
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft
File: F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft (raw, json)
Hash identifier: dJjyQdFhy+qUccB/Go26EZj4Q7JAC5qP+nrdipUdKQE=
Subject key identifier: FA:59:3D:7C:F6:0A:E1:18:C1:E1:43:AE:16:45:C9:9E:1A:33:B8:6E
Authority key identifier: F5:C0:FC:6C:55:DA:7B:3C:3A:D5:94:72:BF:87:C5:17:D6:3F:69:CC
Certificate issuer: /CN=F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC
Certificate serial: 2C1AFA508CDF8C6CE465E3A189A23C861E3FE472
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft
Manifest number: B0
Signing time: Thu 10 Sep 2026 19:30:54 +0000
Manifest this update: Thu 10 Sep 2026 19:25:54 +0000
Manifest next update: Fri 11 Sep 2026 22:32:54 +0000
Files and hashes: 1: F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.crl (hash: N3IInmYd3dFuVMt85bOa9Efop2QqdQfpnTEJOt8uLFY=)
2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: w8sfspweyFqHk9ykzGCGT842VKDVFT2WwBZCKTAI/dY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.crl
rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 11:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1a:fa:50:8c:df:8c:6c:e4:65:e3:a1:89:a2:3c:86:1e:3f:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC
Validity
Not Before: Sep 10 19:25:54 2026 GMT
Not After : Sep 11 22:32:54 2026 GMT
Subject: CN=FA593D7CF60AE118C1E143AE1645C99E1A33B86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:3a:b5:43:60:06:5e:79:31:f9:bf:70:af:
c3:9d:86:9c:ca:ed:66:5c:b9:13:92:5d:24:d1:a5:
c1:89:9b:df:55:cb:e9:5e:39:c4:09:56:87:5a:fb:
a7:9a:03:56:3e:03:55:cd:49:23:d2:a0:a3:a6:34:
5b:0c:cb:21:9e:c9:e0:ba:7a:f3:c0:ae:5e:f1:5c:
95:7d:23:78:95:4d:83:36:02:fb:c2:58:65:c5:dc:
55:0d:c0:78:31:9d:9c:ae:14:c8:3b:d8:56:6e:ab:
3f:af:29:64:b2:1a:52:eb:26:5a:06:b8:af:0e:99:
d1:4d:86:59:68:83:5f:9c:a8:53:a5:6d:6b:14:02:
d7:86:78:3f:92:79:dc:5e:77:09:0c:b1:f7:a2:d5:
46:9e:f4:fa:f4:83:54:fd:92:e7:4c:ca:af:ca:4c:
87:58:0a:8c:b0:57:9c:80:75:b2:45:91:00:fc:16:
9e:e7:e7:b8:34:dd:42:99:be:65:62:20:80:b7:b8:
9c:66:e9:4a:38:1b:00:eb:c7:51:77:5a:0d:db:26:
93:59:30:eb:e3:78:77:3b:0f:4f:9a:5d:9c:bc:7d:
06:ce:7a:89:17:7e:b5:4b:51:4b:ef:f8:04:2e:fb:
dc:c7:84:46:5a:41:a7:33:06:1a:36:54:27:a4:c7:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:59:3D:7C:F6:0A:E1:18:C1:E1:43:AE:16:45:C9:9E:1A:33:B8:6E
X509v3 Authority Key Identifier:
keyid:F5:C0:FC:6C:55:DA:7B:3C:3A:D5:94:72:BF:87:C5:17:D6:3F:69:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:9c:ae:a2:64:2c:df:c3:f4:c8:4d:ad:5b:5c:8d:29:60:
b9:9b:ba:ec:d0:1c:ba:23:32:a5:9d:88:0b:24:23:dd:9c:78:
b0:36:76:75:5c:8e:6c:06:28:df:de:5e:c7:43:61:c8:f4:ca:
ed:8c:eb:b9:a6:a1:2d:25:0d:22:43:90:f4:d2:f2:a5:94:82:
7e:93:84:34:96:90:02:f0:7c:46:66:df:d4:2c:cd:aa:5c:8d:
3a:5b:9f:d5:d9:ef:21:11:40:ae:c6:03:11:09:f5:f1:ea:e2:
7b:c5:a8:f5:8c:b7:73:4a:f9:78:a6:6f:a7:76:de:0d:96:cd:
96:de:c7:49:40:b5:ed:3d:c9:ce:75:a5:1a:1b:8f:8a:2f:cc:
d5:d4:db:b0:f1:e6:b8:56:fb:b3:4e:60:73:85:03:5f:b5:c9:
1b:5f:bf:9b:8a:dd:b7:98:55:3d:e3:fe:83:59:9c:57:89:00:
76:13:92:ea:86:8e:49:4c:ae:af:49:d9:26:b0:ca:87:3f:73:
57:9d:5e:3c:73:8b:4d:0a:49:83:54:d9:1e:a6:f2:c9:5e:d9:
05:55:3a:34:00:3a:ed:dd:70:51:9c:b1:c1:87:e4:e9:17:d2:
92:5e:31:5c:6f:88:8d:26:9b:ef:26:04:fb:5b:a6:ba:38:2b:
2f:94:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:43 2026 by rpki-client