
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
File: F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft (raw, json)
Hash identifier: OyX0Dyzm5lDxxNasKMAD/19fz2XqKwyYLumo6qXcNRk=
Subject key identifier: 55:F0:FE:A1:E2:01:4F:1C:04:F2:E1:B6:68:57:2A:F7:ED:22:04:BF
Authority key identifier: F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0
Certificate issuer: /CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
Certificate serial: 439DDE6C6DF86BD0855EBB3A7178BBA402A65677
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 07:20:37 +0000
Manifest this update: Tue 22 Sep 2026 07:15:37 +0000
Manifest next update: Wed 23 Sep 2026 08:39:37 +0000
Files and hashes: 1: F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl (hash: CDAb5itECG/eJvn9AhrThaodkeJMUM0jh09Bpyd5fuY=)
2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: lNGCOSIBuAHlgUExePnnpcuCF0p2D0MmHxxD31gMyhA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl
rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 08:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9d:de:6c:6d:f8:6b:d0:85:5e:bb:3a:71:78:bb:a4:02:a6:56:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F26C4BD5CBD720EC58B924F31F948F8D29D836C0
Validity
Not Before: Sep 22 07:15:37 2026 GMT
Not After : Sep 23 08:39:37 2026 GMT
Subject: CN=55F0FEA1E2014F1C04F2E1B668572AF7ED2204BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:17:1a:03:9d:08:e0:6f:7e:71:6a:6c:19:
d2:e9:2f:d5:28:6e:3f:f8:3d:e6:b1:15:9f:40:4f:
65:86:fa:d4:87:0e:86:56:22:0c:b8:e9:cb:11:1e:
5a:db:6e:b9:64:24:42:f5:b8:47:51:ec:94:2b:d5:
c2:88:e5:4c:82:6b:cb:4b:70:8c:53:b6:dd:a0:7c:
cf:4d:14:46:6a:c2:c8:94:23:37:db:e5:1e:2f:86:
f5:a7:f9:ba:ec:7f:5f:c7:b4:d8:e9:be:87:ae:aa:
fe:11:f1:0e:79:a8:16:96:8e:a4:9c:16:65:9e:73:
2f:90:f3:ff:67:8b:67:c5:0b:f6:35:cb:e6:bf:f6:
36:bb:d2:63:b4:25:23:43:82:78:ad:88:73:b5:eb:
38:c0:0d:39:10:f8:e7:af:95:03:d3:34:f5:64:d5:
0a:d1:ce:15:be:a0:c0:8c:87:d1:1f:04:76:6a:d1:
af:f3:c4:1f:04:de:a0:5b:ac:f5:b4:9b:ec:37:36:
45:f9:0b:de:3a:cb:38:95:19:a7:da:8b:30:b7:e9:
38:7f:67:b2:f2:e8:6d:e5:8f:4d:d3:c2:0f:f1:35:
35:5f:77:13:87:9b:a9:0f:26:9a:a6:3e:91:a9:17:
44:90:4c:07:fb:94:d4:13:00:a8:31:ed:3d:75:70:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:FE:A1:E2:01:4F:1C:04:F2:E1:B6:68:57:2A:F7:ED:22:04:BF
X509v3 Authority Key Identifier:
keyid:F2:6C:4B:D5:CB:D7:20:EC:58:B9:24:F3:1F:94:8F:8D:29:D8:36:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/F26C4BD5CBD720EC58B924F31F948F8D29D836C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:66:87:25:67:bd:16:d8:35:56:26:ff:5d:b8:42:10:15:0b:
fa:37:ce:4a:1f:ae:5d:42:18:14:99:ad:df:d4:81:40:e2:e7:
8e:05:4d:2b:d7:92:ad:7e:a8:c7:eb:63:52:7a:f9:12:ec:7b:
b2:23:a0:6f:69:34:c2:10:c5:e1:fa:b1:29:3d:bd:2f:f5:10:
91:6e:8b:fc:f0:a2:ab:46:11:69:1a:99:76:a6:40:a5:83:42:
45:d1:31:f0:7e:60:8c:ed:1a:8b:69:82:7d:94:c6:a6:91:de:
53:95:36:c3:e7:bb:81:a0:d4:e1:0f:4b:75:eb:b7:9b:f7:5c:
9a:c1:90:a2:87:80:f3:32:ff:78:28:50:c8:88:72:83:d6:97:
2f:28:4b:b6:71:d3:05:4d:64:4b:d9:ff:41:c6:6e:c9:64:22:
72:9c:89:ba:6b:e8:70:78:a3:b3:58:b4:ea:a7:fd:15:51:be:
bb:a9:d9:28:98:ac:f2:6e:80:45:09:45:bf:b4:38:2f:dc:15:
1c:3c:98:4c:7f:5d:16:6a:69:f9:30:17:ac:aa:95:e4:43:ea:
ae:d9:c7:74:34:ca:12:ca:c1:65:05:df:12:8a:d7:98:45:04:
69:6d:b4:4f:fe:1d:fc:12:c8:fb:81:2b:2c:dd:25:37:73:d5:
17:26:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:09:45 2026 by rpki-client