
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: 8kd342Q6luoDoQuSrbpj0gaHUCGgv8Xr8mbQe+5t058=
Subject key identifier: 40:03:BE:69:EF:7B:84:CB:05:DF:54:2C:1A:35:23:5A:32:08:B3:BE
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 7DFA6E26ECF88D4F474E83E522D6DC3A29CD5AE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:49:49 +0000
Manifest this update: Tue 12 May 2026 21:44:49 +0000
Manifest next update: Wed 13 May 2026 23:19:49 +0000
Files and hashes: 1: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
3: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: zGwJhlrG2ZHOYNyu3HRravTTL1v84/FbHBGmM+Nuxag=)
4: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fa:6e:26:ec:f8:8d:4f:47:4e:83:e5:22:d6:dc:3a:29:cd:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: May 12 21:44:49 2026 GMT
Not After : May 13 23:19:49 2026 GMT
Subject: CN=4003BE69EF7B84CB05DF542C1A35235A3208B3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:c4:5d:e2:3c:a4:a0:4e:ea:64:64:83:fd:
d6:f1:f4:05:44:34:6c:be:a5:71:82:5d:df:55:bd:
ab:da:dd:85:95:4a:f7:ce:62:76:55:37:bc:d0:bd:
99:ed:72:e7:31:8a:93:e9:45:dd:be:1f:ff:f6:98:
8c:14:0d:c0:7f:32:2c:2d:bf:26:7a:07:6f:93:6d:
73:c6:0e:5f:57:d9:85:f3:50:9f:cc:de:5d:c7:aa:
dd:d1:ae:e0:a2:d3:84:a3:3c:6a:80:52:d7:da:66:
fd:28:f5:04:57:6f:1c:f9:02:0b:1d:79:02:6c:f3:
56:ea:a7:2a:32:c7:5a:04:92:ad:11:f9:c5:d5:d8:
8e:07:29:8c:0a:f7:ee:8d:5a:d0:40:77:82:a4:c9:
bb:71:5e:98:88:6a:18:d1:7b:5d:4a:e5:b1:a0:17:
7d:4b:07:42:85:33:42:55:29:5b:67:74:56:77:92:
e8:11:f6:c1:a1:4a:c3:af:46:4f:42:9c:cf:96:e4:
4a:7e:4e:26:5f:8e:03:f6:4d:ef:44:f2:ac:c6:fa:
02:ad:38:dd:52:7e:e8:83:cf:93:81:ba:ed:4d:52:
49:71:eb:24:95:24:01:fb:6a:12:17:f5:2b:f2:9e:
99:83:b0:76:6a:a3:e6:b0:f5:cb:66:a8:3c:f8:8f:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:BE:69:EF:7B:84:CB:05:DF:54:2C:1A:35:23:5A:32:08:B3:BE
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:27:53:fc:bc:b1:b0:f7:39:3e:b1:99:d4:eb:63:f5:2f:
b4:b0:f4:fe:9c:8b:72:09:91:79:6e:54:8b:17:6e:0a:de:14:
1b:c8:f0:1c:12:b3:8f:a3:49:c0:35:59:69:b8:a6:3d:c5:3f:
3a:6d:4f:6b:b3:b4:24:64:0b:3c:28:6f:98:14:fd:b7:f6:bc:
4b:9e:99:bd:c6:90:0d:4f:86:8d:db:d8:fd:fa:dc:76:b4:4e:
d5:23:63:bc:59:c4:c3:6a:ad:a2:04:5d:2c:4f:5a:f1:3f:8a:
2a:e6:3a:9b:f3:f8:88:57:ed:0f:52:c7:64:d4:ac:5c:dc:6e:
cb:40:0f:d5:38:f4:73:1d:c7:6f:94:10:1f:67:79:96:9d:59:
8f:d5:53:8b:6a:30:fb:96:13:27:d1:65:c3:cb:1b:15:b3:4c:
7c:92:66:c4:bb:67:93:f9:ac:11:c5:d4:47:f2:fc:4d:3b:89:
00:96:21:35:aa:29:ff:7d:88:c1:1e:2a:83:4c:48:cc:17:77:
27:bd:67:b1:d0:b0:5a:9b:0e:03:bc:3f:6f:4b:2c:8a:84:d6:
e5:c7:e2:24:0b:42:1e:b9:1d:5e:ec:11:c4:02:e7:8f:b7:12:
0c:02:34:f7:4f:c0:f7:ed:a6:31:c3:50:92:60:38:a0:32:6c:
6b:5b:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:11 2026 by rpki-client