
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft
File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json)
Hash identifier: y+rRVzIeTBiZKqJ+MbYzDOcDmTVy7AEAKH6C6WxC73k=
Subject key identifier: 18:4B:4B:4B:79:74:76:EC:1C:3D:2E:49:23:5F:A0:E4:DA:8E:8D:22
Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6
Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6
Certificate serial: 6B8CEA6C554B887134EC720C5B7D44EE38DFF16A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft
Manifest number: B6
Signing time: Thu 17 Sep 2026 04:03:32 +0000
Manifest this update: Thu 17 Sep 2026 03:58:32 +0000
Manifest next update: Fri 18 Sep 2026 07:57:32 +0000
Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: N+mzGEdjYSefQ1mf7O5mSC6wTYcfsysMe5sGPfl1d+4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl
rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8c:ea:6c:55:4b:88:71:34:ec:72:0c:5b:7d:44:ee:38:df:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6
Validity
Not Before: Sep 17 03:58:32 2026 GMT
Not After : Sep 18 07:57:32 2026 GMT
Subject: CN=184B4B4B797476EC1C3D2E49235FA0E4DA8E8D22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:ba:c6:51:7b:f0:36:8f:22:7b:91:68:bd:
b8:45:6e:4c:09:c7:91:ad:0f:83:ea:c0:bb:e9:26:
76:f7:3d:22:3f:e1:12:50:c7:e0:72:41:35:99:35:
03:7a:c9:ab:1f:96:e0:f9:16:0a:30:d4:95:fd:50:
04:5d:e5:01:f2:8a:a7:4c:d3:2a:a5:2b:e7:20:bb:
25:bc:31:0f:35:a5:0e:8a:73:b3:b9:16:61:be:28:
b8:db:85:59:66:e6:bd:de:bf:4f:e4:22:17:6f:0e:
e7:71:95:18:2c:aa:c3:3b:5d:76:a2:f1:16:2b:0d:
37:34:d8:69:ec:cf:e5:b5:18:63:0e:bc:f3:9f:4e:
63:52:ed:ae:c9:dc:98:70:fb:f7:bb:3c:08:d6:48:
d1:5d:6b:1f:6e:db:a8:7e:e2:4e:f5:e2:a4:3e:d7:
aa:96:a0:18:43:2d:ac:b7:92:17:64:fe:cd:da:d3:
b2:ba:de:b3:f3:c2:0b:4d:9b:a9:3d:5f:21:28:ec:
0d:0d:81:f3:27:f4:27:4f:0c:e6:2e:bb:94:9e:81:
ab:0f:c7:14:c5:ae:2a:26:d9:91:e4:a6:51:f7:70:
ab:09:fb:2c:03:4f:91:b5:2d:2d:09:e7:a8:4c:f8:
e6:55:8c:a9:15:e0:f4:5e:71:09:7c:39:60:3d:f4:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:4B:4B:79:74:76:EC:1C:3D:2E:49:23:5F:A0:E4:DA:8E:8D:22
X509v3 Authority Key Identifier:
keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:5c:83:af:f0:ba:10:b3:7a:70:09:65:70:67:5a:4e:8e:
a4:a8:99:73:02:67:3a:f7:03:d4:95:b6:3c:99:87:5d:2e:cc:
68:96:9e:f0:c3:5a:21:64:ae:25:79:f8:d6:bf:8d:65:f1:63:
47:e0:ed:27:82:b2:ab:16:ad:a3:19:31:29:0c:4a:0e:ac:88:
80:2c:f4:63:b4:f6:11:e2:49:88:30:ba:a5:ee:7a:76:d4:60:
71:57:fe:80:41:94:fb:52:e8:7d:50:82:d2:d6:d7:c5:5b:9f:
eb:1d:01:63:b1:89:23:39:66:1a:f4:50:40:3b:be:ef:e4:4b:
0f:96:0e:5d:9c:24:4f:93:4f:e0:1a:e8:1c:4d:33:56:b9:ea:
03:3e:fa:7e:c6:1b:6b:d1:84:39:ca:32:d6:67:34:23:38:7e:
9c:2d:20:7f:f4:c0:95:31:bd:c1:3a:73:11:c1:0f:54:75:dc:
01:a0:cd:85:85:98:4c:de:23:00:b3:a7:4b:c5:e5:3f:45:7a:
99:02:58:15:74:8e:cc:58:cc:b6:2c:9d:31:8c:4e:4a:a8:8a:
36:30:6d:70:56:70:10:53:3a:89:b2:dc:dd:b5:31:13:03:d9:
38:03:13:91:bc:c8:1e:d1:90:c8:03:9e:d6:db:68:5a:ac:c3:
67:c4:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:22:12 2026 by rpki-client