
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: JJMtO4gGlOPF0WRraWEcKr8ssMnbdAoWbNgkg7sMOBQ=
Subject key identifier: 57:8A:0D:CC:49:7A:60:07:3F:3A:6E:88:0A:A2:E8:F7:09:F3:61:E8
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 2467648CBEDD6CF74F6FEBE554EAC4F7C559EC25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 11:25:42 +0000
Manifest this update: Tue 21 Jul 2026 11:20:42 +0000
Manifest next update: Wed 22 Jul 2026 14:02:42 +0000
Files and hashes: 1: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
2: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: MYcMBcGExpQwGymsPXczSFXYfrZhMqvZTQfZNwnwd2s=)
3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
5: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 14:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:67:64:8c:be:dd:6c:f7:4f:6f:eb:e5:54:ea:c4:f7:c5:59:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: Jul 21 11:20:42 2026 GMT
Not After : Jul 22 14:02:42 2026 GMT
Subject: CN=578A0DCC497A60073F3A6E880AA2E8F709F361E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:0e:02:d4:d8:d1:cf:e4:76:bd:60:71:6c:
01:eb:98:d5:9d:5c:c5:ac:36:63:7f:65:6d:d6:96:
b3:54:4c:d0:b2:f2:3f:6a:46:78:82:ae:54:74:9f:
fe:86:a6:da:c1:68:dd:87:8c:1c:eb:c0:fd:7d:47:
df:9f:58:05:54:c5:ff:87:b4:25:a8:61:be:91:80:
12:c6:b4:1f:5b:6c:37:04:4f:8f:d7:14:17:c2:c8:
76:74:4c:46:cb:e1:74:7d:b3:50:dd:d3:39:25:ec:
f8:af:a5:2a:93:a9:5a:97:99:b3:f4:28:33:f3:d0:
51:82:2d:c1:07:79:05:98:6e:a4:dd:39:d2:a4:77:
5f:41:b9:a2:c1:5b:63:5a:86:bf:b6:0c:26:d0:cc:
d2:87:36:96:0f:fb:ed:f6:0b:3f:bb:bc:c5:1d:43:
25:fa:11:1e:11:9b:5b:98:33:40:4c:6e:7c:9d:8e:
11:d6:d4:2a:03:86:b2:89:62:99:6f:bd:3d:9a:a5:
f8:db:4d:5a:db:98:f9:cb:09:3b:69:24:b1:29:db:
de:96:48:aa:12:9e:14:90:fc:d4:34:3a:cc:a5:da:
dc:f4:03:8a:39:35:97:a3:8b:a5:ec:2a:b6:5d:21:
28:d5:d2:fa:72:90:c8:02:82:d1:b4:80:30:96:63:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:0D:CC:49:7A:60:07:3F:3A:6E:88:0A:A2:E8:F7:09:F3:61:E8
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3c:64:d0:4f:0d:bf:89:43:7a:97:94:bd:a3:f7:bc:c6:87:
0a:d3:cb:f3:e2:5c:48:8e:63:5c:a4:0f:ec:3b:8d:e9:89:23:
59:f4:7b:2f:bd:29:80:f7:d1:5d:91:f5:2d:f4:8c:9e:46:61:
f6:65:83:41:a9:d1:c5:17:c8:c6:11:0a:20:19:68:41:c1:b2:
24:52:cd:0e:82:15:b3:7b:51:0f:b6:9b:60:78:d0:8f:4f:d3:
4a:57:2d:38:a0:ca:b4:11:67:44:91:90:c8:07:1d:eb:73:e8:
14:9c:32:d7:8d:6e:c1:a9:59:b3:bc:13:50:46:c0:14:25:65:
e2:a2:a2:78:e5:a4:f8:ca:51:66:7b:8f:21:28:28:89:78:30:
b7:be:6b:a0:be:3f:d7:9e:50:ce:42:62:55:d9:cd:ad:c5:8d:
29:f9:2a:7f:de:d4:1a:7c:6b:88:0d:df:db:9d:b5:e3:8d:d1:
73:1f:dc:e5:7d:d3:55:f5:9d:00:e7:83:2b:c2:00:4a:8b:06:
28:cb:0e:0f:c0:f1:71:13:98:cf:eb:cd:01:db:dc:31:a4:a9:
eb:a8:de:15:d5:3e:63:d7:88:11:0b:e5:f4:54:17:de:0e:c5:
4f:8a:95:31:33:10:46:33:b2:83:41:a1:58:a5:12:74:6f:61:
aa:a4:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:34:12 2026 by rpki-client