
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft
File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json)
Hash identifier: rY5iMkdqZ9Eyi/d12It4e0dyKexrHJCO8zI5xpZIcjA=
Subject key identifier: 2C:8A:BE:14:10:D7:B9:0C:F8:11:09:AB:AD:88:07:B0:D5:AC:89:8C
Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA
Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA
Certificate serial: 1FC0C5B0524508899799BF4F34DD102336429A52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 07:45:22 +0000
Manifest this update: Fri 25 Sep 2026 07:40:22 +0000
Manifest next update: Sat 26 Sep 2026 11:10:22 +0000
Files and hashes: 1: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: Xow7C1Z4sWDRj3IsZS2B/45vlThM74oSmVW+xqE08Fk=)
2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl
rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 11:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c0:c5:b0:52:45:08:89:97:99:bf:4f:34:dd:10:23:36:42:9a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA
Validity
Not Before: Sep 25 07:40:22 2026 GMT
Not After : Sep 26 11:10:22 2026 GMT
Subject: CN=2C8ABE1410D7B90CF81109ABAD8807B0D5AC898C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:c1:f6:e3:f9:8a:7d:18:5e:e0:fa:a9:9d:
6b:d0:05:20:1e:e5:68:2c:61:7e:45:0d:43:34:eb:
74:0c:88:8d:5e:be:bd:ab:ef:97:9f:72:c4:69:be:
30:9c:b8:6f:cf:13:a6:47:45:57:af:11:3e:aa:ac:
97:51:a3:de:99:fa:90:d7:59:14:98:be:cb:ae:fa:
a7:99:cd:27:01:43:2e:fe:05:ce:4c:44:3c:7b:3a:
75:48:20:3a:23:38:2b:4e:64:6b:18:33:3b:cd:e0:
37:6a:81:d6:88:67:d2:a0:1c:26:51:82:d3:d0:27:
e2:cd:13:0c:88:40:7c:78:ac:d3:b2:ac:4a:da:2d:
d7:9a:25:9b:49:45:f8:4a:75:12:9d:95:17:71:7b:
0d:b9:b5:c9:e0:fb:6b:bd:ed:d8:c3:aa:00:21:d2:
d5:ba:2a:b8:69:bd:a3:7e:12:74:12:71:4a:0f:64:
65:59:0d:c6:3f:24:fc:df:b1:63:46:cc:ab:0d:a0:
36:fb:f3:88:68:03:46:e3:f4:e5:95:a9:f3:e9:8f:
51:eb:21:58:87:26:e4:77:30:4a:ed:93:32:65:09:
ec:5f:b4:b4:e6:0a:85:f6:ba:66:8b:63:21:28:6a:
5c:54:a8:0f:f6:a8:8a:6e:28:f3:a0:b9:75:68:15:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:BE:14:10:D7:B9:0C:F8:11:09:AB:AD:88:07:B0:D5:AC:89:8C
X509v3 Authority Key Identifier:
keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6b:a5:37:ee:02:b0:e1:40:db:fa:b6:8c:80:1d:4e:cc:26:
0e:c7:bc:17:98:b0:49:87:19:ac:a6:72:99:2c:69:40:af:06:
80:ec:9a:f2:a7:0e:94:b9:a2:e3:e9:ec:71:bd:ef:0a:bc:dd:
43:04:5f:1e:ef:53:e5:a5:7b:da:dc:ea:fe:0d:78:61:bb:d8:
b6:fc:d7:60:f6:cd:a3:ab:5e:a3:18:b3:a6:c9:bd:96:12:63:
31:3d:34:5e:8e:8f:9e:db:c5:cf:29:a4:7c:16:e5:8c:e2:dc:
7c:0b:50:a3:f7:58:d3:1b:4b:c5:e7:b3:b6:9d:82:b1:08:b4:
62:e0:2d:23:02:c9:cb:4c:a6:e9:5f:42:b4:4e:da:6b:76:ce:
1d:97:64:8e:0c:2e:1f:6f:8a:58:fa:4c:9c:eb:71:41:c9:d3:
72:2d:26:80:2b:55:15:93:92:76:b3:43:29:fa:fd:df:3b:3a:
33:b0:72:d9:6b:ae:fd:51:8e:69:cb:a0:35:67:80:ae:fd:de:
d0:10:dd:a7:1b:30:ea:86:27:5b:ce:be:4e:ef:1a:65:0e:f3:
8e:2e:79:ea:fe:9d:87:d7:4d:fc:7d:d0:3a:88:8c:d9:fa:17:
36:01:87:3a:75:6e:30:77:08:6f:38:87:e3:ea:8c:4d:b4:41:
0b:2e:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:54 2026 by rpki-client