
$ rpki-client -vvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft
File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json)
Hash identifier: ELNnTNY675zhpmOr/mL1rNHJVPNBELV0AXDqvxBNiIw=
Subject key identifier: C0:10:E6:36:92:68:8F:B0:24:8D:A5:3C:16:20:D1:FD:FC:B7:BE:04
Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66
Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66
Certificate serial: 7EEBD34F87811708E5305350336A7D8169B5FFCD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 04:55:49 +0000
Manifest this update: Sat 20 Jun 2026 04:50:49 +0000
Manifest next update: Sun 21 Jun 2026 05:50:49 +0000
Files and hashes: 1: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: mKbcFluNE9IyYoJ47F9sujQXoVYxmuciOlJvLNm7PfA=)
2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=)
3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=)
4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl
rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 05:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:eb:d3:4f:87:81:17:08:e5:30:53:50:33:6a:7d:81:69:b5:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66
Validity
Not Before: Jun 20 04:50:49 2026 GMT
Not After : Jun 21 05:50:49 2026 GMT
Subject: CN=C010E63692688FB0248DA53C1620D1FDFCB7BE04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:d9:79:39:5a:c6:b0:dd:00:36:20:cc:1a:
f3:63:e7:2e:ec:cb:57:cf:6e:d3:da:55:72:d6:07:
09:5a:6d:65:56:34:4a:a8:f9:8e:de:15:04:26:e0:
f7:ed:9a:bf:d6:21:ab:79:8a:75:78:0d:3f:d1:02:
f2:b2:fc:1b:88:25:6a:40:49:c4:25:ed:ac:76:a4:
92:eb:74:9b:b2:7a:b5:5e:13:e8:39:96:ec:d2:c2:
1c:53:43:58:38:67:82:c0:d7:a5:8c:48:25:87:66:
17:74:c5:18:c9:d7:c5:f3:14:cc:f8:f7:68:19:ab:
c5:70:74:6c:93:87:7c:b2:74:2a:e2:71:1f:bb:df:
0d:af:65:a9:3f:be:9b:8a:4b:c9:f8:88:a0:0f:43:
96:ea:31:d6:ac:b8:c2:b1:82:77:ae:0a:03:c9:0b:
2b:21:b6:4b:fb:23:b1:1a:90:30:68:ee:51:77:78:
07:de:2f:2e:af:89:59:b8:f7:e7:5a:25:8f:b0:89:
94:97:ee:67:60:81:92:e2:f9:56:b5:5d:54:d4:c3:
b3:07:ad:98:76:53:37:e5:d0:07:53:98:6d:0f:af:
67:ea:98:ed:bb:e1:43:4b:ca:6d:2b:1c:6c:2b:d5:
70:da:25:3f:16:c0:1f:c0:90:b5:42:6e:2c:c9:d1:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:E6:36:92:68:8F:B0:24:8D:A5:3C:16:20:D1:FD:FC:B7:BE:04
X509v3 Authority Key Identifier:
keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:d5:4c:2c:10:2b:e1:cb:ed:ae:d8:57:46:5f:34:3c:59:
61:83:bd:b6:65:da:4f:87:ef:8e:15:bc:ee:25:8a:aa:1f:3e:
39:89:49:e6:03:e0:67:ca:2b:1a:93:bc:69:42:91:70:18:57:
ab:5f:6e:15:13:f3:40:52:8a:c7:2a:61:c0:24:83:ca:2a:f4:
43:2e:30:fc:0b:97:86:32:71:21:3c:e6:7b:db:00:15:bd:4b:
d7:1d:94:82:d1:96:8b:82:e5:d0:4b:54:59:3a:d1:6c:3d:d5:
bd:0d:fa:83:b2:c7:86:1e:00:32:74:ab:39:00:5a:70:4f:60:
da:5c:48:b0:ae:d4:ef:fc:37:53:9d:f7:6c:0e:60:06:c9:ff:
6a:1d:62:3d:67:7b:98:69:82:77:a0:31:6e:69:bb:fd:af:c9:
13:3b:d9:29:aa:d2:e6:17:37:d6:1d:a4:8c:54:ab:fe:f4:d4:
52:ef:0d:f0:24:ef:82:c9:01:25:11:2b:d3:ed:3d:29:a1:7e:
ce:9b:4c:c5:24:80:d6:72:bf:5c:d2:89:12:d7:fd:7d:43:1e:
80:7b:ad:b7:95:49:ec:d2:38:10:34:65:71:a5:3e:0c:09:3e:
21:e8:ea:d6:55:d8:65:91:db:76:93:c9:0c:12:be:cf:ce:0c:
af:2a:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:47:53 2026 by rpki-client