi8OmzjoXxeetAA8ohCrHJREJctIGodU7k=)
5: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=)
6: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=)
7: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 19:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:eb:0e:d3:60:85:2c:36:71:49:4c:a2:67:80:8a:02:9e:25:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
Validity
Not Before: May 27 18:04:10 2026 GMT
Not After : May 28 20:13:10 2026 GMT
Subject: CN=094AC19491643C8B934C1F9425BD703DD29F0734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:6e:02:39:30:f9:6b:04:0d:b2:a7:be:23:
08:0c:a6:8c:20:a6:cc:59:56:97:48:d0:c6:4b:91:
06:ae:21:da:a3:86:fa:b2:ce:35:c4:c2:ed:86:83:
77:f0:02:bf:a6:74:96:20:69:bb:7d:24:5c:cf:de:
5c:e6:87:52:11:89:77:52:b0:83:5f:20:05:a5:4b:
24:42:44:25:1b:b5:06:87:9d:ef:12:07:af:ad:a0:
51:73:76:05:d3:42:b4:c2:7e:af:cb:b4:82:49:96:
85:71:75:12:24:b8:83:2c:f6:f8:00:ca:92:0f:69:
f5:f4:b3:35:43:c8:ab:44:e2:8f:39:a1:73:f7:88:
4c:e3:fe:14:0f:44:e9:d9:35:3c:fd:65:41:cd:b4:
e8:2e:cd:69:2c:00:28:07:8e:6b:fc:b0:ae:37:0a:
60:35:c9:c9:fc:8e:77:c7:b1:86:ec:ca:1f:d9:d9:
d9:f0:82:0b:8b:2b:79:39:41:35:d7:bb:8b:a0:c5:
76:42:87:47:fe:b3:b8:19:f8:44:3e:71:d6:28:8b:
5b:dc:03:ee:0a:d0:16:74:ad:ae:c1:9e:ce:20:2e:
d8:f3:ed:2c:7c:c1:5b:ea:33:b6:ef:d4:ee:aa:bb:
bc:55:77:0e:60:2d:bc:78:ca:60:e4:22:68:96:92:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:C1:94:91:64:3C:8B:93:4C:1F:94:25:BD:70:3D:D2:9F:07:34
X509v3 Authority Key Identifier:
keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:25:ba:c9:04:14:aa:32:ae:03:0e:92:d7:87:ee:c4:aa:
06:af:ab:fd:ed:6f:74:0f:c4:d1:3c:68:0a:ae:a2:36:e1:9e:
98:8b:29:bb:02:2b:c7:22:d4:9a:08:a9:87:39:6b:50:5c:7c:
1c:5c:ee:43:f1:c2:79:a9:42:ae:85:83:60:16:3d:f4:4b:e4:
c2:43:ec:71:a2:d0:22:90:2d:bd:f9:bc:e1:13:eb:91:28:ce:
79:fb:a2:3d:57:6b:4f:d9:f6:7c:34:f4:64:6e:99:0e:0c:9a:
54:bb:b6:c6:b5:97:17:1f:e3:33:5f:cf:7c:15:1e:86:6b:34:
31:50:b3:1e:57:88:c3:4f:3c:31:98:ae:31:9c:0b:dc:9e:70:
31:ea:6f:23:6d:2a:41:f0:f9:b9:dc:74:40:42:6e:34:63:d0:
41:54:d1:93:65:8f:ef:de:c8:93:52:0a:2d:b4:ce:64:a1:fc:
7b:1f:1e:b7:49:a0:ef:92:71:ed:5c:39:cb:dd:b2:ad:6c:b4:
10:d4:71:14:eb:ce:14:95:32:69:3d:d0:22:cb:37:d6:50:88:
18:a6:9a:99:aa:2e:f2:14:f9:be:6c:8f:cb:e6:c9:34:90:02:
23:98:0d:fb:ee:b4:d0:d8:12:44:a3:03:16:a9:58:bb:66:bb:
97:35:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 05:49:30 2026 by rpki-client