
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json)
Hash identifier: z0tdGzx33CqWpBJLjL2hcLYaf73WvreRzt3IXcrNtMk=
Subject key identifier: E9:94:DB:C3:E8:58:0D:DC:4D:3A:69:81:DC:1D:61:09:02:15:52:C1
Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9
Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9
Certificate serial: 12E673C5FB78D6DAAEF9FB0287493068CA084EF8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 21:56:47 +0000
Manifest this update: Thu 23 Jul 2026 21:51:47 +0000
Manifest next update: Fri 24 Jul 2026 22:22:47 +0000
Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: +Qj2rTltIJHm9EYvUoKweb6wUB3jnXLQ1e4MLPpCGvE=)
2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl
rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e6:73:c5:fb:78:d6:da:ae:f9:fb:02:87:49:30:68:ca:08:4e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9
Validity
Not Before: Jul 23 21:51:47 2026 GMT
Not After : Jul 24 22:22:47 2026 GMT
Subject: CN=E994DBC3E8580DDC4D3A6981DC1D6109021552C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:54:1c:64:bf:10:e6:d6:71:30:5c:25:7f:
69:b8:7a:c6:ef:8b:ce:40:2b:55:99:13:39:5b:e2:
36:a9:29:c3:29:c9:ec:47:55:9d:4c:37:0d:23:3a:
84:a9:82:0d:8b:59:0f:05:70:be:8c:0e:64:52:91:
2e:a5:fb:eb:7a:7a:93:f7:7a:9f:20:a3:46:43:f6:
d7:43:9a:87:cd:36:93:62:90:1a:0e:a7:bb:b4:fa:
ba:6a:eb:a0:bf:60:6e:8e:1f:e8:cd:13:0c:2d:66:
84:77:b9:bc:e1:db:2b:c6:cf:a0:ba:d5:54:e4:04:
1a:0c:54:e6:ba:99:8f:7e:0e:de:5b:22:53:28:b0:
5e:c9:36:83:31:4e:5e:8f:86:83:97:9e:fd:36:64:
a1:21:a1:92:c5:ce:71:2c:fc:33:c8:57:76:ce:b9:
6e:a4:76:1d:df:e8:4f:60:a3:8f:c3:b6:15:be:fa:
cb:ab:c4:0c:67:9a:36:90:59:24:7e:c2:9b:b8:17:
5d:56:d0:93:9e:de:73:cf:6e:0f:40:b0:42:fe:5d:
e3:54:0e:98:f9:b5:90:6a:52:63:24:53:d0:e9:39:
22:c6:fb:e7:75:70:d0:9f:6a:28:48:06:aa:9c:6c:
c1:c7:b9:f1:4e:32:86:f0:e6:90:95:81:b5:dd:07:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:DB:C3:E8:58:0D:DC:4D:3A:69:81:DC:1D:61:09:02:15:52:C1
X509v3 Authority Key Identifier:
keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:e8:7a:0c:ef:ca:bf:d7:df:c8:c3:b2:10:33:82:ef:0b:
89:02:6a:7f:6d:02:b8:28:f2:3b:bf:9d:42:de:38:7b:00:13:
be:40:0b:eb:4f:25:c5:d2:72:78:fe:0e:84:f9:80:fa:64:f8:
24:4d:d9:3b:e6:3c:70:2a:44:bf:fd:ba:0e:1f:21:d5:44:40:
eb:fb:79:7a:59:1e:05:2e:33:8b:a7:e7:06:ce:8c:42:af:64:
b6:13:e5:66:c2:1f:cf:2b:c3:16:d0:b9:51:01:4e:96:b6:89:
58:60:f7:7b:ca:7c:b3:8c:70:33:18:5e:cf:f4:b7:9f:e3:f3:
0d:7b:62:98:38:3c:dc:2a:75:b1:e8:95:bd:3f:15:6e:f7:14:
22:5e:3d:d8:56:fa:fd:ca:62:b0:81:d4:de:4c:44:cd:b4:5c:
e6:36:65:28:a5:fc:d4:17:b0:d6:b2:2c:56:ee:c4:43:cd:72:
c2:e4:a6:1e:0d:6f:4c:b3:45:ed:73:57:ad:08:c0:7e:93:69:
d9:95:15:c9:1e:eb:26:94:1c:ed:a0:8c:30:8c:b6:d4:69:85:
5d:28:9c:3d:60:c0:52:8f:7f:98:d8:35:a3:b8:8b:62:a6:14:
af:d8:8c:9b:2a:e6:62:4f:02:da:47:7e:62:74:b5:10:76:0c:
0e:13:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:03 2026 by rpki-client