
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
File: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft (raw, json)
Hash identifier: LB+jcj4mJEoRFes2BKUhOD5xVGMiTFYNiuI45b9ApP8=
Subject key identifier: 04:B0:1F:94:7E:B1:CF:13:B7:C9:B5:67:49:E9:0F:7D:7A:E4:59:52
Authority key identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7
Certificate issuer: /CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
Certificate serial: 2BFF66D17EF272CB2F0C6BFE67EBF454446AA746
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 18:44:40 +0000
Manifest this update: Mon 20 Jul 2026 18:39:40 +0000
Manifest next update: Tue 21 Jul 2026 18:49:40 +0000
Files and hashes: 1: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: fXBAdM3eV/OnDDNzfHAaJqAymYnadEFB3GVcvsNkVi0=)
2: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl (hash: sUhcctlNbA0yBhXr+GYLmrvkPdhxJrR/ZYqPQANseec=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl
rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ff:66:d1:7e:f2:72:cb:2f:0c:6b:fe:67:eb:f4:54:44:6a:a7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
Validity
Not Before: Jul 20 18:39:40 2026 GMT
Not After : Jul 21 18:49:40 2026 GMT
Subject: CN=04B01F947EB1CF13B7C9B56749E90F7D7AE45952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:18:90:33:d7:bc:da:4a:63:c3:32:0a:30:
af:08:17:73:4a:5d:e3:64:60:7c:06:58:f1:77:4f:
fc:c4:9b:7d:15:23:01:1f:b4:19:2f:50:bb:19:f5:
f6:54:f9:48:ae:34:25:c4:94:ea:5f:3f:a3:48:20:
f8:f2:b1:b9:23:b5:7c:9c:87:c1:bf:da:6f:8b:38:
78:d2:79:26:83:82:04:bd:41:ae:92:16:5f:48:7c:
d9:22:af:8b:fe:f3:28:e2:ea:1b:c1:53:26:44:9b:
32:5a:cc:42:54:ff:1f:44:cf:74:01:2e:b4:5f:28:
42:74:7c:f0:cc:a3:2e:62:d9:7f:52:2f:22:01:11:
d0:5e:2e:22:d4:5e:87:f5:f8:9b:55:54:94:04:d5:
fa:d3:85:09:2d:a0:6e:15:97:63:f1:5d:b7:c2:b1:
28:7f:6a:b5:c3:2e:08:14:c3:f7:41:82:f5:74:18:
21:2d:e6:9f:b2:5e:60:c4:05:76:97:9b:cb:be:bc:
1a:0c:3d:17:53:1d:77:b1:cd:e6:52:28:33:81:a2:
6c:85:c5:55:82:81:d4:94:81:ef:74:06:b9:8b:98:
c5:6a:22:55:58:e6:9e:26:3c:ae:15:da:a6:30:2e:
ea:ef:d8:56:c2:27:55:cf:cc:d2:3a:18:be:38:aa:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:1F:94:7E:B1:CF:13:B7:C9:B5:67:49:E9:0F:7D:7A:E4:59:52
X509v3 Authority Key Identifier:
keyid:FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:89:b5:2b:74:68:c5:fa:29:24:39:12:21:c8:7c:b7:f0:f0:
98:a1:ac:dd:c4:5d:d4:01:30:89:23:e8:4d:0a:59:d9:eb:8a:
37:5f:25:68:b5:40:89:26:56:39:95:72:01:33:01:8c:99:68:
f5:57:a4:fb:43:5a:1e:93:47:a2:dc:df:fa:91:a4:2d:50:09:
d3:ca:3b:7a:4f:0a:03:22:7e:ee:2e:44:77:c6:4b:a6:03:83:
98:22:55:e6:6b:d8:64:d0:a6:2f:ef:f4:e5:98:a7:3b:63:31:
d8:fb:6f:d9:15:7a:ee:cc:35:88:60:03:3e:a2:cd:e2:1e:7f:
f3:10:4d:65:a9:0f:b0:d3:17:7a:bb:4d:cb:f4:22:1b:51:c3:
01:be:27:f4:df:a7:a8:c9:28:24:3d:3c:aa:c9:48:e9:7f:a2:
c2:92:7b:60:15:10:14:00:81:e0:d0:16:fd:95:83:3b:57:97:
3c:82:7d:a7:e4:c1:45:ae:fe:43:01:0f:67:95:7e:a8:d0:07:
35:99:ae:0e:ed:a6:c2:ef:9b:69:3a:7f:7d:91:cd:84:ca:17:
d9:1f:9c:49:e7:30:1d:16:0b:1c:d6:6f:24:88:18:e8:66:f5:
5e:d2:3f:51:e9:a0:32:6a:6f:5d:8e:09:ef:22:10:d1:d5:c7:
8f:56:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:19:01 2026 by rpki-client