
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json)
Hash identifier: Yj38Z9Qsm6XyR1Mb+L3eEO6UfGlhE4idVTdO1/HPrxw=
Subject key identifier: A4:0F:E6:99:5F:6B:32:54:9F:9E:81:CB:73:8B:E6:75:0B:A2:2E:C4
Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0
Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0
Certificate serial: 4714F10B673EC468F09A09682F3A84AE87519739
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:41:16 +0000
Manifest this update: Sat 13 Jun 2026 13:36:16 +0000
Manifest next update: Sun 14 Jun 2026 14:41:16 +0000
Files and hashes: 1: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: PXQ2P4hR8MJ5pWJZEg1cEA9K/DrfN/t4LD9Xj0oZvI4=)
2: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=)
3: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=)
4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=)
5: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl
rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:14:f1:0b:67:3e:c4:68:f0:9a:09:68:2f:3a:84:ae:87:51:97:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0
Validity
Not Before: Jun 13 13:36:16 2026 GMT
Not After : Jun 14 14:41:16 2026 GMT
Subject: CN=A40FE6995F6B32549F9E81CB738BE6750BA22EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:ce:04:49:6a:c4:17:ca:7b:1a:24:a1:ee:
d8:cd:d9:42:df:1c:21:8d:a3:68:43:6a:2f:2e:ea:
a8:70:fd:04:2d:2b:f7:04:17:b5:21:8f:a4:81:92:
0b:c6:83:48:63:ac:8f:01:29:20:1e:ad:7c:50:8c:
2b:6f:0e:a8:a7:4b:0a:ff:d6:44:5e:e3:c3:f9:a5:
72:c8:42:8c:39:26:6a:dd:63:09:fe:3a:76:15:71:
01:5a:81:a6:67:35:fd:bc:3e:28:32:fb:ef:6d:11:
7d:3f:73:ed:d9:e7:52:7a:e6:7e:4c:97:2e:74:43:
81:19:4c:65:2f:ba:65:66:bf:99:1e:da:15:68:7a:
a8:5f:06:bc:a9:ed:68:5a:84:cc:90:fa:a9:fc:a4:
b1:7c:23:98:8f:ff:75:62:e4:e2:15:8d:5f:12:9d:
1f:9a:ad:09:78:b2:99:f0:0a:94:e9:1c:2c:50:18:
46:2a:fe:37:f3:4a:c2:b8:86:fa:38:5c:73:45:c1:
e7:91:00:82:82:02:6b:ae:c6:a8:57:21:98:2a:24:
36:ee:6f:51:77:e6:4c:59:0e:74:5c:56:45:11:55:
65:ee:d2:e2:79:85:1e:d7:9e:20:bf:2b:68:58:68:
c7:d3:1f:92:23:10:22:d4:3c:b3:92:cd:b0:97:7f:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:E6:99:5F:6B:32:54:9F:9E:81:CB:73:8B:E6:75:0B:A2:2E:C4
X509v3 Authority Key Identifier:
keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:71:3d:50:eb:4e:33:3d:38:ca:00:ba:fe:3f:38:24:b3:
99:58:ae:b1:86:8a:8a:2a:e5:15:38:d0:72:1e:1d:bd:72:d7:
23:9a:4e:94:50:a4:ad:82:d5:13:1b:3d:a1:72:90:3b:4f:9c:
c0:c0:45:32:ad:85:8a:ee:3e:fc:11:03:b7:82:a0:2c:92:71:
da:2f:dd:d1:3c:bd:9f:01:fe:3b:8e:76:64:cb:40:42:78:f1:
30:29:21:61:13:06:02:ba:c5:2c:73:8f:6c:58:dc:b6:c7:59:
35:f9:ba:92:e2:7f:17:3d:06:a7:9d:f5:a9:fd:ba:99:05:94:
31:3e:17:33:b5:66:e9:67:4e:6c:58:36:a0:ef:60:23:44:f3:
68:bf:ac:71:4e:1f:cf:c7:98:1c:89:59:51:76:6c:8f:f9:b2:
9a:16:c3:57:d7:01:c0:e6:c9:09:f9:76:5d:4c:a5:cd:4c:e9:
0d:8d:75:b6:08:b8:c7:dd:6a:fe:cb:21:05:9e:24:cb:30:61:
3e:6f:8e:00:05:6f:86:fd:2b:cf:6c:9b:b8:77:d6:db:ea:73:
0c:46:2a:e9:43:fa:0a:27:37:35:88:f2:8b:11:09:80:fc:e4:
94:f7:45:2d:78:d7:fe:96:4e:c2:10:86:d9:4a:52:2c:2e:0f:
ca:4c:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:35 2026 by rpki-client