
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
File: FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft (raw, json)
Hash identifier: yUpeW00MOeWyIOQc6rFHjDoNA/VoQ2MWk4IQ1eNsSH0=
Subject key identifier: 83:7F:FF:E7:8C:FE:84:92:8C:AB:D4:6B:1B:29:C1:C3:5F:B6:86:C3
Authority key identifier: FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF
Certificate issuer: /CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
Certificate serial: 73966F474662C1EF6E4D5A1368A133640C1AB155
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
Manifest number: 6D
Signing time: Fri 24 Jul 2026 00:14:23 +0000
Manifest this update: Fri 24 Jul 2026 00:09:23 +0000
Manifest next update: Sat 25 Jul 2026 01:39:23 +0000
Files and hashes: 1: FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl (hash: DumcYtpiXSmqicrv11lZDYYwcOSfPL1BAGQRniCq5Cc=)
2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: dro/uVDmCCZVeSiHITBTTi+wa46OyEUBbiwxzlIppDE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl
rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:96:6f:47:46:62:c1:ef:6e:4d:5a:13:68:a1:33:64:0c:1a:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF
Validity
Not Before: Jul 24 00:09:23 2026 GMT
Not After : Jul 25 01:39:23 2026 GMT
Subject: CN=837FFFE78CFE84928CABD46B1B29C1C35FB686C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:5c:93:6d:ce:c9:b4:a3:05:0f:d7:80:2b:
1b:25:3f:f6:31:d3:6a:70:71:43:d2:2e:84:45:fc:
c8:e7:1d:90:c7:de:bb:9d:cc:3e:2d:29:fc:33:ec:
12:95:f2:c5:43:9b:5a:0d:9b:52:04:9e:5b:7c:4b:
0e:6c:e7:4d:a7:ea:f7:4d:6f:5f:a1:ca:f2:77:37:
a0:2d:5c:bd:6b:7f:65:30:b4:0e:b1:25:ff:49:62:
91:ae:62:aa:93:84:51:05:57:21:f0:82:ac:3e:c6:
d0:c0:75:7b:2e:06:e6:f5:3f:04:82:de:24:bb:2c:
ba:07:b0:54:1b:e6:af:1a:43:36:b7:7d:0a:e4:3d:
7f:2f:a2:b8:3b:26:59:71:90:92:5b:40:28:cd:2b:
8e:fe:fe:7d:f6:0c:5d:be:56:ad:e8:d6:74:cb:53:
26:a0:e6:a7:b1:cc:2d:0e:87:56:bf:bd:f9:75:bf:
1b:4e:95:42:78:8e:b8:6b:de:e1:92:b9:1e:5a:59:
e3:71:91:88:c8:6f:ff:e0:81:80:1e:79:45:b2:17:
54:2b:92:9d:30:36:b5:7e:71:9b:31:57:af:76:44:
2f:2e:5d:6f:bc:37:5a:37:8d:0a:e0:2a:23:53:6e:
94:d7:e0:fe:8c:45:a1:23:5f:ee:01:9a:70:db:eb:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:FF:E7:8C:FE:84:92:8C:AB:D4:6B:1B:29:C1:C3:5F:B6:86:C3
X509v3 Authority Key Identifier:
keyid:FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:62:3c:b3:94:8c:39:d0:27:16:62:3b:95:23:6c:ec:d5:80:
d8:fb:33:22:97:80:1b:fb:cf:b8:4a:cf:86:42:a2:ef:16:4c:
1e:89:b0:62:5c:80:b2:0b:80:73:90:18:4f:f2:c9:6c:b7:31:
30:63:d1:58:b7:17:a0:5f:61:d2:a1:a6:c5:c0:29:6d:fb:ee:
af:d8:46:ca:44:d2:85:1a:88:8d:d9:64:80:69:ce:dc:4a:d8:
77:f2:1c:df:14:ae:89:65:c1:ed:99:2d:f1:c2:8a:b1:60:1f:
65:73:78:96:3e:18:eb:de:35:1c:7b:a7:bf:95:dc:3a:31:86:
fc:d3:5b:a5:0f:03:db:d4:1b:1f:3a:10:ba:16:c9:a7:63:39:
31:3e:5a:88:4a:5c:aa:08:a6:7d:9b:5d:c4:b7:95:5b:cb:f2:
4e:90:31:49:95:03:68:ff:00:d3:73:17:b4:1c:ca:98:91:3f:
85:e4:b0:5b:7b:0a:f4:7d:30:e2:51:4e:58:7b:65:e9:01:e9:
c5:05:cd:7d:7b:0d:15:48:08:f0:ed:87:81:a1:0c:32:a9:01:
2b:00:ab:95:d5:32:70:cd:4a:de:e8:c9:fc:b8:6a:d7:55:41:
1a:ad:cd:26:2f:06:9f:30:b6:68:b9:51:b9:05:50:fc:a0:39:
07:06:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:18 2026 by rpki-client