
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
File: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft (raw, json)
Hash identifier: bExnVndfWzrm0o/15XzPH4LSmyPN8PKO8VHGqhEn6Sk=
Subject key identifier: 2A:EC:82:64:8E:61:68:D6:4A:31:4F:7D:39:4E:E7:C9:AA:63:06:4E
Authority key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD
Certificate issuer: /CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
Certificate serial: 56BD37D7E4D78123373E0FF79E854ADC13F2F646
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 19:28:37 +0000
Manifest this update: Tue 02 Jun 2026 19:23:37 +0000
Manifest next update: Wed 03 Jun 2026 22:07:37 +0000
Files and hashes: 1: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl (hash: Tgd+EjwmHjh4KFv0U7heF0+KUKt+pY0hq2WqWPfgqj0=)
2: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: yDrVyoeowwpodsmIoAkE1qIpwTZ6W9Penvq2Oshsmwc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl
rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bd:37:d7:e4:d7:81:23:37:3e:0f:f7:9e:85:4a:dc:13:f2:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
Validity
Not Before: Jun 2 19:23:37 2026 GMT
Not After : Jun 3 22:07:37 2026 GMT
Subject: CN=2AEC82648E6168D64A314F7D394EE7C9AA63064E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:03:ed:9c:51:a9:19:ea:94:d4:4e:a5:b6:
55:5e:81:08:00:d4:8c:14:28:c2:fd:78:f2:a7:36:
ec:dd:e9:fa:a7:f3:9a:82:3c:81:a4:67:c2:54:da:
11:3c:96:7b:b6:66:90:c3:f5:6e:25:68:a2:86:7d:
9c:86:30:a3:40:49:f3:02:d2:0e:b6:13:f7:19:90:
75:40:11:df:b0:65:84:00:35:4b:be:cf:8f:9e:fa:
0d:43:ed:a4:9e:0a:d6:1d:97:ca:1e:24:f6:82:de:
eb:cb:d4:26:e4:9e:a5:17:07:a1:6c:2c:3d:b0:4f:
3c:ab:a4:36:94:17:6f:66:c6:bf:0d:2c:a7:71:11:
6a:33:11:2e:c4:68:14:d0:11:0a:f7:23:68:bd:73:
34:db:54:4b:09:51:91:cf:72:39:f2:6e:fe:dc:20:
5c:4b:74:5a:26:9c:e3:46:7f:15:75:80:f0:8a:a0:
8b:c3:96:51:80:d6:9e:1b:98:29:f9:d1:c4:c3:55:
6d:ab:73:4b:91:8a:f6:9e:ba:61:a2:03:29:b0:a2:
35:4a:2c:41:e7:de:73:ec:7e:fb:c8:86:4d:4d:78:
99:92:5f:d0:87:c4:aa:3f:fc:39:bf:5f:27:d2:56:
25:e5:50:95:33:d4:4d:d5:34:d4:c2:5c:86:21:b1:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:82:64:8E:61:68:D6:4A:31:4F:7D:39:4E:E7:C9:AA:63:06:4E
X509v3 Authority Key Identifier:
keyid:FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:97:13:a0:10:69:e9:b4:cf:68:64:50:a7:a2:24:ea:b2:59:
8b:63:17:1d:25:6b:5c:22:ec:cf:56:8e:ae:3f:57:a5:07:2a:
82:97:02:66:12:69:88:b7:d2:cf:2f:44:b0:48:25:f3:21:0c:
fe:22:c5:e9:8c:ba:01:45:49:da:7f:a6:83:dd:ee:c4:ac:ee:
a0:79:a3:ea:c2:1c:fd:36:cb:03:35:a5:6b:8a:66:c5:b1:ea:
c2:6f:f9:28:bd:37:cf:42:e5:90:e7:37:fd:b1:73:8f:de:b6:
6a:9e:dc:97:66:fa:67:88:06:7e:29:c2:4b:c8:1c:c2:3c:53:
76:a6:6a:a2:53:4e:de:aa:c5:f5:ce:cd:6d:49:be:97:8a:f8:
9b:ca:6b:22:7b:77:c8:bb:f4:d5:83:a3:8d:b6:24:71:38:17:
77:98:4b:2c:f8:d5:42:01:3a:9e:e8:c7:89:7f:fd:49:b8:28:
d1:b4:f5:53:43:3d:00:06:95:a0:25:a6:f2:c0:98:ba:b8:46:
3e:be:62:ed:ff:e8:90:df:95:b5:6a:50:6e:5b:01:8f:24:6c:
27:b4:36:77:4f:73:df:37:0b:3f:5f:5b:8e:c8:c5:4a:b5:c3:
1d:96:7e:10:7f:f2:e1:8b:41:81:75:20:5e:fb:c7:bb:5f:c9:
62:ca:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:50 2026 by rpki-client