
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json)
Hash identifier: 4eNz5Z0RlHjopgt1SCNB1rMQtNKgzkls//TfEBlLDJk=
Subject key identifier: D3:C9:6D:65:90:AA:F2:B7:CC:C4:9F:81:65:95:1C:B9:A8:D8:10:2D
Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Certificate serial: 4BB6DD511A58950B3CCB317A710FDF222330BD68
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 08:30:59 +0000
Manifest this update: Wed 29 Jul 2026 08:25:59 +0000
Manifest next update: Thu 30 Jul 2026 11:57:59 +0000
Files and hashes: 1: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: BmZBsqEm1cL1rONgOwHt/cIn3MIk0w6Fzl69rr2xzyU=)
2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=)
3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b6:dd:51:1a:58:95:0b:3c:cb:31:7a:71:0f:df:22:23:30:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F
Validity
Not Before: Jul 29 08:25:59 2026 GMT
Not After : Jul 30 11:57:59 2026 GMT
Subject: CN=D3C96D6590AAF2B7CCC49F8165951CB9A8D8102D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:a6:6a:38:fb:0f:8e:ef:14:95:93:a3:3f:
f8:2b:9b:bd:f9:1a:20:ee:0d:0e:5d:3a:cd:7c:e7:
ec:52:a9:c8:1e:88:72:18:3c:36:f6:ad:10:7c:53:
9b:0f:68:8d:99:92:dc:79:84:23:17:2e:77:ad:64:
48:89:64:73:25:ad:dc:ee:0d:89:f0:f4:1f:a2:15:
15:31:8d:dc:ee:4d:27:0d:33:1d:89:88:b8:7e:4d:
36:38:64:b8:fd:4e:ec:15:20:19:8e:18:42:53:8c:
39:58:44:48:5b:90:e4:21:05:7a:a2:42:8f:b2:63:
d5:89:f8:96:1a:7f:9b:77:9b:ea:cd:9a:f6:b4:bd:
0a:27:c2:74:ae:6a:26:1e:7e:9c:11:db:94:8c:32:
33:69:36:44:41:59:1e:9c:8e:ff:00:c4:85:3e:df:
a0:e2:ec:f4:e3:17:a0:7f:5e:41:d7:b9:aa:b0:6e:
41:46:8d:80:bc:40:13:00:ab:d1:2a:a4:ac:33:54:
8e:c7:b3:06:ef:28:49:d0:98:86:64:d6:32:3f:c9:
36:b5:72:a1:89:80:f0:02:51:97:c2:24:b3:f4:f9:
ff:77:e4:0d:06:db:ee:79:49:0d:61:88:fa:24:18:
82:99:10:53:3d:87:fd:db:13:ea:ab:3c:2e:bd:69:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:6D:65:90:AA:F2:B7:CC:C4:9F:81:65:95:1C:B9:A8:D8:10:2D
X509v3 Authority Key Identifier:
keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7a:ef:b6:74:07:6b:0d:9c:a3:1c:b6:33:8f:21:92:3a:64:
a8:05:47:89:9c:7a:d4:67:19:eb:00:88:81:2a:15:47:3e:35:
02:87:ba:8b:6e:4e:bf:e8:13:8e:3f:17:f2:6c:cd:b3:db:46:
b1:b2:ca:d9:b7:a0:e9:aa:fb:d0:ac:1e:df:21:29:f6:b8:3b:
b5:89:3e:70:ad:34:e8:d5:27:ee:74:ba:a3:80:08:45:35:99:
50:95:a1:2a:f9:48:24:76:e8:a1:06:e7:9f:f1:de:5e:4c:00:
89:32:c4:4d:33:6d:9d:49:8f:46:29:ac:95:41:35:07:7a:8f:
ce:0f:e3:d8:a4:56:6e:a3:60:c0:9c:40:c8:d1:80:42:7f:2c:
e7:25:91:44:47:65:43:cb:62:da:a7:9c:93:1b:b3:d1:30:3a:
4b:32:0c:cd:ba:28:ed:ba:68:b9:d5:90:61:c1:54:02:46:bb:
41:e4:a2:47:0a:1e:47:d0:71:48:b8:70:a1:80:81:fb:ab:34:
f7:bb:f1:92:13:6b:c9:a2:c0:a0:3b:37:4e:bc:df:18:0b:22:
f9:7a:61:fc:77:83:1e:d7:68:51:11:f8:59:77:0f:0a:f3:10:
00:27:60:a7:32:df:e2:cb:c9:8a:aa:21:0a:77:e1:b1:14:59:
11:4b:97:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS7bdURpYlQs8yzF6cQ/fIiMwvWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG
MTJBNEExRjAeFw0yNjA3MjkwODI1NTlaFw0yNjA3MzAxMTU3NTlaMDMxMTAvBgNV
BAMTKEQzQzk2RDY1OTBBQUYyQjdDQ0M0OUY4MTY1OTUxQ0I5QThEODEwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC326ZqOPsPju8UlZOjP/grm735
GiDuDQ5dOs185+xSqcgeiHIYPDb2rRB8U5sPaI2Zktx5hCMXLnetZEiJZHMlrdzu
DYnw9B+iFRUxjdzuTScNMx2JiLh+TTY4ZLj9TuwVIBmOGEJTjDlYREhbkOQhBXqi
Qo+yY9WJ+JYaf5t3m+rNmva0vQonwnSuaiYefpwR25SMMjNpNkRBWR6cjv8AxIU+
36Di7PTjF6B/XkHXuaqwbkFGjYC8QBMAq9EqpKwzVI7HswbvKEnQmIZk1jI/yTa1
cqGJgPACUZfCJLP0+f935A0G2+55SQ1hiPokGIKZEFM9h/3bE+qrPC69aSs7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU08ltZZCq8rfMxJ+BZZUcuajYEC0wHwYDVR0j
BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4
OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0
QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm
YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF
OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIp677Z0B2sNnKMctjOPIZI6ZKgFR4mcetRn
GesAiIEqFUc+NQKHuotuTr/oE44/F/JszbPbRrGyytm3oOmq+9CsHt8hKfa4O7WJ
PnCtNOjVJ+50uqOACEU1mVCVoSr5SCR26KEG55/x3l5MAIkyxE0zbZ1Jj0YprJVB
NQd6j84P49ikVm6jYMCcQMjRgEJ/LOclkURHZUPLYtqnnJMbs9EwOksyDM26KO26
aLnVkGHBVAJGu0HkokcKHkfQcUi4cKGAgfurNPe78ZITa8miwKA7N0683xgLIvl6
Yfx3gx7XaFER+Fl3DwrzEAAnYKcy3+LLyYqqIQp34bEUWRFLl3k=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:23 2026 by rpki-client