
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json)
Hash identifier: oOWAtNLZdPrVH7noe/kAAm1b6JLM9OOJ20wOqLixKGU=
Subject key identifier: 42:B1:88:E4:51:E5:EE:61:34:FF:08:46:BA:E8:57:5B:50:82:87:C3
Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36
Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
Certificate serial: 53C632B4D3F8960627912F068E253F4B861D40F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:34:49 +0000
Manifest this update: Fri 24 Jul 2026 00:29:49 +0000
Manifest next update: Sat 25 Jul 2026 03:11:49 +0000
Files and hashes: 1: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: 8pn28mpgtmsaV0aiqE+54QpgDgUlisUpDdBSdi/77VA=)
2: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=)
3: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=)
4: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl
rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c6:32:b4:d3:f8:96:06:27:91:2f:06:8e:25:3f:4b:86:1d:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36
Validity
Not Before: Jul 24 00:29:49 2026 GMT
Not After : Jul 25 03:11:49 2026 GMT
Subject: CN=42B188E451E5EE6134FF0846BAE8575B508287C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:5b:87:52:d8:61:51:31:f7:b2:4d:0a:e7:
90:58:db:51:33:d1:92:06:de:85:05:eb:40:c5:7f:
60:dd:e2:cb:66:74:74:7a:17:74:a7:6b:73:74:a0:
51:a4:7d:86:5c:e0:31:01:06:15:22:b9:0b:8a:0a:
e6:b9:35:32:7f:4d:23:1f:4d:03:c8:ba:5f:cd:44:
7c:b4:87:c2:32:b2:2a:f8:40:a1:12:11:06:cf:28:
f5:4f:af:cc:92:63:cf:86:03:dc:25:eb:c3:ca:36:
ec:db:67:dc:fd:ee:34:71:97:d7:41:e0:73:f3:2a:
2b:89:1a:b8:82:16:ca:43:f8:0d:f3:5d:7f:48:34:
61:3a:38:14:3f:8d:0c:8b:c7:58:d7:51:f1:33:f6:
65:38:0a:29:d7:3e:6c:e9:d9:a8:9b:23:5f:8e:aa:
1c:d2:a5:7a:52:e9:4c:9d:06:fc:b0:0c:1c:a3:7a:
f9:3e:d3:c4:f6:dc:c5:24:9c:7f:92:1f:57:dd:98:
d4:6b:f3:5d:5c:26:de:b8:01:dc:08:0f:64:52:09:
93:ff:59:30:cd:aa:4f:16:bb:cb:1f:51:a9:22:93:
fe:eb:45:42:d4:c1:3f:14:d4:f2:55:90:a4:46:46:
78:37:9b:19:99:74:1e:c4:32:f4:d8:fa:2f:a3:2b:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:88:E4:51:E5:EE:61:34:FF:08:46:BA:E8:57:5B:50:82:87:C3
X509v3 Authority Key Identifier:
keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:01:47:7e:b2:54:be:18:3f:be:5c:55:01:39:3b:50:28:
a6:62:32:4f:c2:e9:81:57:2f:10:60:91:c1:57:4c:06:39:1c:
68:94:1f:8b:54:d1:98:b5:5d:eb:bb:80:ef:72:3a:3e:af:2b:
96:ce:b7:27:5e:f1:cf:88:f3:94:60:b9:7d:06:fc:23:b9:51:
19:5d:41:d5:31:b3:0f:6b:19:06:d4:6d:cb:ea:f0:44:62:d6:
05:b9:57:72:de:90:e7:8f:36:56:a3:20:4e:25:4d:1c:c1:36:
7a:f9:c2:77:01:61:e6:d9:fd:3b:2c:fd:a8:90:24:6b:cd:de:
d6:21:4a:7f:fd:8d:8b:f9:ba:60:38:d6:63:34:6b:44:16:64:
19:0d:6e:5b:3b:be:94:a1:50:8c:18:43:16:45:c1:fe:d2:4e:
6e:fd:d0:7f:8b:7b:f2:c2:9f:0c:89:82:3e:3d:92:d1:a6:22:
97:26:b8:ca:2c:01:41:5b:0f:d9:72:2e:1b:c4:e8:a7:44:88:
84:44:c0:ea:35:29:3b:cf:0e:72:74:d0:05:70:fd:4c:e2:bc:
10:4b:c6:ff:81:6d:d7:ff:6e:a2:84:3a:79:78:2b:cc:2e:49:
f1:e2:93:7b:9c:20:89:e8:55:ee:1b:76:92:dc:0c:3d:98:4e:
52:8b:a4:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUU8YytNP4lgYnkS8GjiU/S4YdQPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx
RkQ0NkEzNjAeFw0yNjA3MjQwMDI5NDlaFw0yNjA3MjUwMzExNDlaMDMxMTAvBgNV
BAMTKDQyQjE4OEU0NTFFNUVFNjEzNEZGMDg0NkJBRTg1NzVCNTA4Mjg3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+VuHUthhUTH3sk0K55BY21Ez
0ZIG3oUF60DFf2Dd4stmdHR6F3Sna3N0oFGkfYZc4DEBBhUiuQuKCua5NTJ/TSMf
TQPIul/NRHy0h8Iysir4QKESEQbPKPVPr8ySY8+GA9wl68PKNuzbZ9z97jRxl9dB
4HPzKiuJGriCFspD+A3zXX9INGE6OBQ/jQyLx1jXUfEz9mU4CinXPmzp2aibI1+O
qhzSpXpS6UydBvywDByjevk+08T23MUknH+SH1fdmNRr811cJt64AdwID2RSCZP/
WTDNqk8Wu8sfUakik/7rRULUwT8U1PJVkKRGRng3mxmZdB7EMvTY+i+jK/rpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQrGI5FHl7mE0/whGuuhXW1CCh8MwHwYDVR0j
BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx
QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2
QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3
NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz
NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJz1AUd+slS+GD++XFUBOTtQKKZiMk/C6YFX
LxBgkcFXTAY5HGiUH4tU0Zi1Xeu7gO9yOj6vK5bOtyde8c+I85RguX0G/CO5URld
QdUxsw9rGQbUbcvq8ERi1gW5V3LekOePNlajIE4lTRzBNnr5wncBYebZ/Tss/aiQ
JGvN3tYhSn/9jYv5umA41mM0a0QWZBkNbls7vpShUIwYQxZFwf7STm790H+Le/LC
nwyJgj49ktGmIpcmuMosAUFbD9lyLhvE6KdEiIREwOo1KTvPDnJ00AVw/UzivBBL
xv+Bbdf/bqKEOnl4K8wuSfHik3ucIInoVe4bdpLcDD2YTlKLpDA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:59 2026 by rpki-client