
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft
File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json)
Hash identifier: TrCGOdrIJAZeU8GxLQeBYc11O4+p/owRvqeXFHEfoy8=
Subject key identifier: 0E:B9:60:F3:29:9E:5A:31:BD:BF:AF:92:E6:51:CC:52:C2:60:07:01
Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03
Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03
Certificate serial: 275CCD9D136BE9D32F043D8F8406FCFA46DB5941
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 21:58:48 +0000
Manifest this update: Tue 28 Jul 2026 21:53:48 +0000
Manifest next update: Thu 30 Jul 2026 00:37:48 +0000
Files and hashes: 1: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=)
2: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=)
3: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: k1nIKdKMFh6K09Oqxv+8Ekpl9wSrT6lETEhqyr4xk7k=)
4: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=)
5: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=)
6: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=)
7: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl
rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5c:cd:9d:13:6b:e9:d3:2f:04:3d:8f:84:06:fc:fa:46:db:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03
Validity
Not Before: Jul 28 21:53:48 2026 GMT
Not After : Jul 30 00:37:48 2026 GMT
Subject: CN=0EB960F3299E5A31BDBFAF92E651CC52C2600701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:2a:5c:41:a2:81:ad:2d:95:1d:0a:5d:8f:
d5:0e:59:2f:08:25:61:ef:0f:a1:36:ad:60:58:4d:
85:9e:2b:17:9b:00:a7:0a:27:13:72:39:e2:b1:ea:
f2:f4:0d:ab:f8:c0:a5:7f:a8:51:db:71:f1:ae:f7:
72:e7:81:71:76:a7:92:bf:0e:3f:64:41:3b:b8:18:
26:3c:4e:c6:90:00:fd:57:63:33:6d:11:d0:00:89:
f5:a4:7a:0b:85:fe:81:ae:9e:80:1f:12:bc:d0:82:
f8:11:0a:1d:82:d1:e9:4a:00:6a:5b:86:c2:2a:28:
fe:60:59:d7:ee:a3:09:cf:88:61:f6:51:69:ad:ff:
6b:46:61:9c:ba:b1:64:83:6b:d9:28:0f:f5:6e:9e:
2d:be:72:9c:dc:91:79:74:3a:9f:cc:e0:3b:6d:2b:
99:7e:90:e5:c2:8f:2c:25:79:8f:69:29:59:39:85:
df:1f:2c:21:77:3c:35:67:79:bc:09:f9:85:7a:8f:
b2:a3:b2:7a:88:ad:87:93:cf:60:e0:d9:55:42:4b:
1a:d7:3b:57:2d:ba:6f:85:55:22:75:bd:c1:ce:a5:
51:56:bc:4e:76:26:1c:c2:73:90:a1:de:f0:31:9d:
8c:55:77:c1:9b:a0:5a:74:cb:f6:1b:d0:84:2a:ce:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:60:F3:29:9E:5A:31:BD:BF:AF:92:E6:51:CC:52:C2:60:07:01
X509v3 Authority Key Identifier:
keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:00:56:c7:b7:c6:39:76:0c:97:13:17:04:cd:21:b0:d3:e2:
1c:39:7f:a1:6f:f6:68:09:af:ba:dd:e8:58:c1:6c:44:d2:6d:
03:75:f6:9b:ac:70:a4:6d:62:6c:9d:76:5f:a1:a2:75:d6:0b:
81:08:f1:67:bf:fd:e4:46:5a:cc:01:ac:40:ee:93:fd:63:07:
07:55:64:49:6f:81:1b:a5:5b:10:a8:ca:4b:08:90:d4:9b:2b:
b1:dc:d7:5f:c5:91:29:a8:03:11:c1:17:82:79:0e:6c:ab:bf:
03:8b:53:5e:8c:79:34:18:5a:1a:64:e7:6c:41:87:ce:ec:0f:
70:40:98:3a:2b:b8:d6:88:2d:6a:a0:8a:b2:d1:ae:4c:4e:9f:
7c:65:3c:85:e6:89:ea:2b:cb:2e:2d:0f:e0:52:6d:ac:93:33:
68:66:f2:9c:6c:97:e6:85:aa:2d:27:f9:19:b7:7f:da:a8:c6:
b0:8f:6c:de:8b:5b:e0:b0:ca:1f:97:44:84:c6:6a:30:a7:12:
74:b4:d2:9c:2d:9d:37:65:db:e5:5f:7c:3c:5e:f0:88:1a:f6:
98:e5:f1:37:f6:6d:16:ae:60:59:e4:af:e8:8f:48:20:e8:db:
cd:fe:a6:c7:b2:85:e9:1d:03:ae:24:7a:b3:cf:3d:b8:fe:d7:
49:3b:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:14 2026 by rpki-client