
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json)
Hash identifier: YvLDgjD1Wpqmyn5tet63Ah/yJRABwIRqxKBfZwWXe98=
Subject key identifier: 8C:61:24:07:E8:43:34:3B:89:A5:10:7C:D4:44:19:5A:AB:DF:0E:F1
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial: 17A86BA7FEB1EFCEBB954160E793D6E2433AD78E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:13:20 +0000
Manifest this update: Tue 12 May 2026 18:08:20 +0000
Manifest next update: Wed 13 May 2026 19:45:20 +0000
Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=)
2: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: +LQbAyKhO0Dm0RHg/jMTReEQTrPDygvvjspbQtmmZ5M=)
3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a8:6b:a7:fe:b1:ef:ce:bb:95:41:60:e7:93:d6:e2:43:3a:d7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Validity
Not Before: May 12 18:08:20 2026 GMT
Not After : May 13 19:45:20 2026 GMT
Subject: CN=8C612407E843343B89A5107CD444195AABDF0EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:f6:ae:0b:9e:8c:bc:3a:9a:08:72:f3:cb:
d4:cd:7c:56:45:dd:f1:b9:a9:67:a9:5f:71:4d:55:
9d:50:47:a3:96:52:06:d3:ce:ee:9c:a0:3e:de:d5:
36:36:29:12:58:e0:75:90:8f:30:4a:5c:51:ef:6e:
2d:d7:de:dc:fd:55:67:c5:97:a3:44:7c:2a:48:9d:
d8:c6:14:20:fd:5b:7c:ae:6d:22:99:58:31:4a:3b:
2e:5b:a4:6e:ec:33:19:d9:b5:9c:17:35:2d:db:ea:
0c:ea:7d:b1:9b:d2:3d:49:0d:97:57:d3:ed:0b:9d:
c1:80:48:73:60:96:bc:5d:8c:4c:d1:06:01:99:01:
51:91:3a:2b:14:84:d1:2e:0b:2a:4b:e5:2a:58:3e:
cf:06:db:46:09:77:0f:4a:ae:bd:03:02:ec:40:65:
5a:c7:2d:01:0f:e6:d0:6d:9a:7e:26:5e:8c:3c:41:
50:c0:07:6d:91:7d:95:3a:68:58:5b:1c:26:fc:eb:
cf:8b:17:7d:8d:cd:75:10:df:04:ef:e9:6d:58:ae:
69:97:0d:15:78:60:49:44:b9:45:94:ce:6c:7c:88:
02:ff:cf:9d:b9:2c:f9:72:fa:5b:18:b3:33:30:7e:
71:c9:b2:06:cf:c3:c0:49:b9:5a:c8:a6:e1:d6:51:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:24:07:E8:43:34:3B:89:A5:10:7C:D4:44:19:5A:AB:DF:0E:F1
X509v3 Authority Key Identifier:
keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2a:80:fd:a6:86:60:dd:f4:5a:1d:0d:66:d6:f1:82:5c:2f:
41:fd:99:71:9b:33:ac:dc:f4:16:94:7e:ca:65:0c:60:f7:ba:
5b:7a:bc:4e:88:2c:de:22:7f:6f:9c:35:5d:0d:a2:dc:b2:84:
fc:cc:90:00:a1:e6:ea:96:a0:52:c7:90:24:81:df:ee:18:ec:
90:cb:92:16:00:52:13:16:c8:ae:eb:5f:ce:3f:aa:12:40:31:
35:65:29:e1:58:bc:be:d4:7f:6d:00:75:24:f3:20:52:b0:c4:
f5:0a:0a:c7:44:ea:d5:6a:d4:98:73:a7:33:23:ae:c3:d0:0f:
9f:a7:b8:61:7d:77:5b:86:75:60:d4:1f:b2:d2:fb:22:13:9c:
6e:b4:b6:47:4f:23:d7:be:fa:77:08:f9:a9:8b:23:71:55:75:
5c:4d:24:20:3b:fa:93:24:0c:4a:64:4d:45:f5:6b:1f:73:5b:
42:c1:03:22:86:02:10:14:cc:fc:70:11:91:d6:ae:82:65:a1:
2d:b6:ae:a2:b8:36:3d:7c:dd:b5:d3:ff:c2:6f:c6:62:c0:48:
c1:f7:75:78:20:b5:64:84:68:48:87:7e:20:0d:30:49:ea:de:
da:03:f4:da:47:76:ea:dd:ce:cc:bc:00:fb:30:5e:4b:6c:5f:
93:ae:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:12 2026 by rpki-client