
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json)
Hash identifier: 5fv+hMZkQbEuvN5a0jTELijGRX+K2zpi05o3M7J42gI=
Subject key identifier: 1A:57:27:F9:8F:E7:8D:2B:CA:00:8B:4F:2F:74:5F:5A:2A:45:3F:4F
Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Certificate serial: 35D3D71A2D360621DD7E04071BBE61D39F105C2A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 15:56:11 +0000
Manifest this update: Thu 18 Jun 2026 15:51:11 +0000
Manifest next update: Fri 19 Jun 2026 16:09:11 +0000
Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: s+CYmaf12csIXiO4B30E4wOfrPnlJAjYQDgKIhmaH+Q=)
2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d3:d7:1a:2d:36:06:21:dd:7e:04:07:1b:be:61:d3:9f:10:5c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C
Validity
Not Before: Jun 18 15:51:11 2026 GMT
Not After : Jun 19 16:09:11 2026 GMT
Subject: CN=1A5727F98FE78D2BCA008B4F2F745F5A2A453F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:6e:32:f3:ec:29:2b:ba:24:83:e3:9e:3d:
20:3f:bf:f4:4c:33:cf:a6:84:83:92:72:75:2e:7f:
c4:ea:df:09:f2:1b:c1:11:50:5e:50:da:85:34:51:
5f:20:35:46:9c:ab:20:a3:77:f6:4c:12:27:df:a4:
f1:13:8b:dc:08:33:64:84:90:fd:16:99:c7:d9:80:
fd:72:b7:28:98:d2:bc:22:b3:08:dc:05:8d:0c:a9:
0a:55:e7:4e:55:12:b9:78:88:33:dd:81:8d:e7:77:
b9:f9:aa:fe:75:2e:b8:9c:ae:b3:da:0d:bb:51:16:
49:19:41:3b:1e:54:ae:89:c7:64:91:26:06:4c:7c:
f6:04:71:4f:c6:09:74:de:42:7e:b6:81:79:ce:c0:
8e:a2:f6:59:b8:16:87:b2:d5:d6:38:9d:27:df:f0:
dd:4d:62:ef:c4:30:d7:57:27:f3:28:88:dd:8c:99:
f2:f2:92:2f:b2:29:81:92:54:8c:db:a8:bb:fe:50:
ad:24:af:f5:72:c1:48:2a:74:99:66:f6:ec:4c:32:
78:34:00:f6:c9:20:aa:8b:05:90:6e:86:5b:81:ad:
aa:e0:d2:26:ee:20:10:d0:2c:e4:4b:a0:5b:c9:ca:
7e:a7:f6:86:81:10:25:f1:8e:4f:3c:9c:57:e4:12:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:27:F9:8F:E7:8D:2B:CA:00:8B:4F:2F:74:5F:5A:2A:45:3F:4F
X509v3 Authority Key Identifier:
keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:ce:d3:83:7a:da:3b:96:32:e8:f9:3a:3b:38:3a:ba:db:
6f:1a:7e:02:98:34:58:8b:00:3e:8c:bd:0b:48:a9:2e:cc:d0:
6b:af:c6:92:56:48:16:d5:4c:4a:7c:55:bb:55:10:31:ae:23:
db:67:8d:89:60:fe:69:d5:e2:bd:36:8b:bf:b6:5e:c2:e1:11:
88:3f:45:f9:d4:1a:a5:28:2c:01:cf:e4:59:c2:61:fe:39:63:
fc:83:bb:4e:31:bc:f1:74:8b:ef:3e:57:66:b1:62:e7:fb:48:
24:1c:34:83:5a:f1:65:11:7b:a8:f9:70:6b:ba:04:34:bb:06:
44:21:12:78:5a:d4:34:40:e9:ba:24:23:14:f0:4b:39:f1:6a:
6c:9f:a1:c1:29:66:23:28:8d:95:f8:f9:f4:4f:f5:e2:6a:48:
46:56:ac:91:09:ff:d0:86:69:e3:33:e4:3a:ba:12:e5:de:20:
b7:f2:98:02:bc:d4:0c:c8:31:76:be:42:02:65:6a:67:b7:00:
70:17:54:42:67:5c:d2:93:41:c0:78:a7:53:63:8a:1b:bd:2a:
ba:7d:3a:96:77:e6:3a:48:08:b0:c0:69:b9:8e:07:91:9d:80:
6f:b9:aa:fe:2d:b9:d6:56:09:3c:61:a3:cd:eb:74:f9:ac:4a:
dd:0b:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:55:50 2026 by rpki-client