
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: Ldg5iEN3TKYb38NFHt2S+ZbsNYdc8FagExcc6DvDiPs=
Subject key identifier: BC:C1:1F:C0:7F:16:AC:EB:1D:3F:81:28:63:24:F0:7F:4E:2A:F0:F1
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 21F83B2B4A323538428BDA945E09E690F2BFB59A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 07:20:17 +0000
Manifest this update: Wed 23 Sep 2026 07:15:17 +0000
Manifest next update: Thu 24 Sep 2026 10:27:17 +0000
Files and hashes: 1: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
3: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
4: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: Rvr5XB8TaBz0Suu+tAgtY9L4701WBBAMVvTnAFU7B3o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 10:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f8:3b:2b:4a:32:35:38:42:8b:da:94:5e:09:e6:90:f2:bf:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: Sep 23 07:15:17 2026 GMT
Not After : Sep 24 10:27:17 2026 GMT
Subject: CN=BCC11FC07F16ACEB1D3F81286324F07F4E2AF0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:52:22:27:5b:59:24:85:9d:66:ec:c0:10:
2f:06:f4:4d:8b:c2:8c:5d:52:c0:e2:09:1b:0b:a7:
e4:19:0b:16:a8:0b:48:ee:5f:ad:93:ec:4a:eb:b4:
67:95:70:f0:ea:89:15:b3:d2:04:39:a2:0b:8b:4b:
a7:d2:06:25:22:24:75:00:b4:ae:47:67:14:83:02:
98:ff:0f:24:c0:bb:f6:d1:f5:38:db:30:c1:8c:8b:
4a:f4:af:6c:f8:8c:8c:36:69:3f:91:81:ee:dc:06:
35:0b:5a:9c:79:74:5e:fa:4d:b2:56:69:4b:93:cb:
aa:72:f7:f3:1d:b7:41:e9:a1:09:a0:24:22:77:73:
12:05:b3:4a:0f:50:36:31:c1:db:e1:84:be:ad:56:
f1:60:5a:71:f6:52:3a:59:4f:3a:de:66:76:e8:56:
fd:e0:b2:cd:55:b6:5a:f5:0a:5e:83:0c:89:6e:37:
90:30:27:5b:bd:2e:4d:96:e6:d8:47:12:7f:1f:4d:
dd:24:a5:aa:2f:e7:d3:12:d8:18:9d:9c:fd:80:90:
b6:c2:61:5a:85:e5:66:d6:e8:e4:7b:6c:42:5f:78:
db:6a:37:df:79:7a:97:14:cf:c4:f2:d9:a9:24:1f:
f1:c6:cb:9d:ac:78:a8:7e:76:a2:ba:97:21:3d:00:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:1F:C0:7F:16:AC:EB:1D:3F:81:28:63:24:F0:7F:4E:2A:F0:F1
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:0c:26:43:07:42:90:3f:45:d3:7c:10:a9:96:d3:3b:a7:
0e:9a:d5:ce:8e:e7:af:da:66:35:78:7e:45:6c:c5:9b:96:c9:
d8:3f:00:14:39:5e:25:34:df:32:72:56:ed:7e:1e:e7:12:a6:
44:f5:c8:17:2b:62:50:5c:24:58:a4:c1:cd:d8:5a:24:99:30:
61:f3:fe:41:0f:51:e0:4d:e5:86:73:e6:b9:be:2a:8a:ed:7b:
42:7b:95:c7:60:fe:0b:00:97:b2:0a:ab:79:d5:40:f1:0f:2f:
07:d2:34:c7:d7:93:b5:1b:af:cc:b1:23:e9:05:54:3d:15:a9:
9b:86:a3:45:d3:f1:49:24:38:d7:15:ed:6a:a2:a7:cd:81:5b:
c1:63:fc:0e:fc:0a:c5:a4:67:eb:01:34:d1:3d:f8:c7:58:f9:
13:16:14:35:48:be:f1:d4:65:1c:e4:4d:fc:70:ae:25:97:34:
0d:e1:1c:8b:d7:78:68:8f:42:5d:f3:39:58:4b:18:66:b4:cf:
07:39:49:b3:e0:fa:18:b5:6c:ec:e2:8d:37:08:4b:af:50:33:
72:53:f2:dc:93:0c:86:43:f7:00:62:d0:58:ee:19:97:73:5e:
b6:3d:fc:2c:1a:19:ae:47:80:f4:6f:7c:16:3d:87:bd:0f:4b:
e7:de:f1:db
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIfg7K0oyNThCi9qUXgnmkPK/tZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxRTU4RkNDNkQ0NTU5QzQ5MkJGRkYwNzNBQjY1NTQx
NTlFQzUwNDAeFw0yNjA5MjMwNzE1MTdaFw0yNjA5MjQxMDI3MTdaMDMxMTAvBgNV
BAMTKEJDQzExRkMwN0YxNkFDRUIxRDNGODEyODYzMjRGMDdGNEUyQUYwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPFIiJ1tZJIWdZuzAEC8G9E2L
woxdUsDiCRsLp+QZCxaoC0juX62T7ErrtGeVcPDqiRWz0gQ5oguLS6fSBiUiJHUA
tK5HZxSDApj/DyTAu/bR9TjbMMGMi0r0r2z4jIw2aT+Rge7cBjULWpx5dF76TbJW
aUuTy6py9/Mdt0HpoQmgJCJ3cxIFs0oPUDYxwdvhhL6tVvFgWnH2UjpZTzreZnbo
Vv3gss1Vtlr1Cl6DDIluN5AwJ1u9Lk2W5thHEn8fTd0kpaov59MS2BidnP2AkLbC
YVqF5WbW6OR7bEJfeNtqN995epcUz8Ty2akkH/HGy52seKh+dqK6lyE9AELPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvMEfwH8WrOsdP4EoYyTwf04q8PEwHwYDVR0j
BBgwFoAU9h5Y/MbUVZxJK//wc6tlVBWexQQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzJiMGJkZDUtNmUzMC00YTEwLWI5OTMtNzdkNDgyNTFmM2ExLzAvRjYxRTU4RkND
NkQ0NTU5QzQ5MkJGRkYwNzNBQjY1NTQxNTlFQzUwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GNjFFNThGQ0M2RDQ1NTlDNDkyQkZGRjA3M0FCNjU1NDE1OUVD
NTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5
OTMtNzdkNDgyNTFmM2ExLzAvRjYxRTU4RkNDNkQ0NTU5QzQ5MkJGRkYwNzNBQjY1
NTQxNTlFQzUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJQ4DCZDB0KQP0XTfBCpltM7pw6a1c6O56/a
ZjV4fkVsxZuWydg/ABQ5XiU03zJyVu1+HucSpkT1yBcrYlBcJFikwc3YWiSZMGHz
/kEPUeBN5YZz5rm+Korte0J7lcdg/gsAl7IKq3nVQPEPLwfSNMfXk7Ubr8yxI+kF
VD0VqZuGo0XT8UkkONcV7Wqip82BW8Fj/A78CsWkZ+sBNNE9+MdY+RMWFDVIvvHU
ZRzkTfxwriWXNA3hHIvXeGiPQl3zOVhLGGa0zwc5SbPg+hi1bOzijTcIS69QM3JT
8tyTDIZD9wBi0FjuGZdzXrY9/CwaGa5HgPRvfBY9h70PS+fe8ds=
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:19:03 2026 by rpki-client