
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json)
Hash identifier: 6eESSrf6cpoRtAT5x7bj6gAfgTqWcOV2Q8Jlh4IuuWM=
Subject key identifier: 10:70:9E:1E:9F:3C:25:7E:5F:C5:19:56:8B:EE:86:AF:70:2B:4D:3C
Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Certificate serial: 5EA283BD3D5EC376C6ED928EF35D55E55B451B46
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:37:29 +0000
Manifest this update: Thu 23 Jul 2026 22:32:29 +0000
Manifest next update: Sat 25 Jul 2026 01:09:29 +0000
Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=)
2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=)
3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=)
4: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: V5bN9sJIZL+lqisTGTAhuSoFSeZ3iXNkK6OLNanXSlo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a2:83:bd:3d:5e:c3:76:c6:ed:92:8e:f3:5d:55:e5:5b:45:1b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Validity
Not Before: Jul 23 22:32:29 2026 GMT
Not After : Jul 25 01:09:29 2026 GMT
Subject: CN=10709E1E9F3C257E5FC519568BEE86AF702B4D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:eb:11:cd:fa:cd:18:cf:a4:7b:35:98:86:
e9:47:3f:4a:fc:36:d6:2c:0d:10:ee:62:03:60:d6:
25:c8:22:71:74:5d:3e:a2:b9:7d:bf:72:02:9b:dd:
dc:4b:d8:b6:2d:01:35:13:55:50:93:f5:53:a5:69:
8d:00:43:d5:82:c8:a1:62:82:ef:40:22:c1:23:d5:
c9:8c:be:e6:1e:6e:68:75:bf:7d:77:80:0c:ac:ad:
40:3f:48:fc:30:62:a9:58:49:72:91:51:9c:3b:a5:
f6:8d:98:e7:2c:1d:84:20:f5:b6:81:92:e0:21:3a:
33:2f:11:3f:0d:95:a6:c3:af:16:e9:34:cb:91:07:
8d:b2:a2:5c:88:38:8f:6d:8e:93:77:72:ac:b4:bf:
20:4f:bf:ca:b1:26:4d:0b:8d:8a:82:27:13:81:e0:
8e:3a:26:82:ef:89:af:49:26:88:36:47:dd:91:1f:
91:63:6b:94:2b:16:e1:c8:2c:f8:f7:dd:b8:57:78:
8f:53:5a:4a:03:f9:6f:f5:1f:4f:bb:98:af:42:97:
12:cb:d7:60:21:ac:95:7b:78:f5:b2:b7:50:e8:50:
52:0d:25:d9:20:d9:1f:09:87:f4:91:8f:1d:5d:f1:
39:0c:ce:b3:36:dc:13:d9:c2:db:b2:b7:c6:41:5c:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:9E:1E:9F:3C:25:7E:5F:C5:19:56:8B:EE:86:AF:70:2B:4D:3C
X509v3 Authority Key Identifier:
keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ce:8e:d0:4a:ce:5d:34:34:ca:b2:bb:51:e6:5b:87:0e:84:
db:b4:c6:c0:97:17:38:a2:71:f1:6e:ca:99:b9:64:90:ac:34:
e9:0d:e9:0d:2d:ca:2a:b9:f5:3d:b6:a6:26:9b:ff:58:fa:0c:
0c:ec:ad:b5:fa:3d:f7:ff:3e:67:29:d0:b7:86:13:62:93:60:
80:2f:b2:c3:b8:25:cb:17:08:f6:7b:c5:97:da:b0:b6:a0:08:
39:7d:e1:22:9a:0f:2a:1b:4e:f8:de:43:d7:f6:ac:31:a8:35:
00:96:f5:28:02:72:59:32:70:21:5c:17:b4:3b:55:5b:76:52:
de:14:64:0e:f5:38:30:5d:6a:97:7e:eb:3c:bb:d6:86:5d:19:
59:a0:75:02:4c:47:b8:53:9d:ea:12:88:ce:0a:d5:6d:0c:7f:
91:b9:f6:3b:2c:56:c4:1e:c3:06:3f:af:29:3c:d3:c5:45:72:
8b:3a:b4:53:a6:83:c8:3a:63:8e:bb:d7:b1:d3:e6:73:88:73:
e5:bf:4c:6c:10:22:41:39:8b:d2:ba:c0:6e:94:b1:c1:99:86:
2a:c0:43:96:2a:9c:72:9b:83:60:05:e3:11:8d:50:ae:c8:17:
d1:4c:7e:26:27:9e:e1:b1:a0:1d:24:ef:e6:ad:d5:c2:66:f8:
41:18:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:37 2026 by rpki-client