
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json)
Hash identifier: vTxcftqWi5GNzBwciUU9Vd7IXNFpc9PfL/nnt+w+79A=
Subject key identifier: 4F:4C:8D:4C:70:B7:CC:22:58:D8:14:BD:C7:C2:DB:E6:16:D8:75:E9
Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Certificate serial: 47A3C54C3A43C71CFC19101CD55DDE4FA6C594F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 19:28:56 +0000
Manifest this update: Thu 23 Jul 2026 19:23:56 +0000
Manifest next update: Fri 24 Jul 2026 21:40:56 +0000
Files and hashes: 1: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=)
2: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=)
3: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=)
4: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: AD9dQJG0LSKee10ImF97G1Y9/reyNcAKRc/XutDBsuA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a3:c5:4c:3a:43:c7:1c:fc:19:10:1c:d5:5d:de:4f:a6:c5:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Validity
Not Before: Jul 23 19:23:56 2026 GMT
Not After : Jul 24 21:40:56 2026 GMT
Subject: CN=4F4C8D4C70B7CC2258D814BDC7C2DBE616D875E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:02:1d:13:a5:9b:2f:a6:d1:b9:b8:bc:b0:
75:dc:62:c4:b4:e8:ff:17:29:ff:1e:27:0f:43:99:
81:ae:29:ca:7e:4e:83:39:e0:7e:af:fd:da:9b:93:
0b:a7:34:34:43:4e:cc:e0:04:63:9e:76:6b:e2:2a:
ad:75:ce:a8:33:ce:8a:c6:ca:dd:30:d1:7f:fa:61:
0c:c5:07:1e:46:15:3c:3a:a8:db:69:80:1b:61:ac:
5f:76:92:e8:2f:31:f0:b4:e5:ba:d6:e4:79:9c:4a:
1f:0d:b3:fa:0c:b1:a3:53:80:5b:2a:7e:37:79:02:
0d:d2:52:1e:8c:a7:d7:40:eb:c9:51:b4:6e:96:22:
6c:46:f5:3b:60:5d:90:58:a9:cd:29:ee:6e:ac:5c:
39:33:cf:e1:b3:7a:a2:80:f5:24:7f:25:56:34:b7:
84:37:a4:9f:d6:94:db:de:0f:03:6b:ee:1d:de:a0:
80:1c:85:31:90:c9:9b:b7:9f:7b:7b:b3:b8:fc:66:
ac:d4:5d:6a:1f:f3:41:8f:af:50:db:28:0e:dc:58:
82:3f:98:c0:af:61:03:33:38:9a:83:e8:35:e3:7c:
58:b0:fb:8c:b3:b0:c4:e6:bc:5f:54:95:f1:8d:df:
f0:6e:b0:2b:37:c5:4c:67:20:6b:b6:8b:17:56:f7:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:8D:4C:70:B7:CC:22:58:D8:14:BD:C7:C2:DB:E6:16:D8:75:E9
X509v3 Authority Key Identifier:
keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:7e:56:be:c3:d9:93:0c:55:76:e9:78:b5:d6:2e:fc:8e:
72:6a:7b:76:11:fb:e2:8b:80:1b:42:31:d4:59:dc:75:5e:e3:
b7:13:95:9e:5f:c2:41:77:af:18:c1:89:39:fa:ee:67:32:45:
05:8e:f7:14:6c:c6:c4:8e:fc:49:06:41:df:b6:8c:67:17:55:
86:3e:d9:51:56:0d:9e:12:a2:e6:70:80:b6:0c:2f:d2:d7:91:
38:6f:8a:4e:75:29:f3:df:61:b2:8f:b2:57:ec:75:43:e1:90:
2d:97:4b:c4:71:75:c0:70:42:e0:a2:f9:bc:5d:41:73:44:a9:
d5:4c:48:91:1b:46:37:5d:cd:2b:66:b2:7a:d0:13:cc:1f:25:
20:59:72:0c:f4:50:d9:bd:c8:72:93:a1:82:d5:75:ff:20:6f:
02:70:0b:b3:fb:b9:07:11:7b:d0:8a:77:58:81:66:6a:09:e6:
94:10:a8:44:0e:bd:5d:ce:e5:7c:2d:4b:94:fc:48:ea:8a:7a:
c1:e3:e9:dc:9f:fa:ba:43:15:e5:b1:d2:b5:db:4d:9e:5a:8e:
3f:0c:73:51:0c:e5:b9:4b:fa:b2:92:37:d2:ae:16:d5:f4:65:
0b:b6:af:78:82:25:f2:7e:ed:a9:fe:c6:89:6c:c9:00:b2:c6:
0e:f2:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:35 2026 by rpki-client