
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
File: FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json)
Hash identifier: oT+uYsk66+pRnYdtP+KAwaSG/c34u934TSn73uO3PkY=
Subject key identifier: FB:52:B8:2C:04:21:52:C7:5F:83:9E:E6:AC:25:01:5F:7B:92:61:2D
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial: 653762EEA02DFC1E778A7827B7CE28C90D0807EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
Manifest number: C3
Signing time: Wed 23 Sep 2026 22:54:25 +0000
Manifest this update: Wed 23 Sep 2026 22:49:25 +0000
Manifest next update: Thu 24 Sep 2026 23:12:25 +0000
Files and hashes: 1: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: hqaYo2TRuCYrLWcFTakmOyFwpuA6ke4rti3+MALQY/8=)
2: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=)
3: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=)
4: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=)
5: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=)
6: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=)
7: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:37:62:ee:a0:2d:fc:1e:77:8a:78:27:b7:ce:28:c9:0d:08:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
Validity
Not Before: Sep 23 22:49:25 2026 GMT
Not After : Sep 24 23:12:25 2026 GMT
Subject: CN=FB52B82C042152C75F839EE6AC25015F7B92612D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:db:f4:7f:14:b6:81:e1:cf:52:7e:cd:5e:
d7:ae:5e:23:1e:41:a5:2f:86:96:59:5b:aa:ca:d3:
d5:6c:be:82:43:ad:99:c1:38:b9:5c:de:ef:d8:26:
24:e6:08:2e:04:46:bd:03:ca:b7:83:ce:63:7a:d4:
a5:38:ec:2e:9a:02:9c:ec:f5:2e:15:1e:ca:0c:eb:
cb:dd:36:47:13:26:9a:05:a6:fa:da:77:91:ff:aa:
53:cd:c3:78:2f:5c:ac:75:d6:c3:06:db:e1:40:27:
44:cd:78:f7:57:c8:b5:3f:5e:a4:59:cb:39:bc:31:
f4:c3:2a:d2:30:22:84:b2:a5:c7:8c:e0:3c:40:71:
bb:d5:b0:5c:73:34:5e:85:9c:26:53:52:23:89:bc:
04:73:c2:e9:b8:fc:22:f8:e6:c1:ca:11:3c:7b:b5:
49:be:98:69:f7:15:eb:2e:6b:d6:28:04:9a:48:e2:
ed:47:36:39:b0:cd:fa:a1:9d:ac:60:5a:32:53:72:
6f:1c:5d:29:fe:24:af:14:8b:7d:f3:d6:06:59:3a:
28:5f:3f:23:9b:44:0c:21:ce:ae:9a:a4:92:52:f8:
3e:d8:77:75:1c:7f:fb:c1:97:0c:43:f4:a5:b2:7a:
35:bd:cd:52:96:58:14:fb:8a:be:8d:94:dc:a3:a5:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:B8:2C:04:21:52:C7:5F:83:9E:E6:AC:25:01:5F:7B:92:61:2D
X509v3 Authority Key Identifier:
keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:54:21:47:0b:ee:c1:13:3f:8d:70:9b:91:92:44:f1:5f:b0:
16:5d:b5:6b:1f:22:1c:18:c7:ad:67:84:c3:9f:a2:a3:65:a8:
da:d2:27:87:11:31:43:a2:2d:d6:d0:c7:d3:8a:07:46:a9:96:
db:05:a8:00:09:ca:3d:f1:d7:5a:cc:b7:4c:ac:04:d0:d8:20:
5f:b5:dc:a8:cb:e9:0f:d6:54:b1:1f:3b:6c:9a:6a:36:41:61:
f1:7a:71:a6:f3:06:72:4d:fb:de:54:08:0f:9e:db:91:97:e3:
dd:70:9c:ab:4b:52:be:1e:e5:68:b9:db:32:4d:6f:19:15:b5:
e1:01:1d:0b:9b:72:94:38:11:d3:1e:42:1e:22:56:0f:47:9a:
fc:6d:64:76:b4:3d:2b:0d:76:9b:fc:8d:87:e6:d6:4a:7c:01:
50:5b:c8:bd:68:5c:d6:75:06:d5:29:d4:1a:7e:27:5b:7d:b9:
b9:7c:06:12:76:66:32:56:4c:a3:a4:89:cc:4d:3c:b1:ef:39:
8a:68:c1:56:8c:28:ae:23:2d:42:c1:23:99:34:e0:66:81:d6:
cb:5f:ae:0a:63:ba:8d:14:24:bb:f0:07:50:d2:21:f4:f5:2d:
b3:ac:3a:d2:bf:c4:d0:b6:35:0d:26:01:d5:dd:a2:a6:6b:13:
04:fd:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:32 2026 by rpki-client