
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json)
Hash identifier: YXdzu3EORNPNp8/b4cM8NsnC8bFzFyPyJvGN/TOWg10=
Subject key identifier: EC:7B:D6:6E:7A:FC:D1:98:C9:A9:F0:D9:0C:90:13:A7:D3:0A:FC:ED
Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585
Certificate serial: 56EAB36D8E6FF17238A4DE465F984AF555D421F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 04:42:17 +0000
Manifest this update: Tue 22 Sep 2026 04:37:17 +0000
Manifest next update: Wed 23 Sep 2026 06:57:17 +0000
Files and hashes: 1: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: hMsrml1/iQtFDbSDmjMt3XLG93ju7DjMN1fTxKFuYY8=)
2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 06:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ea:b3:6d:8e:6f:f1:72:38:a4:de:46:5f:98:4a:f5:55:d4:21:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585
Validity
Not Before: Sep 22 04:37:17 2026 GMT
Not After : Sep 23 06:57:17 2026 GMT
Subject: CN=EC7BD66E7AFCD198C9A9F0D90C9013A7D30AFCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:64:7e:9a:ba:d2:e2:f9:b5:21:80:c6:98:
76:00:d6:c7:aa:70:f7:fa:8d:a9:0d:da:c0:29:a4:
f6:78:43:97:07:f4:82:28:d9:c6:51:e9:a0:99:a9:
d2:e0:fd:8d:9f:33:e1:1a:64:2c:0f:ac:c6:c9:d9:
fa:5d:10:d7:e0:e7:d6:b7:e6:32:0c:8e:a6:03:a0:
d8:54:cc:ba:3d:dc:d2:15:d3:c0:fe:1f:a2:3d:03:
be:2c:51:e3:bd:db:c9:51:6b:ba:23:0b:34:8d:e8:
d8:50:9e:d4:f3:00:d5:f8:eb:d2:9d:26:6e:57:92:
a9:33:8e:e6:09:d6:96:fb:1c:de:08:37:2c:6d:b5:
c8:40:ab:89:72:00:89:15:91:6b:4e:65:76:0e:67:
7c:bc:68:c2:34:ef:64:61:62:da:5a:27:6b:ec:48:
7b:ee:0c:4d:e2:d4:2b:06:93:6b:07:7e:57:1e:ba:
88:cf:ee:fa:95:cd:cb:55:93:9d:51:77:24:5a:da:
60:50:24:e3:76:ad:22:16:1a:3d:e1:b3:ca:e4:a5:
06:ef:fd:f0:8e:a0:4c:91:87:8d:a7:0c:7c:78:32:
42:96:a1:4a:c5:49:3a:ce:7b:52:c3:40:0f:37:95:
2b:32:ca:a0:79:ed:25:3d:b5:0d:e4:da:19:0e:6c:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:D6:6E:7A:FC:D1:98:C9:A9:F0:D9:0C:90:13:A7:D3:0A:FC:ED
X509v3 Authority Key Identifier:
keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:52:b2:b3:92:17:79:9e:26:f0:b5:b8:e4:75:5b:f9:fb:
47:08:fc:6d:9b:e4:92:f2:c0:92:2f:18:d7:d1:72:58:dc:5b:
a8:a1:a2:50:82:07:69:d3:0b:45:f6:24:f8:a6:9a:61:7f:0b:
7d:32:c4:75:a2:81:ff:7b:d0:0b:d0:58:8c:54:aa:0f:be:1a:
02:89:85:ff:17:4c:e7:31:f0:e7:e6:3d:f2:f0:ff:2d:74:d2:
5a:2f:d7:88:89:96:42:f9:0a:ce:93:32:bf:ea:58:d7:1e:0c:
48:10:2c:af:f2:5c:2a:f8:81:a6:a6:0c:5b:d3:fc:d4:44:95:
20:41:62:22:d6:e5:a6:1f:d9:f3:16:7f:35:da:96:0d:28:38:
b2:1c:de:aa:39:74:4b:db:4f:31:58:2c:e5:a9:57:da:57:c8:
05:29:e6:a4:4f:c8:e0:69:54:d0:b7:64:55:95:df:1e:79:8c:
5a:aa:15:98:93:70:ed:0b:27:61:0a:e8:4c:63:5d:e4:9b:46:
cb:2d:95:32:8a:ba:84:00:bf:f3:56:3e:2d:b8:12:49:6b:25:
52:49:3f:ab:e9:84:63:d3:2a:e5:80:0a:71:09:8e:75:7c:95:
5b:14:8a:46:a2:5e:30:2c:1b:17:ea:04:06:c6:d7:3a:a9:b6:
4b:87:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:11 2026 by rpki-client