
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json)
Hash identifier: vTVi8Sj9oaji3HwUJeWHaagibBEN/zb2lqMKBW1S0/Y=
Subject key identifier: 4A:04:FA:5C:C4:3C:0E:DE:35:75:F7:30:EB:F9:AB:17:7B:C1:C6:28
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial: 254BB3BCDED08D29668411DB5B6E8293B8E97619
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 03:42:18 +0000
Manifest this update: Sun 14 Jun 2026 03:37:18 +0000
Manifest next update: Mon 15 Jun 2026 07:21:18 +0000
Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=)
2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=)
3: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: cFbFOvS+b40pFrEBMCjO3Jam8vHyturVe+HwdjRNIYM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 07:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4b:b3:bc:de:d0:8d:29:66:84:11:db:5b:6e:82:93:b8:e9:76:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Validity
Not Before: Jun 14 03:37:18 2026 GMT
Not After : Jun 15 07:21:18 2026 GMT
Subject: CN=4A04FA5CC43C0EDE3575F730EBF9AB177BC1C628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:bb:f9:89:b3:07:15:1a:9e:6e:2e:8a:e6:
d5:3e:34:48:82:1f:59:5a:07:fd:9f:90:43:92:5b:
45:6f:2f:a0:62:36:46:6f:29:95:90:33:6c:79:12:
11:ac:c6:6d:ea:cd:e8:48:15:0c:9e:64:12:d6:e6:
e9:22:6c:75:d0:0b:c7:ab:63:66:8f:1b:54:f7:28:
86:88:00:65:31:95:46:4c:d4:39:7b:a2:17:50:de:
3e:e4:d2:46:0d:db:4a:d7:4d:d8:16:0e:26:a3:82:
81:3d:29:69:3e:b3:88:d0:c3:1d:d2:cb:d4:53:8c:
74:31:4c:ab:08:c6:5e:09:5b:ca:27:e7:76:31:66:
41:92:54:8f:35:6b:9c:34:b9:56:28:97:be:b2:4b:
90:c6:ee:c5:44:f1:5a:c6:d9:8a:1a:e2:a8:96:29:
b0:94:8b:f8:03:32:58:e4:05:35:a6:ff:67:6d:62:
de:67:83:ba:0a:68:4c:59:1f:d8:7d:fb:f8:95:36:
5f:56:80:0f:33:e2:af:68:a4:e5:09:0c:bb:9e:94:
b8:ee:62:81:85:34:7f:fd:ec:ac:53:91:f5:ed:74:
82:5e:8b:0f:ff:9f:0e:bf:ee:d6:47:75:ff:a9:9f:
5b:f6:ed:da:44:ae:4b:79:bb:f5:b5:59:16:bd:41:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:FA:5C:C4:3C:0E:DE:35:75:F7:30:EB:F9:AB:17:7B:C1:C6:28
X509v3 Authority Key Identifier:
keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0a:d0:19:5a:64:34:4e:2f:7e:0c:4b:e5:c5:e8:92:5e:26:
5e:8f:74:82:e7:b6:9e:7f:6f:df:32:dd:47:31:d7:c1:90:65:
e8:4e:79:6b:4d:fb:15:99:26:45:bf:f5:78:50:6d:78:3b:e6:
52:cc:82:19:a7:38:11:4a:25:c6:20:ca:28:91:17:e9:56:9d:
1d:b7:1a:aa:56:2c:12:dc:88:99:8f:76:c0:96:6b:f5:56:2e:
e9:9f:dc:03:86:fd:42:6c:68:72:1d:52:cf:6e:fc:e8:3a:04:
30:7d:10:fe:d6:20:a1:53:79:07:e6:4f:1e:3e:ca:01:a8:93:
23:6c:14:60:a3:d4:db:f1:14:c9:8f:0c:1f:b0:84:b0:d1:30:
2a:37:60:55:99:f5:2d:4c:ed:99:fd:d4:d9:67:ba:a4:23:84:
a5:15:06:eb:65:05:fc:b6:cc:e9:ee:78:b1:84:a9:63:a4:48:
68:10:ad:dd:9b:cb:22:f1:33:0b:56:c5:aa:df:de:0c:b4:f2:
1d:92:5f:e4:de:ea:24:28:eb:53:71:ea:32:32:51:ce:8f:98:
1f:ba:73:96:cf:af:23:6a:49:36:8b:a3:4d:08:10:7e:10:db:
1f:95:22:d2:4d:06:d1:90:48:ec:d0:75:5c:fb:61:de:34:36:
09:92:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:58:06 2026 by rpki-client