
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
File: FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json)
Hash identifier: whYxjlXRnlBQisfJEP4wAq6/6EfKi5DvOas00a0dF/I=
Subject key identifier: AA:8A:78:CB:E4:DE:0D:55:DE:24:2A:36:D2:FF:DE:E9:91:58:30:4B
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial: 06A2090A3BFCC00CC08396A07117D0B9709BF56B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 15:14:41 +0000
Manifest this update: Thu 24 Sep 2026 15:09:41 +0000
Manifest next update: Fri 25 Sep 2026 19:09:41 +0000
Files and hashes: 1: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: sFjxMEHFEHGSuy9KsQneUOZva6SnhTROiEuCrJtFhls=)
2: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=)
3: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=)
4: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=)
5: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=)
6: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=)
7: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a2:09:0a:3b:fc:c0:0c:c0:83:96:a0:71:17:d0:b9:70:9b:f5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
Validity
Not Before: Sep 24 15:09:41 2026 GMT
Not After : Sep 25 19:09:41 2026 GMT
Subject: CN=AA8A78CBE4DE0D55DE242A36D2FFDEE99158304B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:93:18:84:42:69:85:a4:6d:03:f1:a2:62:
1a:57:14:90:4e:bf:ea:fb:cc:43:ce:9c:44:eb:eb:
51:6e:ff:c8:d8:87:f0:9d:d4:d4:55:d2:d4:fc:ad:
2b:b2:da:e5:6c:ea:c4:44:33:89:ce:d8:85:63:22:
a5:0d:db:78:a4:f7:93:90:81:3c:26:2f:58:9d:57:
58:f2:fc:af:62:a4:fd:42:33:56:be:47:3d:30:f7:
c1:b9:5a:1d:c8:10:be:96:3f:3d:bf:32:14:5d:78:
b9:54:72:c4:ee:5d:04:d3:41:f7:41:9e:08:71:8e:
b3:ea:21:ca:b5:76:f8:c8:7a:55:21:03:99:95:78:
59:c1:7b:8b:5b:81:94:c0:8a:25:6b:d9:3f:c1:6d:
3c:a4:42:10:ed:b5:f5:a6:33:e2:d7:80:de:d5:37:
66:15:32:00:14:b4:b5:a8:fc:dc:20:3a:06:36:a5:
17:38:72:eb:a7:f1:e8:74:c4:a0:4e:1d:58:4a:11:
c0:b2:f1:dd:8e:1a:4d:79:0b:13:fc:c8:db:d9:e9:
a7:75:c8:dc:d4:78:4a:f8:0c:c3:34:59:53:a8:13:
ba:c7:a2:b9:13:6f:76:ee:1e:7a:35:ce:54:29:b8:
03:2e:ef:0f:8e:00:d6:de:a8:33:3f:93:1d:c0:3c:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:78:CB:E4:DE:0D:55:DE:24:2A:36:D2:FF:DE:E9:91:58:30:4B
X509v3 Authority Key Identifier:
keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:6c:4e:68:9b:af:bb:12:3c:3e:90:41:2c:2e:7b:ac:35:
9a:09:14:6d:f2:60:41:b7:f6:3d:81:4e:a4:fc:7a:d6:93:a5:
20:3e:0b:dd:8b:73:b1:a4:3c:a8:19:ea:7e:18:1c:a9:25:bf:
c2:96:d7:88:72:18:c0:1d:af:08:02:ff:22:8d:e2:36:01:a3:
88:39:a3:35:19:ac:25:0d:39:f8:47:df:da:37:65:c4:86:45:
03:9a:a4:29:18:cf:18:98:e0:17:bc:4c:37:5b:36:de:23:b1:
f3:87:87:e4:2f:af:13:a7:06:48:a9:f8:37:40:3b:aa:b1:37:
d1:d1:9b:34:19:17:97:4d:3a:d8:cc:29:39:8e:8d:78:ea:0f:
2b:ff:ea:de:8b:ae:9b:98:88:f7:a5:1b:20:73:be:75:0b:9b:
6b:a8:8a:0a:d4:d1:b6:5a:9c:fb:03:32:e2:db:db:a3:fb:9d:
2c:49:12:e6:e7:0a:20:7d:6c:6d:f8:28:3e:2a:8d:d6:c0:d6:
ff:64:f3:a7:df:cc:bc:e9:0c:06:2f:7f:a0:c1:56:1b:1b:b1:
33:b7:64:4a:16:4e:36:c3:ac:c4:ba:66:71:03:5b:04:8c:f3:
73:66:4e:de:b7:a5:ab:9d:3d:83:b1:d0:24:1e:ab:e7:a7:0f:
d2:9d:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:11:55 2026 by rpki-client