
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier: lMHONn9uffOWVtIaCWGAvImCD+4osWqiPycA4ys3Bek=
Subject key identifier: FC:7B:5D:27:A1:92:FB:76:FD:D7:F1:06:8A:F6:C2:A4:76:2A:CF:82
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial: 7266A836A195ED51067105A5B858157C4268FFC7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 03:46:34 +0000
Manifest this update: Thu 18 Jun 2026 03:41:34 +0000
Manifest next update: Fri 19 Jun 2026 04:01:34 +0000
Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: QXAi007f6V07W4kQDumJJj2n/li1THgM+CnUQu2u1ZA=)
3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:66:a8:36:a1:95:ed:51:06:71:05:a5:b8:58:15:7c:42:68:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Validity
Not Before: Jun 18 03:41:34 2026 GMT
Not After : Jun 19 04:01:34 2026 GMT
Subject: CN=FC7B5D27A192FB76FDD7F1068AF6C2A4762ACF82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:c4:b3:64:2b:4e:7e:78:0d:fe:ff:8a:b4:
50:8b:e0:a1:37:44:89:f2:19:23:40:32:3b:a4:98:
5e:68:45:27:5e:b8:e3:c6:3b:20:da:10:cb:db:ed:
84:7f:94:31:d3:75:a7:b4:fd:39:2c:7a:87:87:4e:
35:60:1e:f8:7c:96:1b:1f:38:8f:57:b1:2c:7e:02:
b6:f0:30:9a:53:65:dc:20:88:3f:05:39:78:62:ba:
72:83:b8:db:f7:d8:77:de:9f:6f:87:4c:90:9b:c1:
c8:4b:24:89:b5:a2:0c:d1:14:89:c1:80:e1:ac:99:
e9:a7:60:08:25:16:f4:f6:76:5e:d0:9e:e0:c8:bd:
b6:8b:ce:0b:b6:36:66:01:95:95:72:1e:b7:03:ec:
ad:8f:55:35:75:66:4c:59:c9:91:d4:19:be:35:c0:
90:e6:f1:52:34:9e:22:dd:40:fe:3c:ef:f0:34:1f:
d3:09:1e:15:13:97:54:76:c7:70:72:e7:08:d8:0f:
4e:b4:47:e8:0b:63:ce:14:9b:7a:5f:5a:df:8a:61:
87:47:cd:74:56:1b:32:ed:06:5e:81:21:9d:b3:18:
76:e5:90:10:ca:93:7a:b3:5f:17:d2:e9:76:42:f1:
d0:16:21:93:91:c6:67:ee:fb:f9:d0:8e:33:e9:2f:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:5D:27:A1:92:FB:76:FD:D7:F1:06:8A:F6:C2:A4:76:2A:CF:82
X509v3 Authority Key Identifier:
keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:15:d3:f0:d9:2d:d0:c7:cc:76:de:c8:6f:1e:3f:83:7c:4a:
9e:58:d5:2c:6e:cf:74:b2:b0:51:a8:b1:a9:f5:08:03:55:6d:
fa:2f:24:5d:9c:d7:4c:eb:6e:2a:69:ad:80:f8:01:37:95:7d:
4b:cd:d3:09:cf:fa:f1:bc:3b:91:aa:7d:d5:ca:56:1f:67:49:
30:bf:68:98:a2:b5:45:60:92:a6:a1:4a:95:7a:52:fb:58:d8:
af:e6:c3:1e:06:09:a8:b2:61:23:d5:9c:68:13:08:83:d0:60:
a5:93:e1:c5:5f:3a:cf:60:64:8e:60:ea:46:59:ad:ab:bd:c0:
c4:e3:d7:e7:1b:fe:ba:17:ab:59:0b:52:2c:21:c6:c0:44:05:
fc:5e:04:74:5a:64:74:8c:f3:2a:13:8d:cf:88:ce:91:be:cf:
0d:b0:55:d3:87:9f:ae:53:8a:b5:b5:60:c1:84:6e:85:1b:7a:
f6:0f:4c:e4:0e:fc:66:23:ab:48:fc:88:60:7b:13:ba:60:50:
1b:fc:77:ff:d6:35:b3:4e:dd:72:2f:41:7b:42:d3:32:30:35:
73:ae:7f:bb:fa:2e:31:bb:9b:e9:8b:72:cc:5a:73:ff:5b:cb:
db:fa:b9:92:27:b1:b4:9e:a9:32:d4:73:dc:02:3c:27:f9:87:
d4:2a:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:11:16 2026 by rpki-client