
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
File: FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json)
Hash identifier: 3k7OWRDKso52pftaXRlvS3Wd1C9ppvgsvIqgG2PAm3o=
Subject key identifier: ED:9E:00:E4:A6:82:09:89:C6:77:82:BD:D3:90:55:6E:5A:31:D2:F5
Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391
Certificate serial: 5E15B6E6AAE1E361C53853E5B64720485546F7AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 07:26:23 +0000
Manifest this update: Sun 20 Sep 2026 07:21:23 +0000
Manifest next update: Mon 21 Sep 2026 07:45:23 +0000
Files and hashes: 1: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=)
2: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=)
3: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=)
4: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: unDJ/I4J6UhZkK8hSnl9CRlIrzRIj4Wg8NsYgKj7QK0=)
5: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=)
6: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=)
7: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 07:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:b6:e6:aa:e1:e3:61:c5:38:53:e5:b6:47:20:48:55:46:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391
Validity
Not Before: Sep 20 07:21:23 2026 GMT
Not After : Sep 21 07:45:23 2026 GMT
Subject: CN=ED9E00E4A6820989C67782BDD390556E5A31D2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:40:24:64:9b:42:44:9f:41:26:2b:bb:a3:
e4:60:ff:ba:40:0d:0e:d2:51:a2:b0:23:d4:76:e0:
83:ef:8f:ba:84:40:a3:43:bf:42:ff:b6:de:5e:55:
57:2e:d9:26:f9:f9:07:5b:97:b6:b6:ba:71:b1:58:
fa:09:b3:c1:47:cc:3d:06:c6:87:4d:b7:c7:85:16:
39:3c:46:5a:8f:99:8b:a0:d0:01:56:52:bd:2c:32:
eb:cc:13:29:7d:5a:18:91:fc:a8:bc:01:ed:2e:8a:
09:80:b0:a7:d1:4b:18:44:7c:04:bf:18:e3:f6:7e:
4a:4b:68:59:a6:2a:5d:51:58:bc:26:c1:f6:91:9a:
2c:f2:d8:05:11:2c:7a:c1:9c:f6:9d:e1:b1:0f:56:
2b:38:f2:07:bc:1a:23:1f:20:f6:25:e7:06:3b:3d:
cf:9f:fd:1c:2f:ed:cf:26:af:78:9f:be:b5:92:38:
26:23:f7:c3:1d:64:5e:6c:b7:62:98:fc:6e:58:d5:
1d:d8:2b:c5:17:12:23:3f:40:cb:91:99:f4:2a:6f:
11:96:84:76:9f:2c:4d:a0:42:40:c0:5c:5d:52:56:
55:b6:17:7d:b8:91:bd:b5:0a:8c:bf:21:22:38:41:
ad:c0:eb:f5:c6:bb:c7:75:60:19:4f:cf:ba:a4:6f:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:00:E4:A6:82:09:89:C6:77:82:BD:D3:90:55:6E:5A:31:D2:F5
X509v3 Authority Key Identifier:
keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:fd:ac:c6:0f:c4:87:68:fb:12:2d:f7:c1:6a:73:12:79:
25:ab:01:2e:e0:6b:0e:cd:46:d1:70:2e:32:d1:8d:92:c7:47:
e8:f2:db:ee:1c:b0:30:85:eb:13:73:c2:df:78:57:b6:15:eb:
c8:9a:c0:8c:fa:21:05:e2:6b:cc:86:73:0d:79:c8:32:7e:81:
a6:ac:2f:26:7a:bb:bb:6f:e0:0a:67:51:40:8a:6c:64:3b:64:
9e:23:a8:61:77:2f:74:c2:f6:a2:e3:4a:75:e1:f4:33:49:f2:
d3:30:57:b6:c1:8f:85:89:41:e9:3e:44:e0:82:2b:97:ac:ec:
ba:d1:a2:62:88:3a:0c:da:21:d5:26:55:8e:c2:23:8c:d6:cc:
83:ed:56:35:75:6a:c3:04:5f:59:03:50:31:cd:17:b3:9e:df:
37:56:56:95:8c:8f:10:14:d9:bd:2e:23:3e:72:9e:42:b3:40:
78:45:66:08:16:cc:3c:78:46:7a:aa:a3:2f:64:5e:01:14:41:
c8:6b:5d:99:24:20:82:ee:b6:52:44:fb:65:28:f7:68:74:04:
d4:70:db:38:ef:79:db:e0:14:66:96:89:31:03:fd:8b:23:59:
5f:81:7b:4a:5b:fe:94:b2:4a:61:b6:6b:e4:57:32:35:08:1c:
89:53:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:53:34 2026 by rpki-client