
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft
File: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft (raw, json)
Hash identifier: mWBi5qFM1O8HdOg1hrB9BrmQSGResPDSUsKXWbquBGM=
Subject key identifier: 42:71:53:8B:E2:61:DC:93:8E:B6:61:E0:5D:C8:CE:E0:E4:5D:2B:8E
Authority key identifier: FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A
Certificate issuer: /CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A
Certificate serial: 53D4FAEFA50770AE8289947FA8E4234FBFB0125A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:48:53 +0000
Manifest this update: Thu 23 Jul 2026 23:43:53 +0000
Manifest next update: Sat 25 Jul 2026 01:48:53 +0000
Files and hashes: 1: FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl (hash: CKkdGHS9G4ERN+fYdA11Ec+0kVz1TGeIl9v6WY8dSCQ=)
2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: d3W50Pv9IvojYqj5AXX2l3Oy/7lfLR7Ec6qbGSXUUA4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl
rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d4:fa:ef:a5:07:70:ae:82:89:94:7f:a8:e4:23:4f:bf:b0:12:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF3D8DC5C0C86529F97BB869346A18A1277A59A
Validity
Not Before: Jul 23 23:43:53 2026 GMT
Not After : Jul 25 01:48:53 2026 GMT
Subject: CN=4271538BE261DC938EB661E05DC8CEE0E45D2B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:6b:5d:b0:47:d9:fc:34:d3:9b:ae:56:e0:
aa:b8:61:e4:25:dc:1b:f3:a1:a3:89:59:73:7f:e2:
f8:bd:43:db:7b:28:c5:19:f1:3d:18:39:23:32:e6:
e9:40:a9:dd:ec:59:e2:da:15:9b:48:ad:c0:4a:94:
9e:bc:99:77:cf:94:5e:a5:cf:a2:5b:b2:c3:53:72:
33:13:95:6a:e6:6b:8e:da:cb:a4:21:d9:53:8b:e0:
fa:2a:ea:fc:3d:06:86:76:88:2d:c3:12:6b:88:00:
c2:90:fe:f3:56:b3:b8:69:03:e1:ab:2e:37:4f:c8:
95:5b:b5:03:83:62:18:4a:61:96:1c:0f:89:a1:12:
5f:8f:49:8d:11:bd:a2:06:76:cc:4d:0e:80:a3:38:
8f:ff:48:a6:62:af:26:ca:a5:6a:66:3f:fc:23:91:
33:37:b8:79:d9:1e:fc:fa:c0:11:21:91:a3:52:b8:
03:82:d2:bb:20:00:8c:82:a5:36:de:52:6c:07:44:
86:28:e5:8e:d2:4c:d2:62:05:05:02:4a:4f:ad:14:
4e:ea:eb:14:8b:89:c7:21:1a:3a:b4:82:ee:33:68:
28:68:fc:b5:64:2f:a9:dc:c7:61:8d:34:7a:3d:2d:
62:f0:ed:bb:ca:8a:c9:98:a6:24:cf:37:87:f0:4f:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:53:8B:E2:61:DC:93:8E:B6:61:E0:5D:C8:CE:E0:E4:5D:2B:8E
X509v3 Authority Key Identifier:
keyid:FF:F3:D8:DC:5C:0C:86:52:9F:97:BB:86:93:46:A1:8A:12:77:A5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/FFF3D8DC5C0C86529F97BB869346A18A1277A59A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:19:d2:36:03:a9:21:8a:c6:f5:5e:8d:04:df:a5:0b:3c:
9e:5c:b1:cd:2d:8f:55:f6:a2:8c:68:17:34:f5:74:69:e7:c8:
38:66:df:e7:a3:a4:5b:c0:a5:cc:f3:50:f9:c1:d1:46:dc:7d:
49:e2:04:9d:f7:43:63:e4:32:72:c3:b0:8b:3b:c6:27:d9:ae:
1a:46:78:fa:de:19:c8:e4:f5:8b:49:13:1a:e4:bd:5a:ed:a9:
d9:ab:a4:eb:b0:59:bf:9b:c1:e4:f9:73:e1:25:d7:34:1f:d5:
e8:d5:e1:b1:11:bc:f9:89:b3:bf:ca:58:74:ef:8d:bf:70:54:
46:c8:5c:2e:63:2d:d2:e0:03:ba:16:13:2f:bc:3c:05:f3:49:
ee:a7:f1:8e:a6:b3:71:0e:57:fb:2c:7a:20:4a:4a:b0:e3:36:
71:e2:5c:25:78:fd:0d:3a:ad:44:26:04:1a:3c:2b:b7:b2:12:
ef:a7:33:b7:68:61:30:83:6d:ae:cb:44:73:aa:e0:32:bd:ca:
1d:ee:28:9c:f8:0d:ac:41:8c:61:95:4a:11:7b:04:b9:2d:8f:
ab:0f:ea:ab:1c:bd:6e:e9:82:38:e3:fd:16:40:9b:cc:42:85:
7c:37:ca:9b:33:ba:d3:6a:e9:c7:aa:13:ed:68:ef:97:63:31:
2c:a4:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:01 2026 by rpki-client