
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
File: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft (raw, json)
Hash identifier: if1SlA7MEZY5PNmUfOkYA1dnDH2z1gEGN9Gg8O+wLmo=
Subject key identifier: 37:EF:CE:5D:BB:9F:0A:85:DE:4A:7E:4D:3F:C9:E3:83:32:A6:25:F9
Authority key identifier: F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3
Certificate issuer: /CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
Certificate serial: 33E94B10EA10BD2600115106D6FE691FAE13D6ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:53:08 +0000
Manifest this update: Tue 12 May 2026 20:48:08 +0000
Manifest next update: Thu 14 May 2026 00:13:08 +0000
Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: 01F1UoKRV2E0gP5aPTGtczRefIGjQne0iajygCNTbZQ=)
2: F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl (hash: 8+lqbDrBOAa9CsDGRNSjP+eGxviuQQ4zHLgofRrmfAc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl
rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e9:4b:10:ea:10:bd:26:00:11:51:06:d6:fe:69:1f:ae:13:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3
Validity
Not Before: May 12 20:48:08 2026 GMT
Not After : May 14 00:13:08 2026 GMT
Subject: CN=37EFCE5DBB9F0A85DE4A7E4D3FC9E38332A625F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:4a:8c:c8:85:f8:c3:b2:1e:22:58:5c:78:
a3:31:45:16:5a:37:34:3c:9d:25:f6:20:0d:2e:f0:
0a:72:40:13:d1:ca:ce:bb:dc:f7:e8:95:fe:2a:f4:
8b:8f:8f:69:86:2c:36:6c:91:01:4f:ae:c1:9e:e1:
1c:94:a2:7e:2a:a2:4c:03:89:66:ff:d4:77:36:eb:
b7:d2:34:6f:f3:98:9c:c8:9d:47:15:5d:2b:7e:ce:
d8:db:0b:fc:24:8b:1e:37:04:d5:e7:08:31:49:6c:
ac:d5:13:0f:8a:92:87:54:f4:38:93:d9:e5:48:78:
ad:84:6c:ac:b7:1d:dd:54:70:74:8e:ba:8b:c5:33:
28:c8:37:d8:b5:ca:bc:f1:99:8f:a0:17:fd:a9:10:
df:b8:d4:9d:59:9e:06:11:37:2e:5b:e3:66:92:c0:
b0:91:43:da:66:e9:cf:ce:b9:7d:69:b5:a2:68:d1:
28:9d:ea:65:39:d6:72:02:ec:f3:01:e0:cf:a3:a9:
75:52:d6:cb:92:b6:c3:4a:5a:f3:65:e7:b8:de:43:
5a:9f:96:2b:39:c4:20:27:2f:76:29:cf:4d:4d:8b:
7c:23:27:80:fa:19:9f:0e:88:7b:10:7e:47:7e:2d:
c9:7e:82:dd:af:24:d3:76:3c:59:d6:5a:20:a4:42:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:CE:5D:BB:9F:0A:85:DE:4A:7E:4D:3F:C9:E3:83:32:A6:25:F9
X509v3 Authority Key Identifier:
keyid:F7:C8:FE:73:5E:16:A4:2B:0A:4F:E7:6A:29:68:C8:B3:72:B0:8F:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/F7C8FE735E16A42B0A4FE76A2968C8B372B08FE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:68:f9:a5:eb:a9:de:da:b4:20:be:3a:c2:01:e4:52:51:
