
$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json)
Hash identifier: H6bavQtUMfCCn1bI96RiCj8/vXiTflhfvfusrY6olLU=
Subject key identifier: B9:BA:D8:A1:41:42:6D:AF:1D:00:D5:28:7A:3C:CA:10:41:52:8D:4C
Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5
Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
Certificate serial: 254A4943D8F43AEF09D1360572A2B1EE425102
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:36:14 +0000
Manifest this update: Tue 12 May 2026 16:31:14 +0000
Manifest next update: Wed 13 May 2026 19:36:14 +0000
Files and hashes: 1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: WK/s8Eola6MJIor7x9n8eoPRkML//fWOZs4txXNgtaY=)
2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl
rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4a:49:43:d8:f4:3a:ef:09:d1:36:05:72:a2:b1:ee:42:51:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5
Validity
Not Before: May 12 16:31:14 2026 GMT
Not After : May 13 19:36:14 2026 GMT
Subject: CN=B9BAD8A141426DAF1D00D5287A3CCA1041528D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:35:c3:42:52:6b:43:74:2c:92:44:05:1a:
81:a6:9b:44:39:f3:2c:77:ef:02:b0:dc:cf:c8:c0:
b5:3b:93:50:78:ef:ae:b6:1c:5d:b0:df:ba:7e:c3:
fc:ee:c2:1f:7d:9b:6a:68:62:15:e7:64:6f:41:e0:
3a:1a:ea:4b:5d:72:c5:34:81:49:72:09:70:8c:de:
be:57:7b:eb:24:99:68:d4:50:6f:5a:6a:fa:a7:9d:
91:c0:0d:21:1b:de:f7:89:52:99:8e:86:35:fd:77:
f9:be:2a:01:a8:60:30:5a:29:38:76:2e:d0:ca:d9:
53:e9:b7:9c:fb:4b:6f:bc:db:f9:96:9b:66:16:eb:
47:5f:9d:7f:75:ba:83:5b:dd:e9:71:38:dc:1f:9f:
e0:47:0f:5f:1d:53:b2:63:ab:6b:31:7f:8c:f7:06:
d0:df:5e:0f:47:c2:75:c1:45:87:83:11:06:66:71:
c5:8b:ca:95:1f:de:53:84:e0:0d:0c:0b:cb:e2:6d:
8b:3c:54:2a:77:1d:a9:a0:51:d5:ea:e0:db:ef:cf:
36:f6:60:fb:01:68:0d:6c:d8:de:c1:c2:17:b2:e5:
e6:3d:3b:72:93:b4:74:ae:35:43:89:e4:b3:7d:f8:
6f:e3:ad:7c:7d:82:18:45:b1:c1:79:9a:81:dd:87:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:D8:A1:41:42:6D:AF:1D:00:D5:28:7A:3C:CA:10:41:52:8D:4C
X509v3 Authority Key Identifier:
keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7f:2d:e7:d9:1c:78:a5:a9:4d:31:14:20:f2:c7:d4:17:a3:
75:5f:b5:2a:f5:06:87:2a:2f:6a:9a:2b:8a:6a:4c:47:4c:7b:
28:3e:2a:08:bc:75:87:75:34:ea:0f:c6:2c:3a:d7:2a:43:20:
cf:16:ee:cf:f2:73:cb:02:82:79:3c:8b:38:a7:4b:21:50:50:
6b:bd:57:99:13:03:5f:f5:d8:03:17:5b:84:68:13:bf:a9:a2:
63:8a:e9:73:4e:25:c9:1f:9d:9f:41:3b:a4:1d:bf:3b:07:ac:
48:34:f3:32:68:3c:d7:98:14:34:98:9d:88:1a:3e:26:69:4e:
48:46:fd:fb:f9:2f:0d:03:46:d9:47:52:4d:08:ea:d5:f4:20:
99:dd:3e:2f:13:c6:34:15:43:ce:44:51:e0:ee:f0:e1:46:2b:
b8:87:bd:88:b9:b8:13:90:ef:96:9f:7d:3e:55:50:c8:f6:b8:
b0:82:1d:79:28:37:6d:6a:c3:82:87:ac:a9:23:cc:67:fb:1d:
36:59:e8:7e:8a:09:2b:11:eb:02:a7:eb:c2:cb:6f:43:4e:49:
6f:dc:09:61:84:87:ad:f2:dc:93:7f:9a:d1:6d:d8:2e:8e:bd:
24:37:8c:de:9d:0d:81:b7:3d:00:be:3f:30:b0:4c:73:40:ac:
f1:44:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:17 2026 by rpki-client