
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json)
Hash identifier: AQx2gWzQGrt9IboStrYafNfzlOWT1+FkqZ7kM/sPL2g=
Subject key identifier: 22:83:F9:65:CF:3E:DA:02:C8:CF:9E:ED:0F:60:48:1A:92:EF:3C:19
Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
Certificate issuer: /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Certificate serial: 66D60CC157A3E99AE43656B6779BBCE0782B15EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 11:29:18 +0000
Manifest this update: Tue 02 Jun 2026 11:24:18 +0000
Manifest next update: Wed 03 Jun 2026 14:23:18 +0000
Files and hashes: 1: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: E51qp7ucbqGm7A0tcm6MA7p4sukLuW6+2QhtbKnBT1o=)
2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 14:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d6:0c:c1:57:a3:e9:9a:e4:36:56:b6:77:9b:bc:e0:78:2b:15:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Validity
Not Before: Jun 2 11:24:18 2026 GMT
Not After : Jun 3 14:23:18 2026 GMT
Subject: CN=2283F965CF3EDA02C8CF9EED0F60481A92EF3C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:02:62:42:ef:fb:04:9e:6c:ec:98:c6:88:
63:43:62:00:ff:de:1f:d3:bd:f2:68:4d:6d:40:0d:
02:ad:29:72:ad:5e:5f:00:78:c8:5b:ba:29:1e:8e:
d9:7b:79:58:f4:b0:aa:a4:bf:8f:84:4a:bf:9c:17:
d4:9e:04:8f:18:65:7e:40:84:1d:c3:82:60:f6:60:
1f:63:24:bd:c7:2e:44:9c:94:f3:27:1a:ee:3b:77:
17:16:63:17:ce:6f:e2:70:58:4b:b3:4c:63:06:7b:
f9:a0:24:f8:f1:f4:39:9d:b1:2b:4a:bc:4a:7f:40:
e9:f5:e1:0b:3a:46:9d:7e:8d:86:6f:9d:72:42:ab:
2c:f8:d8:a8:12:99:45:71:99:aa:92:d1:f2:d7:f8:
bd:e8:2f:d4:7b:10:c6:3e:21:2e:6f:3b:65:01:11:
8a:e6:ce:16:40:5a:2a:38:de:38:9f:c0:d1:3d:d2:
ea:30:52:8a:b9:4d:58:cc:2a:7a:c5:1b:10:5d:b3:
7e:c4:66:ff:d4:f0:da:a5:41:db:3b:a4:4f:1b:dd:
cf:b1:6b:b2:f0:88:d4:c1:73:ea:cf:34:43:ed:40:
d1:c3:ad:f7:16:41:80:c5:3d:ce:4d:0b:ee:b3:d3:
32:32:1d:3a:d6:28:55:32:43:d4:87:55:81:10:3a:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:F9:65:CF:3E:DA:02:C8:CF:9E:ED:0F:60:48:1A:92:EF:3C:19
X509v3 Authority Key Identifier:
keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:23:c5:1c:4c:01:22:dc:2b:83:58:b6:22:69:92:5c:13:db:
30:17:36:d3:3f:7d:b6:48:bb:2b:a5:67:dd:31:3c:1a:ca:32:
7c:14:65:49:ce:77:62:33:bf:33:af:63:72:89:fa:09:8a:62:
f3:54:6c:30:dd:73:49:96:d1:13:8e:a3:1b:1e:28:b7:67:41:
a0:1b:9b:07:19:fa:ba:02:4f:db:6e:5e:b8:e8:a0:f3:43:6d:
b1:f9:45:04:aa:22:69:c0:54:71:c9:95:d9:2f:ea:e0:1e:c0:
e2:b1:fb:95:00:6a:49:a2:01:bf:cb:8b:84:b0:39:37:bb:ff:
bf:04:b8:60:b9:e3:d2:89:41:bc:27:95:73:39:84:35:7a:e2:
04:75:bb:e4:b3:e3:78:85:dc:18:e5:6c:49:cd:3f:43:3e:53:
77:6c:30:a3:15:07:cc:14:4d:a7:23:1b:75:79:e2:21:5d:ba:
60:1a:26:77:77:65:2b:d6:50:d0:f4:a9:ce:dc:6a:74:d9:e5:
ed:d3:e1:c9:a8:72:e3:7b:fe:fd:94:fa:16:16:21:34:a1:99:
d2:3c:8b:99:be:3c:9e:ba:3c:64:f9:79:5d:df:db:81:55:9d:
02:28:d0:6a:0c:69:61:f4:5c:66:49:e6:35:c1:0b:a7:10:4a:
5a:7b:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:18:43 2026 by rpki-client