
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
File: F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft (raw, json)
Hash identifier: CyC/PtndmgF4aFPlVRa23LlINKHWotIcYL1ZF1TSuyQ=
Subject key identifier: 0A:19:3F:B2:DC:24:75:77:8C:8F:94:AA:BA:34:AA:70:7C:31:B4:EC
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Certificate issuer: /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial: 65EE5E837C8E0300D78326B273184DD4780EFEE1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:39:24 +0000
Manifest this update: Tue 12 May 2026 14:34:24 +0000
Manifest next update: Wed 13 May 2026 18:14:24 +0000
Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=)
2: F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl (hash: HSfem1dGI5yV5KUAXhkDgHZojKDcHKU2OT7cQB7VCgc=)
3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: MLRDHAYWUJ5kptyjF5jrt7z049bFm09q0nB+q2SG/yE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ee:5e:83:7c:8e:03:00:d7:83:26:b2:73:18:4d:d4:78:0e:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Validity
Not Before: May 12 14:34:24 2026 GMT
Not After : May 13 18:14:24 2026 GMT
Subject: CN=0A193FB2DC2475778C8F94AABA34AA707C31B4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:98:6d:71:0c:f8:95:24:36:4b:d2:3d:b9:
91:e4:28:09:13:93:f4:cb:d2:45:cb:1d:75:e0:3e:
34:68:0f:28:e2:52:d1:7a:c6:7c:50:13:b6:4e:80:
6f:56:4a:9b:30:db:3b:62:61:5d:e2:d2:bf:68:69:
0c:ac:69:64:fc:0c:4c:33:54:45:94:7c:01:6e:6e:
87:61:1b:55:b4:fa:53:c1:d6:5a:14:f1:10:2c:d5:
c5:7f:73:9c:43:6e:f6:e3:3f:30:04:e2:e6:b0:d2:
b7:56:60:43:75:2d:aa:b7:c7:78:2e:63:3c:51:d9:
61:62:a9:ce:ac:d7:dd:ba:45:ed:63:98:e4:98:a1:
ea:17:ef:ea:eb:21:bc:09:50:7b:d7:2b:b6:cb:26:
5d:bd:38:aa:2e:c8:2d:a4:04:5c:54:0c:43:db:e9:
73:0f:ed:70:63:ae:b2:32:ce:da:3e:aa:9e:92:52:
b7:12:93:cb:04:a7:7c:14:fa:fc:f9:78:f8:b1:88:
a9:7f:a8:18:f8:4e:e4:80:02:85:e4:94:a5:8f:dd:
37:f5:2a:b6:59:e0:31:7f:bd:f2:98:a5:e2:16:da:
fd:f5:05:30:64:f3:30:eb:be:db:0e:cf:f8:e6:a9:
0f:91:2b:3e:3a:a6:ed:b7:d6:67:43:f1:ac:67:0f:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:3F:B2:DC:24:75:77:8C:8F:94:AA:BA:34:AA:70:7C:31:B4:EC
X509v3 Authority Key Identifier:
keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:c6:32:f5:ec:b7:1a:72:0a:38:25:b4:3e:69:af:e2:bf:
8c:fc:6d:05:bb:f1:08:55:c2:df:7c:c9:f5:85:1c:52:41:6b:
be:15:f7:8a:2c:46:ff:d1:f8:4c:b7:3e:42:91:ea:03:2a:65:
df:be:5c:a2:0e:65:2f:5a:fc:fb:b6:12:84:e8:0c:70:18:8a:
ff:24:4c:61:13:09:5e:d0:43:ba:cc:bc:b0:38:8d:19:2e:53:
a6:36:b2:2d:59:e1:af:b9:da:61:f2:86:bd:c1:32:68:f3:36:
31:8b:b6:f1:1d:9d:1e:c1:ba:2c:42:c0:98:d9:ed:fc:19:02:
ed:e9:81:3e:bb:79:1f:58:ee:36:11:c7:da:58:ea:e3:ac:48:
0e:88:29:de:83:79:e3:6c:50:ab:79:5f:b0:1a:64:cd:e9:f3:
8f:db:97:e5:e0:25:2f:0d:4d:b6:d8:c4:9b:22:d2:bf:35:b7:
0d:ce:fe:ba:2e:a8:50:35:6a:f0:e4:9b:af:ae:8d:41:58:b2:
86:23:67:8f:bb:81:b0:b6:c7:91:d4:8d:f0:9f:cd:33:dd:e0:
ff:2d:dd:f7:d9:50:e0:32:82:cc:10:88:d2:b6:65:85:3c:c7:
ff:20:b7:2e:17:64:54:77:cd:0d:34:8b:2f:26:c2:46:3b:de:
29:e6:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:05 2026 by rpki-client