
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft (raw, json)
Hash identifier: x58moVKWk/mGAQrN/kBwia0e2/geAiZj0krAVlvG9H0=
Subject key identifier: F4:D7:01:38:3C:CE:50:05:FF:CE:97:FA:EF:E1:22:D2:5E:E2:68:17
Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
Certificate issuer: /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Certificate serial: 4C0251EDE722F868F4A433EA5F0FC1E19AFB22EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 04:59:39 +0000
Manifest this update: Thu 17 Sep 2026 04:54:39 +0000
Manifest next update: Fri 18 Sep 2026 08:28:39 +0000
Files and hashes: 1: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl (hash: ZC5zezbtY5TI9zymVf8sUsSy7TyPiWNnrkxaCahk1mM=)
2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:02:51:ed:e7:22:f8:68:f4:a4:33:ea:5f:0f:c1:e1:9a:fb:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Validity
Not Before: Sep 17 04:54:39 2026 GMT
Not After : Sep 18 08:28:39 2026 GMT
Subject: CN=F4D701383CCE5005FFCE97FAEFE122D25EE26817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:87:81:81:28:92:fd:df:ad:60:64:b9:0f:
d6:c5:8d:3b:c6:7f:e9:4e:ed:3b:f2:97:ae:ed:90:
b1:77:38:5f:84:0b:00:1a:ae:fa:5b:d9:5a:14:9d:
4f:8d:4e:2a:fb:4d:7f:44:a7:41:38:4b:6e:c1:a6:
9a:d0:2b:ac:25:1e:d3:3a:ff:56:fe:27:db:92:a4:
85:2d:23:f4:e1:92:e0:6a:2d:df:fd:b8:77:db:f0:
e3:71:0c:00:d6:6b:63:1f:28:e0:66:f4:7b:69:0a:
f9:b8:1a:18:5c:c6:86:cb:3f:55:98:4b:df:0d:fb:
45:b5:eb:d7:50:4f:ef:91:a0:2b:58:09:38:fc:61:
e2:49:b6:45:67:7b:fb:ba:62:92:ad:c8:46:0d:b4:
90:47:7a:42:f6:2d:8d:eb:a2:17:49:13:ef:2c:7f:
e2:7c:4b:f9:51:46:c7:8e:83:27:b1:f7:f1:6f:db:
85:a0:2e:cb:f5:d9:ac:50:95:74:71:f1:1b:df:c8:
6a:83:e3:b4:b5:11:92:d1:c1:4c:b1:3e:a5:1e:2c:
e1:4e:b6:23:73:8f:a1:82:da:68:96:63:ce:6b:12:
cf:03:cf:4b:50:c8:a8:d9:0b:33:fe:8e:fd:81:df:
be:0a:68:5c:8a:9a:15:3e:b5:4c:49:88:86:c6:ba:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:01:38:3C:CE:50:05:FF:CE:97:FA:EF:E1:22:D2:5E:E2:68:17
X509v3 Authority Key Identifier:
keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3a:42:22:45:c1:a0:8a:08:3c:25:de:69:ce:ff:60:d0:95:
54:1a:f0:4e:84:0a:c3:47:b8:6a:44:d6:ae:74:1a:ec:56:be:
06:c1:2e:35:20:fd:20:16:89:7a:7f:18:f9:4d:aa:6c:90:66:
6d:2a:12:f1:12:3b:8d:f3:cf:3d:dd:48:60:28:54:83:d8:96:
f3:6a:6b:44:39:4f:3d:49:2a:98:61:06:4d:97:42:be:2a:2e:
f5:dd:4b:d5:cd:83:85:3a:6b:02:ab:71:10:6e:6d:59:00:bb:
76:36:89:57:3e:7f:a1:aa:63:a5:8e:a9:2b:fd:5d:62:26:84:
e0:bb:24:68:36:3b:cc:83:5e:f6:83:2f:7a:db:c0:34:e8:95:
3a:b6:9f:ab:ce:44:41:4f:55:ca:b9:24:87:8a:19:61:e5:94:
0c:82:90:59:9f:6e:53:b7:49:4e:c0:40:47:f7:28:e8:fd:17:
ca:d3:ea:69:a6:8d:35:f4:f9:5f:8e:a3:83:33:da:6e:e5:a1:
94:49:90:a9:2e:5c:0f:ca:0d:d0:e8:77:4e:19:d2:02:85:9b:
4e:31:6f:3b:a7:41:1a:fc:6d:08:9d:aa:18:20:31:a6:e9:c2:
4b:7e:a7:26:9e:5e:c3:35:38:0e:f5:d9:e1:59:59:cd:1b:d6:
f6:b3:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 11:27:33 2026 by rpki-client