
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json)
Hash identifier: GsgO5aJP2bgwKGOcvsg+21yws4qwIpJTmp6IqdyfuEo=
Subject key identifier: A1:FA:80:F8:D2:0A:0C:A8:27:D0:21:56:16:2F:32:2F:B7:A0:09:0E
Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA
Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
Certificate serial: 0ADCA531918FE0012E126B53B1CC34822582E23E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:34:19 +0000
Manifest this update: Tue 12 May 2026 14:29:19 +0000
Manifest next update: Wed 13 May 2026 16:08:19 +0000
Files and hashes: 1: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=)
2: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=)
3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=)
4: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: CYljFjjLQ/N5tSE0HzlCVj5gR11FaRpjJ7tohz2GYaU=)
5: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=)
6: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl
rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:dc:a5:31:91:8f:e0:01:2e:12:6b:53:b1:cc:34:82:25:82:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA
Validity
Not Before: May 12 14:29:19 2026 GMT
Not After : May 13 16:08:19 2026 GMT
Subject: CN=A1FA80F8D20A0CA827D02156162F322FB7A0090E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:cf:a1:af:22:ba:69:00:b9:5a:49:b5:8d:
fa:8c:98:60:3e:22:e5:db:b0:c9:e7:4e:3a:86:10:
55:1b:36:ed:49:0d:b6:1c:a5:93:de:f9:35:5a:63:
42:fe:ca:8f:5e:8a:67:be:6c:f4:30:26:68:e9:7c:
91:e6:8c:25:1c:20:70:87:7b:58:fc:56:87:8a:08:
f1:68:a6:a1:8b:bd:5e:d8:b7:71:50:41:0e:c8:44:
2d:61:f3:d9:7f:c0:74:89:02:71:20:58:52:74:ec:
62:ce:10:e2:5a:d9:46:36:d3:0a:fe:b8:0f:30:ed:
f1:b5:f1:99:ad:3d:f4:40:49:bc:85:b2:09:9c:e8:
7f:44:70:12:cc:9f:98:5c:8a:22:c4:ee:a7:ac:a3:
3a:a2:ca:61:21:c8:42:59:0c:a8:40:f5:70:25:c5:
ba:22:1b:bb:2c:04:3c:ff:1a:7c:0d:56:c5:4e:74:
17:aa:10:01:3d:08:a0:5b:6e:54:7d:e7:8b:2a:7c:
1c:b8:c7:3d:e7:2e:ef:af:db:77:47:f4:e4:7a:6e:
a7:4d:82:b1:12:2c:83:ee:ba:f3:f3:20:2c:a2:34:
54:a9:96:29:28:d3:96:4f:ac:20:82:87:13:dc:f8:
e6:09:31:90:b8:f0:93:35:7d:76:41:cb:48:ae:94:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:80:F8:D2:0A:0C:A8:27:D0:21:56:16:2F:32:2F:B7:A0:09:0E
X509v3 Authority Key Identifier:
keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6a:9d:81:09:d3:5d:ae:aa:a9:41:a1:26:94:98:01:27:5a:
bc:9e:8a:12:86:8c:b9:25:8a:dc:1b:29:43:90:c2:72:2f:d3:
d7:e5:6b:ad:90:12:23:1a:13:50:54:e3:7a:1c:39:54:a0:ea:
4b:4f:5d:9f:03:17:7e:ca:f0:b9:d2:d3:fc:26:e3:27:9d:3d:
5b:ea:2c:38:b5:6d:9c:d7:49:b2:69:92:9e:36:fd:66:42:e7:
bf:aa:0c:d5:7c:a6:d1:df:3b:33:e0:a2:0e:87:ed:1a:75:c6:
93:82:38:9a:58:77:74:6b:fd:7d:ee:c0:1b:07:61:89:6d:3f:
78:d8:c9:89:cb:83:cd:d4:a0:1e:6e:c0:8f:c4:98:32:f6:24:
ee:3f:10:b2:46:8d:0c:30:26:83:eb:0f:89:e1:78:8f:9e:30:
08:6a:21:5f:a7:67:36:0d:3c:8f:53:da:49:3e:93:d8:a2:9c:
19:94:6b:07:08:c0:1e:d1:8a:da:fc:d7:d5:42:3e:72:b7:37:
c2:d3:96:18:87:df:15:39:ec:3b:cf:78:29:32:12:0f:f1:1e:
f4:89:5f:05:4f:b3:1f:02:81:71:40:fe:ea:72:3e:00:53:02:
ff:c9:cd:6e:72:d0:b3:69:a7:6c:7f:39:dc:e0:7a:5c:71:f6:
e9:78:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:43 2026 by rpki-client