
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier: TeNU/MtLzNBp2g59Iib2ya+3ugkFNbpEl6rnFyiAk+I=
Subject key identifier: 35:A5:35:98:86:DD:07:90:51:8A:06:F1:41:63:E3:F2:85:0E:8E:FD
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial: 571C07D965B012D39A1EF1AF7F5BACA8121ABDE5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number: 7D
Signing time: Sun 02 Aug 2026 13:29:01 +0000
Manifest this update: Sun 02 Aug 2026 13:24:01 +0000
Manifest next update: Mon 03 Aug 2026 16:13:01 +0000
Files and hashes: 1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: O6A+4fDx5Cm+nJG0XECO4WCjkjjfeYmD2ntOnlLiS7A=)
3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 16:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1c:07:d9:65:b0:12:d3:9a:1e:f1:af:7f:5b:ac:a8:12:1a:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Validity
Not Before: Aug 2 13:24:01 2026 GMT
Not After : Aug 3 16:13:01 2026 GMT
Subject: CN=35A5359886DD0790518A06F14163E3F2850E8EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:67:34:97:d8:38:b1:02:59:b6:db:bc:dc:
89:01:69:da:06:43:d3:02:aa:e3:05:f5:3d:e4:c3:
c4:c6:9d:36:f1:1a:88:42:21:73:10:b0:33:81:39:
11:c3:bb:96:eb:5d:42:cc:97:c9:f9:c2:9a:55:2a:
4c:48:49:54:ce:e1:a7:e8:f7:51:36:c9:20:00:f3:
60:e1:ee:dc:f4:ad:c3:75:df:ae:78:88:49:2f:b5:
0d:4c:4f:5e:6e:bd:0f:cb:f3:9b:dd:98:d7:c9:77:
5e:82:6a:06:77:20:a7:ac:54:06:de:46:a4:31:32:
b7:15:f5:a9:79:66:3e:e9:ec:c2:e2:59:1d:5a:43:
5c:2d:e7:2e:32:14:5e:f5:c0:e0:dd:22:8f:04:c4:
d1:8d:28:11:a9:b1:70:29:43:bd:be:8c:b2:e8:43:
3f:ea:4d:6d:4a:e4:cf:6e:cd:09:34:af:89:15:af:
e8:56:80:3b:2b:ff:1c:e3:8c:36:e1:38:57:0e:d9:
40:11:55:ac:c6:7c:58:2a:18:0f:79:8d:53:87:83:
2e:4e:d1:73:df:1b:42:5d:b2:5d:16:97:03:16:ea:
e6:9a:f8:1c:c9:41:2e:23:3c:fa:8c:b6:05:19:1e:
94:0b:f9:dd:95:73:71:51:b2:cd:b8:64:e5:5b:d2:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:35:98:86:DD:07:90:51:8A:06:F1:41:63:E3:F2:85:0E:8E:FD
X509v3 Authority Key Identifier:
keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1f:c3:6f:e8:b4:56:42:dc:b1:81:80:5a:9d:23:af:70:f2:
49:bc:3b:f0:be:f5:27:df:0b:c9:85:76:d3:7e:98:ce:ff:f5:
8d:8e:7d:fc:e1:01:36:7d:f3:72:cd:30:6b:c0:ff:2c:69:13:
dc:cf:82:39:3d:87:bd:4a:8a:ef:22:c5:b9:89:f9:29:1d:fd:
56:f0:6d:e3:b0:bc:5e:7c:1f:cc:a6:93:c3:ed:50:0c:89:1c:
e2:23:ea:fe:e6:22:c5:3f:70:71:b0:24:be:68:2f:44:7e:19:
14:59:c7:71:88:a3:6b:05:dc:e4:a4:fd:b6:83:75:b5:b1:ee:
8c:0a:05:0f:97:aa:e1:05:75:4d:0a:97:a5:58:9a:4a:1d:1f:
b5:26:1b:de:1c:c8:04:af:dc:0e:f2:df:dc:45:15:38:a7:7a:
7c:27:ea:1f:9c:f0:12:3e:b2:ff:68:dd:db:10:85:80:6c:bc:
39:19:e7:34:69:79:98:2f:7b:c2:c2:40:40:ca:39:98:d6:09:
a1:27:5a:ba:a0:df:04:61:dd:4b:ed:89:8b:c7:da:48:67:0c:
aa:ff:fd:a1:66:4b:1a:d8:09:2f:4b:97:96:f0:f8:a9:19:c1:
f6:a0:f8:17:99:c5:55:a4:f5:70:18:7a:59:43:87:44:09:8e:
e8:af:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:33:25 2026 by rpki-client