
$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft
File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json)
Hash identifier: ZaGMteZdMQ8QMKZMucserYXRYc3rRwoni1+M2GwpHbY=
Subject key identifier: DE:4F:F0:21:DF:80:7B:B2:34:90:85:F2:E3:04:9D:AF:70:EC:EF:34
Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7
Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7
Certificate serial: 3B4944223D2AE9E462E7AB15A232D58B2F551EA7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 00:44:59 +0000
Manifest this update: Fri 24 Jul 2026 00:39:59 +0000
Manifest next update: Sat 25 Jul 2026 02:53:59 +0000
Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=)
2: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: vl9Z4OkivLIXiacS+hCeHSruuPA/YobHdzjqZLitsXc=)
3: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl
rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:49:44:22:3d:2a:e9:e4:62:e7:ab:15:a2:32:d5:8b:2f:55:1e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7
Validity
Not Before: Jul 24 00:39:59 2026 GMT
Not After : Jul 25 02:53:59 2026 GMT
Subject: CN=DE4FF021DF807BB2349085F2E3049DAF70ECEF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:d3:36:9f:40:1e:c3:aa:9a:23:f4:cf:0e:
e8:8e:ca:44:07:f4:b9:7c:a5:49:e0:65:36:32:14:
db:91:f6:e9:ab:b7:02:eb:8f:3a:26:55:a3:44:80:
45:68:8f:43:b3:a2:e3:93:e9:53:58:2a:36:39:ac:
82:7d:72:e0:45:ab:7f:04:47:3c:0b:54:33:75:a5:
c0:da:9c:89:3e:1d:d6:00:08:fb:aa:90:cc:42:1d:
a3:05:2f:05:b2:af:cb:f7:b3:fc:4c:a4:2c:d3:af:
7f:8d:75:5e:8c:85:9d:57:31:5b:5e:e9:8f:d7:c6:
e4:0b:28:d4:c7:f9:84:78:83:9c:45:5f:a4:63:3d:
f9:47:2e:1c:06:13:f0:a9:4d:2d:5e:86:09:8c:d6:
84:35:21:2c:f1:11:a2:93:d5:ae:6d:df:e4:c2:1a:
24:a0:92:c4:cc:56:78:7b:1b:d4:eb:ea:22:59:6b:
be:b0:91:60:01:1c:42:10:3a:e6:a9:5b:6b:2e:dd:
c7:47:63:d9:5f:89:53:fb:d4:ef:58:ad:37:8c:ef:
3b:d6:9f:ce:26:92:ea:45:71:02:1f:bc:22:36:63:
5d:98:d8:6f:39:f5:5f:0e:2e:cc:8d:df:5e:0a:5b:
48:30:f9:f1:80:1a:98:68:78:5e:c3:ed:2f:34:f1:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:F0:21:DF:80:7B:B2:34:90:85:F2:E3:04:9D:AF:70:EC:EF:34
X509v3 Authority Key Identifier:
keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:e2:f6:64:9b:0a:a6:19:a3:7a:db:49:6c:49:98:67:e1:
83:47:49:2c:3b:98:9e:d0:78:2e:58:e5:6a:a1:fe:79:00:ae:
4c:72:1c:ad:61:cd:fa:c0:39:32:99:30:41:cd:90:69:44:d0:
a1:e7:3e:16:77:99:d1:f1:f4:a7:91:37:ed:6a:69:d6:32:28:
89:74:40:f5:75:aa:73:cb:11:5b:32:ad:5b:18:43:6e:66:ea:
6c:d4:85:7f:e8:a2:f4:78:b3:37:17:33:29:33:5d:12:53:1f:
78:a0:35:40:a8:c0:cd:1e:f0:4f:5a:44:b4:5f:bf:c6:e1:af:
d4:2c:8f:49:9f:45:e4:84:42:c1:e9:36:78:cb:eb:ba:09:91:
69:92:be:7a:d7:33:0a:2b:ed:94:60:31:4d:58:13:48:28:82:
aa:6c:e9:62:1b:f9:c8:07:57:ca:fb:cf:e0:c1:55:93:a3:e8:
4e:fe:35:4c:c6:a0:41:df:03:f2:58:e8:70:f3:0f:5e:4c:c5:
e2:e9:77:da:d0:cc:3d:ff:8d:2b:d1:0d:92:2b:b1:5d:90:c9:
64:01:16:52:99:5d:0d:ba:ac:6f:de:94:40:8e:9d:2c:ec:cd:
7c:82:76:c5:b0:df:41:6d:e7:89:ea:04:e5:3c:23:5c:eb:5c:
46:7c:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:00 2026 by rpki-client