
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft
File: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft (raw, json)
Hash identifier: Juim1BJAk8VKxQyOPStipXDJ35slY+DBXJzJCJzryJI=
Subject key identifier: CC:3C:EA:56:93:FE:FE:9D:BF:73:14:46:EB:04:69:F1:09:3F:C6:97
Authority key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92
Certificate issuer: /CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192
Certificate serial: 0811492A378FA1BCCF93CEDFF6D209029CD96BB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:40:26 +0000
Manifest this update: Tue 16 Jun 2026 21:35:26 +0000
Manifest next update: Thu 18 Jun 2026 00:01:26 +0000
Files and hashes: 1: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: VsBGao6wJ+D9luytrcOpRnST1DbJomPxjbQHafMOBCc=)
2: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl (hash: Tk4LbbXDq7CmtWtHngznp1eZmoazQypKlShPjb+SEzc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl
rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:11:49:2a:37:8f:a1:bc:cf:93:ce:df:f6:d2:09:02:9c:d9:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192
Validity
Not Before: Jun 16 21:35:26 2026 GMT
Not After : Jun 18 00:01:26 2026 GMT
Subject: CN=CC3CEA5693FEFE9DBF731446EB0469F1093FC697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:82:e7:84:c7:60:54:87:c2:33:0f:04:5b:
6c:f4:8a:91:50:1d:cc:36:eb:96:ab:f7:2d:9d:a7:
10:10:5e:35:f2:e2:af:e6:43:20:21:4f:c0:53:22:
a1:1a:df:89:63:cb:23:74:0c:27:87:93:34:9e:8a:
3c:50:a5:84:19:33:4b:60:5d:b3:66:42:ac:1b:af:
9b:d3:12:da:b0:7d:c0:ce:94:4e:03:a5:7f:b5:f1:
15:2b:09:94:90:56:70:7d:1b:13:58:22:fd:ae:39:
ac:ec:66:e6:59:ef:62:83:df:f1:58:00:b2:30:2c:
50:6b:91:69:03:b6:7d:ef:97:2d:1d:ed:0d:e9:2e:
1f:e8:f8:c7:a3:4b:33:4b:7e:3d:f3:71:ee:bc:b0:
cf:0f:d8:df:36:77:41:41:b4:0a:d5:05:9b:67:84:
67:6c:96:3a:ba:50:74:78:16:c2:65:c2:d2:62:8d:
42:98:e7:52:9b:69:81:66:e3:9c:19:62:d1:98:52:
8e:fa:2f:d9:21:6f:a7:9a:a2:8f:13:86:53:71:51:
52:03:7c:33:4d:69:37:6a:cb:e6:21:6c:6b:e3:38:
68:0f:90:50:39:a5:f4:02:0a:27:c6:d5:d3:64:eb:
41:a6:af:49:63:10:78:d3:68:16:33:39:9a:b4:ca:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:EA:56:93:FE:FE:9D:BF:73:14:46:EB:04:69:F1:09:3F:C6:97
X509v3 Authority Key Identifier:
keyid:F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1e:f6:75:0a:4f:6f:84:89:85:a4:4f:ab:c9:04:5b:27:92:
5f:c4:ea:b4:6a:db:65:e0:cd:7f:6e:a8:46:1e:be:98:6c:0c:
e3:95:d3:c2:92:4b:9c:bc:e7:d0:a8:2d:f0:ed:5a:2b:b8:ae:
19:5c:b5:95:06:33:10:77:2c:3f:73:79:e5:ba:47:20:10:20:
92:cb:0a:c3:9a:b3:1b:cf:2b:57:c9:05:2b:ad:b8:18:65:47:
7a:1a:fd:2e:3d:cd:af:c3:d6:23:fe:a7:37:b5:4c:b5:b0:bb:
81:d3:67:b0:b3:39:a0:2d:04:67:ee:41:35:1d:13:80:7f:db:
66:a9:e7:bf:1a:ab:2a:f3:7c:dd:64:d4:c7:d3:be:6d:1d:5c:
f2:da:b2:50:6a:34:24:43:38:de:e7:23:78:b8:2b:dc:7e:02:
e4:89:6f:90:f6:c9:38:b8:18:db:9b:c5:ba:94:72:95:fa:78:
c4:3d:e0:3e:44:cf:6f:d9:3b:77:69:a2:99:28:21:d2:47:dd:
97:ca:92:8c:5e:9f:4f:f2:63:d5:88:66:29:e0:f2:8d:73:11:
1f:07:c1:dc:e7:af:b3:5f:da:30:3e:cd:c7:54:17:de:7e:25:
87:56:2b:d4:93:d8:e0:29:60:67:57:de:c7:e2:97:20:70:88:
52:a8:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:38:51 2026 by rpki-client