
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json)
Hash identifier: j09+uXYxRGcf6Vg8sgKDg8HIQdIsfZHkMYlkFzctc9o=
Subject key identifier: 75:BC:B3:CD:77:49:BD:26:D1:C9:32:C2:C5:09:AE:7E:77:88:8F:CE
Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Certificate serial: 3BF5C01058D299F302A32595503785CFA2F4DD55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 11:20:23 +0000
Manifest this update: Mon 20 Jul 2026 11:15:23 +0000
Manifest next update: Tue 21 Jul 2026 14:56:23 +0000
Files and hashes: 1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: UptHsmoqpEyjjGSrJFg1khV1uhKh1oqEG1oYWVzK0ig=)
2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f5:c0:10:58:d2:99:f3:02:a3:25:95:50:37:85:cf:a2:f4:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Validity
Not Before: Jul 20 11:15:23 2026 GMT
Not After : Jul 21 14:56:23 2026 GMT
Subject: CN=75BCB3CD7749BD26D1C932C2C509AE7E77888FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:ab:51:13:59:41:dd:b0:06:ed:03:52:68:
b8:4f:83:28:c6:fc:73:2e:6d:2c:28:0f:b3:98:6c:
53:3d:37:e3:5f:d6:9f:09:74:72:1c:51:70:e7:76:
84:f2:26:69:f4:40:c4:c1:5d:5d:3e:00:bf:77:42:
37:21:30:5a:33:2a:70:e0:e8:7d:11:b7:28:82:76:
95:34:66:32:44:bb:ec:93:28:95:bc:65:4c:44:f6:
61:b2:f9:23:dd:15:04:fa:16:69:3d:44:57:8e:c2:
8e:6a:9a:96:c8:d6:49:79:67:8c:49:d5:98:89:74:
dd:c2:15:97:bc:97:0d:4a:b4:66:d4:9c:26:ef:c5:
32:16:c5:7a:f2:5a:f5:12:a7:5e:38:0c:ec:62:12:
c1:c6:7b:1b:b0:1b:c3:07:34:82:15:4e:9a:03:34:
ad:56:dd:2a:e0:db:57:0d:fc:6b:2f:6d:33:04:b1:
4a:46:51:db:b8:2b:94:91:8c:0e:d1:54:d9:12:5b:
6d:82:f9:7a:25:42:67:e6:98:95:60:05:3e:24:97:
52:46:26:eb:06:db:9e:c1:17:c6:ce:be:66:c4:ff:
72:cd:fb:69:01:8c:c2:63:a1:db:5e:4f:cf:1f:69:
d6:71:ff:2c:a5:76:8f:35:12:3e:48:14:5e:93:58:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:B3:CD:77:49:BD:26:D1:C9:32:C2:C5:09:AE:7E:77:88:8F:CE
X509v3 Authority Key Identifier:
keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:71:7f:e4:e5:02:ac:a0:0e:2c:e8:cd:22:2c:23:59:e8:26:
06:9b:da:00:e6:e6:6b:6a:21:d2:a0:c2:b7:2d:77:c1:95:8f:
35:19:14:57:57:3d:12:85:62:23:39:e6:2a:79:63:09:fb:e7:
6f:bf:97:ed:ae:a1:f7:6e:97:51:0f:08:0b:76:47:00:ec:b8:
23:bd:b2:44:7b:46:e7:82:92:19:6d:ce:b4:dd:fb:a4:d2:c0:
bc:b4:77:d0:12:c8:77:2f:1a:01:41:0c:66:99:d2:ca:69:42:
1f:12:4e:28:75:e3:13:c4:91:e9:5f:67:f6:e5:4c:7a:0d:99:
2a:70:6c:79:9b:85:47:f4:26:8c:f6:e9:17:1a:4b:a3:e2:07:
62:05:e2:56:b1:a5:45:51:53:06:37:d8:ac:6d:99:4a:30:7e:
20:31:8e:9a:f3:3b:a6:86:37:cd:d4:33:71:a1:33:d9:9d:06:
44:1a:fe:58:69:95:be:0e:8e:18:96:cc:34:d3:23:72:88:26:
d8:ad:1c:e3:ec:20:5e:f5:fd:01:94:fa:12:b1:63:90:50:9b:
94:50:d4:14:d7:c7:75:20:0a:b8:38:d1:8b:2f:f3:53:aa:85:
dd:3c:7d:65:1e:88:2d:e0:8a:0d:c8:72:96:9e:db:5c:ad:0f:
2e:b2:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:37 2026 by rpki-client