
$ rpki-client -vvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json)
Hash identifier: ly5aQTynb0A+JW9H2ENyFCVUgCR43XOYp8+/Z1880A8=
Subject key identifier: 8C:B1:FE:01:94:03:49:3E:50:1A:58:9B:6E:16:C8:D8:8B:EC:63:65
Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F
Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F
Certificate serial: 60C1D7053E4316EDC411299B02BD1DF2E206A24A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:27:18 +0000
Manifest this update: Tue 12 May 2026 06:22:18 +0000
Manifest next update: Wed 13 May 2026 07:06:18 +0000
Files and hashes: 1: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: 3+LzDYpPcv7R96p/2rjrvVmnm4san2Kq9Wa3MLp8wT4=)
2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl
rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c1:d7:05:3e:43:16:ed:c4:11:29:9b:02:bd:1d:f2:e2:06:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F
Validity
Not Before: May 12 06:22:18 2026 GMT
Not After : May 13 07:06:18 2026 GMT
Subject: CN=8CB1FE019403493E501A589B6E16C8D88BEC6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:b4:c8:e5:98:20:e1:f7:09:ed:a1:8e:9d:
ee:e5:e1:68:bc:5b:df:f1:3d:e3:cf:d9:9f:d3:03:
29:53:d0:05:0e:91:01:30:3b:7b:a8:57:1f:f9:f4:
c1:eb:cc:91:c0:71:4c:1d:42:09:13:6b:5a:75:a3:
ab:2d:87:e8:7e:40:69:85:8e:0e:fd:62:ed:5b:5c:
e6:00:c8:58:9f:69:e4:fa:a2:43:af:6d:e5:33:b9:
24:be:d4:6a:d1:aa:02:48:f7:c9:14:b8:0e:d5:b9:
f7:9f:77:a8:6e:9e:ad:20:72:2c:7d:b0:1f:50:c7:
f9:5e:e2:d2:c8:91:c0:1a:83:d1:2c:24:64:6e:0e:
61:0c:4c:4e:cf:1b:2e:68:ac:67:c8:87:d0:49:1f:
a6:5a:01:53:f3:b8:89:cf:db:ff:d0:fb:23:2b:bf:
2e:2e:fb:1d:5f:ad:f1:37:e2:c4:75:ad:96:82:89:
95:ad:b9:ac:ed:00:3c:1d:c9:34:64:b9:ee:a8:f8:
6a:83:64:3a:a2:5f:6a:54:34:7f:9f:d2:29:87:97:
ca:fd:21:a0:6a:91:93:5f:6f:ed:b8:f5:3f:4c:cc:
28:d9:f0:aa:4a:03:cb:aa:14:9c:90:65:69:83:52:
ea:62:fe:2e:b5:48:36:26:9d:5a:5e:46:36:82:59:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:FE:01:94:03:49:3E:50:1A:58:9B:6E:16:C8:D8:8B:EC:63:65
X509v3 Authority Key Identifier:
keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:29:a7:69:ce:b7:c4:c7:b4:50:49:bc:a2:fd:6e:f4:09:
5d:6b:8a:ef:da:bd:d9:cb:2a:22:ad:a3:fd:d1:d1:3d:2c:88:
70:b6:14:26:82:6b:b2:cc:26:5d:a8:58:94:0c:d3:6e:7c:16:
4c:0b:13:88:f2:eb:63:0b:c1:f6:26:cf:3b:6c:68:59:a5:0c:
72:d6:56:dc:09:26:14:e1:68:ae:c4:80:04:11:2b:05:f5:e2:
ea:1a:7d:62:4b:2a:64:d8:d8:09:a4:b0:d3:01:ff:06:e3:68:
53:50:1b:66:c8:18:39:b8:bd:46:10:d5:48:7f:2a:40:e6:0a:
73:b7:bf:09:19:ee:52:94:3f:ca:69:9f:47:9b:98:6e:f3:bd:
fe:9e:9b:ca:45:a7:51:bb:20:5b:bd:63:11:1d:68:d1:e3:b9:
21:1a:6d:d2:4e:0c:02:35:d3:24:fd:92:01:7b:83:ac:2f:c0:
20:1a:ff:06:dc:ad:35:65:11:c7:cd:ea:0b:44:75:c6:42:42:
2a:a8:0e:5e:78:dd:06:bf:27:c0:84:0d:b1:ca:8b:b6:42:d8:
48:71:c8:5a:eb:04:7a:4e:76:88:19:c7:f1:01:d1:76:bf:30:
81:f5:96:4b:33:53:53:70:5d:1e:b8:c8:8e:b5:47:ff:25:9f:
00:0c:cb:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYMHXBT5DFu3EESmbAr0d8uIGokowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz
Q0ZGODM5RjAeFw0yNjA1MTIwNjIyMThaFw0yNjA1MTMwNzA2MThaMDMxMTAvBgNV
BAMTKDhDQjFGRTAxOTQwMzQ5M0U1MDFBNTg5QjZFMTZDOEQ4OEJFQzYzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt77TI5Zgg4fcJ7aGOne7l4Wi8
W9/xPePP2Z/TAylT0AUOkQEwO3uoVx/59MHrzJHAcUwdQgkTa1p1o6sth+h+QGmF
jg79Yu1bXOYAyFifaeT6okOvbeUzuSS+1GrRqgJI98kUuA7Vufefd6hunq0gcix9
sB9Qx/le4tLIkcAag9EsJGRuDmEMTE7PGy5orGfIh9BJH6ZaAVPzuInP2//Q+yMr
vy4u+x1frfE34sR1rZaCiZWtuaztADwdyTRkue6o+GqDZDqiX2pUNH+f0imHl8r9
IaBqkZNfb+249T9MzCjZ8KpKA8uqFJyQZWmDUupi/i61SDYmnVpeRjaCWTqTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjLH+AZQDST5QGlibbhbI2IvsY2UwHwYDVR0j
BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4
RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4
MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1
YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE
MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFcNKadpzrfEx7RQSbyi/W70CV1riu/avdnL
KiKto/3R0T0siHC2FCaCa7LMJl2oWJQM0258FkwLE4jy62MLwfYmzztsaFmlDHLW
VtwJJhThaK7EgAQRKwX14uoafWJLKmTY2AmksNMB/wbjaFNQG2bIGDm4vUYQ1Uh/
KkDmCnO3vwkZ7lKUP8ppn0ebmG7zvf6em8pFp1G7IFu9YxEdaNHjuSEabdJODAI1
0yT9kgF7g6wvwCAa/wbcrTVlEcfN6gtEdcZCQiqoDl543Qa/J8CEDbHKi7ZC2Ehx
yFrrBHpOdogZx/EB0Xa/MIH1lkszU1NwXR64yI61R/8lnwAMy48=
-----END CERTIFICATE-----
Generated at Tue May 12 23:45:53 2026 by rpki-client