0e:0f:55:2d:55:94:ed:2c:37:ec:8e:0a:05:61:2b:85:c4:67:
e9:95:c4:2f:8f:2f:92:28:6c:e5:66:32:69:1b:46:76:e3:7e:
21:7e:0e:69:36:a6:d2:64:6a:13:ee:cb:0c:32:c9:cc:f3:db:
b3:48:bd:14:4c:2d:83:ba:98:9a:33:76:32:2b:17:52:49:45:
ee:a8:bd:0b:08:7d:1d:a1:69:bd:7e:af:24:3d:dd:94:f0:33:
4b:69:a4:cf:25:a5:ec:e7:b5:44:dd:67:af:11:a2:86:28:31:
c5:87:23:9b:ed:65:88:7b:36:13:8f:06:3e:d6:23:5a:28:2d:
c5:ad:b4:29:48:78:a5:84:02:80:8d:ae:f6:51:cb:88:9c:0d:
b0:b2:55:2d:06:0c:80:88:b4:12:f2:3c:90:5b:bf:50:4c:93:
0d:c4:24:37:50:71:67:8b:f9:0a:4d:5e:b0:8c:26:1b:22:9e:
f5:5b:50:44:fc:f9:90:bc:2d:bf:da:3d:05:a1:c1:54:59:a8:
55:37:8a:00:40:aa:d3:91:76:db:35:ca:dc:d6:4d:76:f9:e5:
09:2b:53:98:05:f1:99:9b:56:8f:c8:68:13:48:a7:69:81:75:
27:76:6c:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM+lLEOoQvSYAEVEG1v5pH64T1u0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdDOEZFNzM1RTE2QTQyQjBBNEZFNzZBMjk2OEM4QjM3
MkIwOEZFMzAeFw0yNjA1MTIyMDQ4MDhaFw0yNjA1MTQwMDEzMDhaMDMxMTAvBgNV
BAMTKDM3RUZDRTVEQkI5RjBBODVERTRBN0U0RDNGQzlFMzgzMzJBNjI1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFUqMyIX4w7IeIlhceKMxRRZa
NzQ8nSX2IA0u8ApyQBPRys673Pfolf4q9IuPj2mGLDZskQFPrsGe4RyUon4qokwD
iWb/1Hc267fSNG/zmJzInUcVXSt+ztjbC/wkix43BNXnCDFJbKzVEw+KkodU9DiT
2eVIeK2EbKy3Hd1UcHSOuovFMyjIN9i1yrzxmY+gF/2pEN+41J1ZngYRNy5b42aS
wLCRQ9pm6c/OuX1ptaJo0Sid6mU51nIC7PMB4M+jqXVS1suStsNKWvNl57jeQ1qf
lis5xCAnL3Ypz01Ni3wjJ4D6GZ8OiHsQfkd+Lcl+gt2vJNN2PFnWWiCkQqO1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUN+/OXbufCoXeSn5NP8njgzKmJfkwHwYDVR0j
BBgwFoAU98j+c14WpCsKT+dqKWjIs3Kwj+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzU1ZWFjOTctMzFiNS00ZjMzLTgyZjQtNTI0MTQ3MGNiYmJlLzAvRjdDOEZFNzM1
RTE2QTQyQjBBNEZFNzZBMjk2OEM4QjM3MkIwOEZFMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GN0M4RkU3MzVFMTZBNDJCMEE0RkU3NkEyOTY4QzhCMzcyQjA4
RkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy
ZjQtNTI0MTQ3MGNiYmJlLzAvRjdDOEZFNzM1RTE2QTQyQjBBNEZFNzZBMjk2OEM4
QjM3MkIwOEZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADtBaPml66ne2rQgvjrCAeRSUQ4PVS1VlO0s
N+yOCgVhK4XEZ+mVxC+PL5IobOVmMmkbRnbjfiF+Dmk2ptJkahPuywwyyczz27NI
vRRMLYO6mJozdjIrF1JJRe6ovQsIfR2hab1+ryQ93ZTwM0tppM8lpezntUTdZ68R
ooYoMcWHI5vtZYh7NhOPBj7WI1ooLcWttClIeKWEAoCNrvZRy4icDbCyVS0GDICI
tBLyPJBbv1BMkw3EJDdQcWeL+QpNXrCMJhsinvVbUET8+ZC8Lb/aPQWhwVRZqFU3
igBAqtORdts1ytzWTXb55QkrU5gF8ZmbVo/IaBNIp2mBdSd2bHM=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:12 2026 by rpki-client