
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
File: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft (raw, json)
Hash identifier: /E3qF1iF95o2Z/D2XcT6qlekTafM0GndCNeY6mD+X8s=
Subject key identifier: 4A:14:BB:A8:E8:87:99:4A:03:DA:0B:33:E2:78:64:23:74:20:91:51
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Certificate issuer: /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial: 492323AB4C3BEBE05DB6572B4ECAA4D2D58F0DD6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 10:34:32 +0000
Manifest this update: Mon 21 Sep 2026 10:29:32 +0000
Manifest next update: Tue 22 Sep 2026 11:14:32 +0000
Files and hashes: 1: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=)
2: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: EAjmUlvem7M4oK9zM5l2C5sj8QgctjDf21f5Jtu6r6c=)
3: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=)
4: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=)
5: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=)
6: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl (hash: m5VieDz7xAemGRwSJQB/mKyh5scYdhuMmcE4UmvwU6E=)
7: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=)
8: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: scVRC0xmxqQdUfIKHLUXCSR/PlHSL7MJsFmhftXQ12o=)
9: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 2buPsuKzxfp1+Z0b6pwCmXQGtunH/ULHNFjkRXke1WI=)
10: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:23:23:ab:4c:3b:eb:e0:5d:b6:57:2b:4e:ca:a4:d2:d5:8f:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Validity
Not Before: Sep 21 10:29:32 2026 GMT
Not After : Sep 22 11:14:32 2026 GMT
Subject: CN=4A14BBA8E887994A03DA0B33E278642374209151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:ba:4f:2c:27:60:05:b8:00:8b:d0:f4:43:
5d:94:ff:56:14:2d:07:d8:66:d3:cc:15:1f:a1:b8:
41:dc:9b:db:b9:54:2b:e3:8c:b4:88:80:25:4f:b4:
8c:45:dd:65:98:a7:91:da:f5:18:57:52:83:bb:87:
e4:53:1c:cb:8a:41:04:48:9f:41:3c:4d:13:af:a0:
dd:7b:f3:6b:f5:62:fe:25:a2:d9:02:40:20:31:ed:
91:2b:29:51:3b:e5:c1:75:9e:03:b7:f7:a7:45:5b:
9c:8d:f3:10:39:ca:ab:fd:27:43:fa:c2:65:eb:80:
72:a2:17:b1:a4:21:14:40:9b:2e:90:0f:87:12:d4:
20:7c:5c:f3:cf:cc:06:7b:9c:6e:05:5b:21:ca:04:
3c:ef:2f:a9:99:b6:a7:f3:ea:e1:ce:bf:12:63:ac:
37:5b:ad:cb:8a:c6:88:0e:08:58:3e:2d:98:ae:77:
ba:43:82:15:80:e1:52:1e:6b:8d:20:20:26:69:3a:
06:ec:b5:92:f7:8c:d7:d8:6c:8b:a8:7b:26:b1:85:
62:05:15:2d:59:78:55:71:00:7d:73:28:82:0b:eb:
62:db:d1:8e:01:43:65:28:8e:6a:06:76:8a:98:7f:
e1:b3:4c:ad:5b:33:ae:86:49:25:83:bc:c7:d5:08:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:BB:A8:E8:87:99:4A:03:DA:0B:33:E2:78:64:23:74:20:91:51
X509v3 Authority Key Identifier:
keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:45:d7:dd:56:9e:41:88:55:58:f5:b6:28:e6:63:ff:8a:
d6:80:4c:22:2d:6d:10:d2:2c:af:ef:8e:c1:1a:8f:c0:1c:eb:
3d:b8:17:e8:d4:6e:9e:27:14:fd:a6:78:c0:eb:fb:d8:95:71:
c1:af:10:65:7a:2c:5f:fb:20:97:6e:a4:ce:9a:67:14:71:4b:
c7:f6:d8:2c:a7:57:29:b0:0a:ed:06:f6:28:94:7a:07:01:18:
de:6b:15:55:c1:81:0c:f8:ff:76:f9:dc:78:27:a7:f5:96:ba:
a5:42:33:14:0f:b3:5b:de:32:12:51:d2:76:fa:12:90:68:61:
b9:ed:30:4f:21:d8:d0:fb:9e:43:01:7d:33:4c:17:ed:dc:0e:
20:9d:85:d5:43:e2:9f:32:0c:9b:f8:d5:40:0c:dd:12:73:a0:
f5:23:20:37:3d:4f:5b:73:73:9f:a9:30:ba:79:47:69:6c:fd:
ec:9e:10:83:6b:6f:3b:03:3a:65:a9:9e:5f:0e:41:bc:74:73:
34:f6:19:52:32:0f:4f:cd:8e:ff:7e:98:a2:6e:8b:88:db:f5:
79:01:22:97:48:b8:8c:ce:3a:52:bc:83:23:01:7f:db:62:c6:
a3:ae:65:34:b8:18:79:08:c9:94:60:05:c2:05:2f:99:f8:b6:
24:f2:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:15:47 2026 by rpki-client