
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
File: F61E58FCC6D4559C492BFFF073AB6554159EC504.mft (raw, json)
Hash identifier: eLojtR4xDOETQGgaexmS6zeu9z/4FdicsypAbY0VgaQ=
Subject key identifier: 91:D0:F3:20:F1:94:76:41:B6:03:A4:B0:0E:4F:91:B8:59:6B:92:3B
Authority key identifier: F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
Certificate issuer: /CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Certificate serial: 7437F6BEB7ADE7A732D71DD0F5F20F2CB7B1708A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
Manifest number: C1
Signing time: Tue 22 Sep 2026 12:21:44 +0000
Manifest this update: Tue 22 Sep 2026 12:16:44 +0000
Manifest next update: Wed 23 Sep 2026 15:17:44 +0000
Files and hashes: 1: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: kssfnlpAB1OQmZ715lIx7uPup/hz2bO9skTCzQ2xYmA=)
2: F61E58FCC6D4559C492BFFF073AB6554159EC504.crl (hash: TNKo5W7+OkE1V+yGaILFPMHsTUh0NzA2V2pJsblsToU=)
3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: Dpdk8MfWlRQEOEZAi8lS8pCq2Bc8tMz+ha8BRElC1x4=)
4: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: yzrCg9e2bVI74Cf6hVKk+pz4lmu1wzbAEJcextf20no=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:37:f6:be:b7:ad:e7:a7:32:d7:1d:d0:f5:f2:0f:2c:b7:b1:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F61E58FCC6D4559C492BFFF073AB6554159EC504
Validity
Not Before: Sep 22 12:16:44 2026 GMT
Not After : Sep 23 15:17:44 2026 GMT
Subject: CN=91D0F320F1947641B603A4B00E4F91B8596B923B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:a3:d4:3b:ac:f2:ec:19:2b:82:d7:cf:ea:
b3:8b:f2:20:b1:b7:59:3b:05:be:93:30:f3:6b:7a:
12:02:de:47:bc:2d:1d:ba:58:9f:d8:8b:40:3e:11:
26:6a:39:ca:a0:97:a1:25:30:ab:ed:5b:d5:f1:69:
14:d8:ad:67:a6:6b:f0:18:2b:16:7e:f7:96:18:30:
c0:18:1f:8e:a9:e5:ce:fd:54:59:3c:2c:89:93:5f:
f1:f1:3b:47:ee:85:3e:66:1f:16:c9:75:58:e3:d9:
27:5a:65:b1:3b:5f:02:b4:0f:15:45:43:f0:7d:d1:
66:e5:f6:c3:3b:2b:2c:95:85:e3:1f:6a:c6:c6:75:
70:3f:71:df:ff:e1:af:79:68:45:6e:a3:ce:72:be:
0f:5a:1e:ac:c1:e4:4c:a9:69:39:a0:24:8c:7e:54:
99:f3:a8:b9:8f:5a:d7:ae:c2:a4:31:97:72:5f:ef:
55:a7:7f:d2:49:96:69:85:9c:4d:b2:70:3e:2f:27:
91:83:bb:ae:e2:97:b1:d8:2d:57:64:70:14:02:25:
35:ae:f7:d4:e3:32:16:62:ce:89:7f:c3:85:c8:81:
86:f6:83:ca:22:6b:aa:cd:e9:09:b8:b5:b1:68:02:
d1:1f:f6:bf:c9:cf:0c:e2:f7:30:55:59:b2:29:8c:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:F3:20:F1:94:76:41:B6:03:A4:B0:0E:4F:91:B8:59:6B:92:3B
X509v3 Authority Key Identifier:
keyid:F6:1E:58:FC:C6:D4:55:9C:49:2B:FF:F0:73:AB:65:54:15:9E:C5:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F61E58FCC6D4559C492BFFF073AB6554159EC504.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/F61E58FCC6D4559C492BFFF073AB6554159EC504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:78:fd:d6:3a:14:0b:32:46:ee:b0:2e:e6:da:57:0a:d3:
cb:0d:43:3b:80:be:36:09:37:af:6a:c7:13:10:e8:87:e6:3b:
03:4e:07:6b:d9:0d:93:4c:73:02:22:53:68:fe:cf:20:bd:f0:
f1:61:ae:a5:2b:31:4a:a2:d7:d8:a5:6b:cf:2c:4b:43:d4:6b:
ec:02:ec:2b:b9:fd:80:db:53:02:0a:84:39:3b:89:4f:94:63:
21:d1:00:4e:b5:94:d1:52:e4:b6:34:f5:2b:b1:6d:53:d3:06:
a5:29:13:74:e5:0f:c2:5a:24:9f:23:f4:57:bb:8f:64:3c:79:
a4:42:29:68:44:33:e6:75:87:93:3b:75:a7:74:17:4e:cd:79:
e3:c9:4a:e5:f2:51:54:8a:00:30:ee:d4:ba:a2:4d:8f:95:dd:
5c:b0:be:58:30:0e:3d:2a:38:1b:0a:8d:8b:b9:97:1a:7f:31:
16:d3:f0:f0:a8:f7:2b:6d:4b:77:29:95:2e:7f:1c:7f:49:02:
ba:69:ca:3d:af:e2:35:7a:a8:8c:46:9b:a2:5f:6d:eb:bc:06:
c1:11:50:58:ad:67:36:c7:0e:be:1d:97:f4:67:b2:3b:40:85:
ce:31:c0:f8:83:c6:c8:d7:cb:0f:aa:bf:7b:58:95:f4:03:7a:
55:f6:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:37:56 2026 by rpki-client