
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft
File: FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft (raw, json)
Hash identifier: ko6A2jQnyzLeysE16iYT3wVCDBoyCibj70i5u2MAqCQ=
Subject key identifier: 9D:62:79:AF:3E:4B:5D:A8:2E:68:43:31:00:BC:0D:CA:F8:71:87:BC
Authority key identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A
Certificate issuer: /CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A
Certificate serial: 05EB9E03B814A577163F132D0223C79543D9336A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 05:33:20 +0000
Manifest this update: Tue 22 Sep 2026 05:28:20 +0000
Manifest next update: Wed 23 Sep 2026 06:36:20 +0000
Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: uy/OITxgQ9Y741d8HOaHJYXKJTvlD+OGefENVoqqTDs=)
2: FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl (hash: DI6dFbk8CffWV3dSD6wnZwxuSN/nNfjUE5GWdNu8nLs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl
rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 06:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:eb:9e:03:b8:14:a5:77:16:3f:13:2d:02:23:c7:95:43:d9:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A
Validity
Not Before: Sep 22 05:28:20 2026 GMT
Not After : Sep 23 06:36:20 2026 GMT
Subject: CN=9D6279AF3E4B5DA82E68433100BC0DCAF87187BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:4b:65:e8:61:c9:84:ce:08:e8:65:77:90:
00:58:ee:b2:a4:5c:31:18:89:8f:7d:0d:b7:1c:ed:
b9:69:14:76:6c:ba:3d:cf:db:41:5a:9a:5d:e1:87:
e9:70:17:1f:b8:f4:78:83:65:fb:0a:54:80:93:57:
be:9c:8b:40:b3:12:3c:91:95:2b:76:9c:88:06:91:
b8:78:2e:2a:c5:59:ee:b7:92:ac:06:60:3f:7c:1f:
5c:d8:f6:81:f2:3e:ec:1f:7c:f4:a8:dd:fa:78:50:
e7:0c:84:80:59:0e:b2:4e:b1:3d:11:19:61:b2:38:
fe:d1:e8:d7:39:9b:fc:26:1b:93:35:1c:ab:c0:1a:
eb:46:29:aa:04:ce:cf:18:19:e3:47:bd:9c:06:bd:
13:3e:0f:98:23:eb:9d:23:94:40:6b:88:58:10:a5:
77:cb:3b:da:df:75:c7:23:b2:8f:6b:95:77:f6:79:
a2:06:c0:3d:11:b1:a4:8b:d9:3b:8b:eb:7c:8a:2a:
f2:e8:40:ee:8a:fc:11:57:2a:03:d0:79:57:f7:be:
d9:b8:86:2b:0e:15:68:98:e7:12:c6:e9:71:ab:11:
89:8f:44:97:16:11:79:46:30:68:99:9a:70:71:1d:
a1:0a:2f:55:3c:ad:0d:b8:63:01:0d:79:a5:85:4c:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:79:AF:3E:4B:5D:A8:2E:68:43:31:00:BC:0D:CA:F8:71:87:BC
X509v3 Authority Key Identifier:
keyid:FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b4:3f:2f:31:f4:05:e7:43:81:1f:37:7e:64:fa:df:53:2c:
89:30:e4:e2:92:19:4b:2c:5b:5d:c0:0d:f8:ba:99:8c:12:ef:
6b:6a:bd:56:ec:25:18:7b:6c:b8:75:dc:b6:39:d4:1c:e7:cd:
6b:9a:f2:81:82:0f:82:ec:fb:4e:ca:e2:67:f1:9c:d7:48:b6:
19:39:b9:75:3a:63:2c:73:9b:90:4e:c1:d8:b3:60:64:ea:97:
94:8e:6b:a1:00:fc:6f:b3:02:0b:96:de:a3:f4:52:f4:13:30:
73:83:f6:cb:a7:e0:5a:25:03:1e:88:99:eb:39:a9:22:3a:cd:
94:96:39:c0:1c:d4:f9:dd:91:34:d4:96:c6:1e:34:e0:34:a8:
e6:91:b8:b5:8b:cd:16:1e:9f:2e:5e:f3:b6:e4:3f:19:f7:14:
db:6b:aa:7e:00:75:dc:1a:c5:d7:1d:6d:f9:e3:d7:e3:0d:db:
0a:4c:64:ba:a1:6b:17:94:f8:48:10:3f:90:3a:02:72:c2:c3:
2b:85:4d:16:ac:d6:85:ac:80:ac:2a:df:11:16:81:7d:4e:f6:
d8:75:c8:e3:6b:4d:d1:2c:10:6e:ea:41:14:ae:81:20:39:48:
21:15:3b:4e:fd:bb:37:9c:97:7e:6f:14:b2:8f:87:40:1c:5d:
1f:6d:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:11:17 2026 by rpki-client