
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json)
Hash identifier: TBr/bIvmxjomNVngvLGsMHCe3IjAtN5E/7V0HL+Ez08=
Subject key identifier: 70:49:6F:46:41:E4:85:DB:17:90:57:5B:36:6A:63:70:60:D8:E4:58
Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9
Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9
Certificate serial: 71D91CFC6D83FFE0D27C1996AE9F1D0FF7C4A552
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 04:34:37 +0000
Manifest this update: Sat 13 Jun 2026 04:29:37 +0000
Manifest next update: Sun 14 Jun 2026 06:09:37 +0000
Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=)
2: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: Eo3O4Ap7G13B6psvtmbUpmk1zc6+G3r2HlVJrPTY+qg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl
rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 06:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d9:1c:fc:6d:83:ff:e0:d2:7c:19:96:ae:9f:1d:0f:f7:c4:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9
Validity
Not Before: Jun 13 04:29:37 2026 GMT
Not After : Jun 14 06:09:37 2026 GMT
Subject: CN=70496F4641E485DB1790575B366A637060D8E458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:44:37:c2:9b:75:14:49:dc:cc:7b:c0:d5:
9a:7d:be:a7:d9:df:17:28:cc:37:5a:bb:56:22:77:
99:77:0f:13:dc:ed:0f:b8:d2:25:ff:02:fc:56:6a:
13:01:3a:16:b5:30:d8:8d:9a:f0:dd:f4:df:81:46:
43:c3:48:a3:ca:ea:de:4e:85:05:f4:d4:48:98:04:
ce:b1:47:04:48:f9:9c:b6:75:af:74:6f:0d:67:83:
f5:65:a0:26:4b:33:46:d6:3d:50:bf:c1:6f:ea:3b:
b7:18:4d:1c:8e:94:3f:ae:9a:bd:d7:32:bf:5d:bc:
7c:94:a0:37:37:23:fe:0e:29:7b:22:45:41:77:7b:
d4:42:74:2f:74:91:ee:c9:5d:39:0b:f6:02:38:93:
08:03:33:3b:c5:0a:d9:bb:24:51:7c:3b:b0:67:bf:
70:ab:da:e1:ad:8d:e6:8b:87:f5:eb:a8:62:44:9d:
af:58:1c:62:ab:c8:ee:57:d4:c5:e3:aa:2c:1c:7b:
0a:46:40:ef:d7:f7:89:3d:05:cf:93:27:9e:c6:e0:
d9:6c:fa:8a:58:f8:5a:a9:24:4a:78:db:00:d7:bf:
81:21:84:dc:50:b1:37:6b:af:30:34:30:63:d6:42:
82:7a:6e:82:1a:73:02:88:f8:24:0a:87:0e:1b:08:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:6F:46:41:E4:85:DB:17:90:57:5B:36:6A:63:70:60:D8:E4:58
X509v3 Authority Key Identifier:
keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a4:9f:ed:6c:43:59:07:fd:34:0c:05:db:fd:a5:48:5f:2b:
f5:aa:ff:00:c0:4d:d2:03:11:c3:eb:90:fd:53:f0:b5:e1:d7:
d6:18:54:a1:fa:a9:d1:e2:34:32:39:4f:60:11:d6:2d:ee:8d:
8e:62:03:74:ec:2f:0d:ca:6e:39:a1:01:19:f3:99:d8:1c:ba:
85:cf:9e:78:14:7f:d7:a3:dc:8f:e7:23:10:9f:1f:52:f1:be:
55:85:67:cc:eb:aa:e6:5b:75:5c:58:7d:c3:cb:61:a9:3d:21:
da:67:bc:f3:e2:b0:01:e8:75:8b:40:3a:fb:28:02:a2:c6:8f:
4e:71:8d:ed:c2:d9:44:3a:5a:e4:59:b5:66:82:aa:e8:4a:41:
55:b8:19:63:60:c0:45:a3:a7:be:9e:a4:7b:4f:c5:23:33:c5:
92:ec:4c:a8:0b:ae:a3:64:00:0f:00:6d:8f:d8:72:93:ca:d2:
58:96:e7:60:2b:06:b0:5e:89:f4:39:c7:9c:3b:68:21:35:78:
f2:d5:5e:67:37:ac:9f:5f:0a:2b:80:ff:bd:d1:49:63:2c:3b:
7e:d7:d3:5e:b3:95:f3:f7:50:cd:15:b0:2b:e6:2e:ab:51:24:
b1:66:cf:7f:eb:99:f8:42:67:cb:78:cd:2b:8a:11:76:96:ad:
55:f0:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:57 2026 by rpki-client