
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
File: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft (raw, json)
Hash identifier: XUrVxTUeEWkKAI58ygElqYQYh68kmlTTI09+EIWAvY8=
Subject key identifier: 83:63:9A:61:AF:2E:51:84:F6:D9:B7:0A:F2:F8:44:C7:48:17:68:FE
Authority key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31
Certificate issuer: /CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
Certificate serial: 7D1BD7ACDB99F1D07B855EA64D268EBCD9044104
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 07:15:37 +0000
Manifest this update: Mon 21 Sep 2026 07:10:37 +0000
Manifest next update: Tue 22 Sep 2026 09:56:37 +0000
Files and hashes: 1: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl (hash: efnwgTk8dEmOYLVANkybGrj/Vy+NryHVJAWKpws1A5I=)
2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: orsjKTV02O8TMgWpMnovRo4VVZwRW9a2U4tEzVvr014=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl
rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1b:d7:ac:db:99:f1:d0:7b:85:5e:a6:4d:26:8e:bc:d9:04:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831
Validity
Not Before: Sep 21 07:10:37 2026 GMT
Not After : Sep 22 09:56:37 2026 GMT
Subject: CN=83639A61AF2E5184F6D9B70AF2F844C7481768FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:fa:9c:7c:a7:70:66:a8:8f:b2:71:83:de:
96:16:b8:dc:cc:b8:7f:8a:12:23:64:3b:78:81:f3:
cd:54:13:a0:9e:34:b2:87:ee:8a:63:87:3e:42:ec:
4b:ba:ea:1b:b0:51:4f:8f:0e:36:5e:09:34:8a:8f:
f5:27:cc:e6:04:b1:dd:56:78:0a:03:ba:ee:b8:15:
2f:14:b8:5e:6f:e0:82:b6:71:7f:50:8e:4d:ed:cb:
de:2a:b9:cd:31:93:6b:a5:c3:f2:cf:39:f1:37:d9:
bf:dd:b5:38:a7:62:eb:9d:ad:90:18:2b:3f:4a:57:
1f:cf:52:58:8a:7e:0a:8b:f2:d5:a0:89:bd:54:b4:
a3:db:4d:dd:fa:a5:1a:45:07:c3:59:49:d5:d4:c8:
44:82:16:5e:a2:f7:f1:01:9e:47:68:aa:04:58:6b:
59:1a:67:9f:e1:2d:9c:6d:92:6c:db:b5:07:6d:1b:
52:8e:9b:79:fc:4f:2f:a6:07:ad:1b:e0:3a:25:7b:
1a:de:2f:3f:ec:77:62:6b:e6:9c:0b:83:e7:cb:24:
18:83:66:b0:b3:fb:45:2c:17:f3:9b:9d:e7:22:a8:
01:1b:72:24:1e:a0:8f:64:aa:8d:35:ce:36:f2:6a:
a7:26:3b:b0:19:80:0f:be:66:f3:75:5f:bc:c5:a4:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:9A:61:AF:2E:51:84:F6:D9:B7:0A:F2:F8:44:C7:48:17:68:FE
X509v3 Authority Key Identifier:
keyid:FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5e:4b:ed:fc:dd:53:d5:6c:7a:4c:8b:de:ba:65:cf:31:9c:
61:78:cd:83:c8:5e:b0:12:94:c3:55:90:35:58:fc:da:16:9d:
69:ab:f6:55:c8:a7:93:c7:59:55:12:9b:aa:b3:da:55:04:b3:
05:71:84:44:35:9d:5c:0c:ad:33:8e:28:5c:f0:4b:65:91:18:
7f:de:30:69:88:99:da:31:02:45:ca:24:5b:a2:6e:5e:40:ff:
06:5d:0e:6d:34:ab:6c:5a:a7:1e:bf:e0:ea:89:ee:b1:91:13:
9b:33:f5:a8:81:64:92:f5:55:a7:28:67:53:9b:54:eb:11:7a:
89:0f:95:40:89:5b:a1:bb:78:38:d4:e0:d4:b1:76:53:c0:31:
98:9f:60:ea:56:e8:97:66:6c:12:3f:dd:62:3b:70:16:fc:cf:
25:5e:11:a7:2a:e3:89:40:28:a8:1d:4d:03:1b:cb:53:bf:b1:
fd:00:1d:9f:80:87:84:9a:5a:8c:c8:42:ab:b0:d8:c4:fc:67:
2e:59:0f:1c:a2:cd:d0:27:1a:23:f1:35:78:ab:7e:64:d8:ae:
23:13:da:d5:ee:25:02:f2:bc:ab:f5:d6:32:ac:31:02:25:5c:
83:8b:1c:59:53:3f:67:d6:84:76:91:39:9f:7c:d4:49:b6:8b:
91:bd:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:21 2026 by rpki-client