
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json)
Hash identifier: naguQk+TsC2eUtsfvliewlRI9mKXY3LEoqvxTYDRqj8=
Subject key identifier: 7B:53:BF:99:C0:92:06:26:76:2B:2C:B3:B4:9B:4E:41:4A:D1:5B:8B
Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Certificate serial: 72940AFAE709315B04F1BA413B117989660551C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 23:02:00 +0000
Manifest this update: Sat 13 Jun 2026 22:57:00 +0000
Manifest next update: Mon 15 Jun 2026 01:24:00 +0000
Files and hashes: 1: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: 41xJR+ptDUTxFmNNFPWhcyJWcTSWYiHxkgdcYbnPWE4=)
2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=)
3: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=)
4: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=)
5: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=)
6: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:94:0a:fa:e7:09:31:5b:04:f1:ba:41:3b:11:79:89:66:05:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C
Validity
Not Before: Jun 13 22:57:00 2026 GMT
Not After : Jun 15 01:24:00 2026 GMT
Subject: CN=7B53BF99C0920626762B2CB3B49B4E414AD15B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:39:cd:52:ee:a7:6e:6d:49:91:74:b2:8e:
ec:f3:08:90:db:40:f8:8b:8f:c3:08:9c:63:d0:35:
4d:13:d2:21:99:b5:cd:bc:bf:3b:a9:ac:b0:75:e4:
b1:b0:1a:e2:7c:00:52:17:2e:79:67:76:70:cf:ff:
03:dd:19:77:57:36:00:0f:54:ae:7c:34:d1:1d:e7:
23:7f:d6:b1:90:0a:87:70:89:fd:06:06:34:97:15:
33:97:06:ad:25:2a:bf:0f:bb:c2:79:a3:e5:59:a3:
95:d8:e3:dc:84:5e:5b:ba:c2:e9:bd:a9:5b:55:02:
77:3b:0f:b8:8a:83:71:e6:fb:d3:82:f1:59:64:12:
90:a7:61:c0:53:95:b1:02:98:d9:8f:f8:e0:59:15:
9b:d7:43:96:d1:a5:e6:10:5c:0b:7c:92:27:c8:9c:
8a:2a:c2:3c:42:a1:06:ad:a5:22:3e:30:24:f6:6a:
bc:bd:54:cb:12:f3:86:0e:b6:f6:86:48:e3:fa:3f:
79:d4:53:83:55:8a:c2:29:92:97:c5:f7:ea:27:91:
ed:8a:d2:b4:ea:81:6d:3e:92:45:93:f6:17:8f:b9:
bc:0f:e3:9e:c2:4c:60:ca:67:cb:06:53:78:3d:80:
e0:ce:a4:c7:40:c6:bb:d6:11:07:51:c3:e4:9e:c9:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:BF:99:C0:92:06:26:76:2B:2C:B3:B4:9B:4E:41:4A:D1:5B:8B
X509v3 Authority Key Identifier:
keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3f:17:1a:73:c9:20:c4:df:f2:0f:13:7b:fe:9a:cc:97:03:
49:ca:e4:74:3e:c1:93:4d:04:ba:4b:ee:c7:53:ff:57:99:10:
16:fc:2c:dd:e9:21:34:e4:fb:b3:13:b1:b1:e8:16:45:98:dd:
96:7d:fe:5e:ed:2d:93:77:a5:9a:19:93:cc:a1:7e:cc:27:93:
ca:92:b6:18:41:32:37:e3:b8:69:95:45:47:16:80:aa:a4:e3:
ab:fd:aa:76:40:45:18:e7:9b:b8:3d:04:9b:05:dc:ad:3b:3f:
01:4e:03:e4:bd:e2:f4:75:d8:37:0a:b0:c6:08:e4:36:4b:4f:
65:a5:ca:6c:4a:81:45:f1:8c:bc:26:de:47:84:16:ac:32:c7:
cc:6a:ce:58:f6:65:95:0a:d7:71:99:19:b9:da:00:e1:61:b7:
7c:30:9d:59:1f:a8:2d:7e:31:69:ef:56:97:41:4c:df:61:e3:
d2:a5:ab:f7:f6:d1:d4:37:7d:f2:f3:d5:df:f6:bd:0d:67:05:
c2:ed:14:77:03:86:15:be:1c:f9:3a:21:19:0b:7a:b7:ee:23:
ff:7e:c3:4b:70:52:95:17:33:a3:71:e2:cc:b1:81:1a:80:c5:
9a:9f:e7:82:12:92:57:00:d3:ef:db:01:28:80:3c:c9:74:67:
b4:11:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:00 2026 by rpki-client