
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json)
Hash identifier: L8Cjd5yjwcKZpMi76k9HKF8Wg1OWcnLTSuBNFzKOVCM=
Subject key identifier: 22:65:E4:84:2B:18:A7:4E:59:9A:DF:6E:69:FB:31:37:6D:6E:FF:8C
Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Certificate serial: 5D29250033160EC0CA87363D10CF01047D7F7D4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 06:35:44 +0000
Manifest this update: Sun 14 Jun 2026 06:30:44 +0000
Manifest next update: Mon 15 Jun 2026 09:01:44 +0000
Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=)
2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=)
3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=)
4: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: Nrgn6Lw7GIF9RhylNy38ngOV8QL50dvWIefjbT0396c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 08:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:29:25:00:33:16:0e:c0:ca:87:36:3d:10:cf:01:04:7d:7f:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Validity
Not Before: Jun 14 06:30:44 2026 GMT
Not After : Jun 15 09:01:44 2026 GMT
Subject: CN=2265E4842B18A74E599ADF6E69FB31376D6EFF8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:89:5d:6b:a9:24:1a:5b:b8:99:55:de:c1:
f8:4f:53:c9:a8:df:73:f2:69:49:08:e5:4d:6a:6c:
e3:74:a4:2c:dd:3d:f5:79:23:69:42:6f:b9:b0:1b:
48:ec:78:21:29:c6:b5:1d:74:ea:15:b5:6a:26:1c:
30:c9:1c:de:cb:7b:a9:e8:2e:4b:34:e1:bb:61:96:
12:66:41:bb:b9:a7:97:07:75:8d:82:43:5b:51:bf:
01:f4:df:c0:28:7a:2e:11:f6:b1:d5:f9:72:69:3c:
6d:ab:8c:84:59:dd:5f:d2:12:68:fa:82:fd:53:3f:
b2:bf:d8:df:c5:8b:97:ff:39:f1:ba:18:d3:7e:54:
b2:e8:e4:d4:4b:48:8e:2f:68:75:6c:d0:e8:cb:ab:
06:81:d7:6c:a0:59:ce:f2:28:7f:4e:40:c7:63:ac:
88:b5:d0:47:90:2f:7d:de:3a:e8:dd:6e:60:cc:19:
68:a4:58:ec:e0:bf:c3:9d:8b:90:5b:6d:c6:03:d6:
0b:d7:4e:03:a0:19:35:aa:a7:42:8e:08:48:bc:3d:
8e:47:5c:6a:1f:0a:cd:08:07:8f:65:69:d8:b9:d1:
8b:4b:44:b3:fc:28:5e:ce:43:75:86:ad:59:d6:6a:
fe:ec:aa:71:72:42:0e:85:9b:bc:a3:b1:9e:4e:16:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:E4:84:2B:18:A7:4E:59:9A:DF:6E:69:FB:31:37:6D:6E:FF:8C
X509v3 Authority Key Identifier:
keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:08:19:76:91:49:ad:6b:5b:93:e0:46:cc:e0:4f:ad:25:
21:75:29:12:fe:08:cc:34:3d:51:52:9c:dc:17:73:ed:7b:69:
9e:00:d0:54:86:22:2c:9d:aa:b2:2b:86:19:35:c5:54:bf:ec:
fa:27:5e:09:2b:e0:fc:07:6e:a6:00:f3:b3:f8:ce:e5:9e:78:
41:2e:7f:3e:6b:82:06:c7:27:d2:17:ae:b8:b4:94:f6:8e:35:
4a:27:b5:14:26:40:95:f7:42:51:59:55:69:ed:cf:b8:bd:37:
2c:4a:50:4f:14:f3:ee:a5:42:4c:5a:e2:75:50:3c:b6:6d:82:
85:e5:a5:59:61:de:5e:2b:ad:00:29:06:a0:e1:a3:a9:11:da:
65:e6:19:77:cd:68:45:d7:71:34:ae:b1:bb:e7:cb:f1:9c:35:
d6:ab:7a:3e:19:cd:dc:03:a5:61:52:7f:b8:24:09:83:a0:70:
32:1d:32:d1:61:64:de:5a:fe:d5:62:26:bd:2f:2f:55:c5:3d:
d3:6c:08:60:0a:f1:63:2a:23:8b:57:ab:b1:df:33:d5:14:9c:
10:60:c6:97:e6:c5:fb:b3:b6:85:4a:ea:15:f7:97:62:15:fc:
50:86:d6:5a:83:ce:ca:97:fd:6d:59:d3:5b:02:fb:3a:ff:17:
4d:bc:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:22:02 2026 by rpki-client