
$ rpki-client -vvf rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
File: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft (raw, json)
Hash identifier: xuG+drx8U59mxzdSMLMNIe313HsRNxE1YrciaUEk/ac=
Subject key identifier: 44:67:88:5A:40:D7:0F:20:2C:B7:83:DA:1A:BD:38:59:09:7C:7E:C5
Authority key identifier: FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
Certificate issuer: /CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Certificate serial: 5AEF31B806F3ED6DCB7BF2083DEB3A35E87CABC2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:08:09 +0000
Manifest this update: Wed 17 Jun 2026 00:03:09 +0000
Manifest next update: Thu 18 Jun 2026 04:04:09 +0000
Files and hashes: 1: FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl (hash: 0y/aMNIx/CUosZwj8ubE//0Z7nUK348xleMtQ15xFFA=)
2: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: zgtrY5nvzrcyU/ntTybDgmO63b7QkAMGZiL13SPjEp8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ef:31:b8:06:f3:ed:6d:cb:7b:f2:08:3d:eb:3a:35:e8:7c:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB
Validity
Not Before: Jun 17 00:03:09 2026 GMT
Not After : Jun 18 04:04:09 2026 GMT
Subject: CN=4467885A40D70F202CB783DA1ABD3859097C7EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3b:ef:91:c3:a7:93:5f:3e:e0:68:a0:a4:46:
71:28:21:c7:97:fd:44:af:8d:58:9b:cb:0f:30:93:
e4:10:d9:f6:60:7a:99:14:a8:b8:7a:1b:96:63:f8:
d9:cd:2e:a2:58:e4:17:d1:e5:b5:1d:45:86:ed:22:
81:83:7d:03:bd:75:e4:de:51:4c:5c:65:84:c9:9c:
1e:9d:db:c3:39:11:db:b0:4c:c6:77:18:6b:a8:f4:
57:11:8f:1b:ce:60:6a:ec:b1:2b:99:98:6c:23:16:
2b:4c:ec:18:ba:c6:f0:68:8e:a4:b1:7f:36:7a:e0:
bf:dd:ff:05:9c:5c:d2:6d:73:73:94:bf:6e:4b:8d:
0c:5e:4a:6c:f1:b1:17:6d:88:9f:74:00:ed:88:3a:
55:2b:ab:b1:8e:6b:e5:fa:5a:1c:b0:bc:8e:cd:9e:
c7:39:f5:41:cc:5b:ff:d7:d2:48:6f:92:f2:a1:f5:
ae:12:ca:0c:9b:19:0d:c9:d2:98:27:15:58:d1:20:
3a:3d:ea:51:c0:3a:27:37:71:14:b9:b9:72:74:56:
fd:b9:c6:b7:50:f7:8f:66:01:f1:ab:b0:8a:dd:f0:
3b:c9:b1:90:62:66:78:ec:dd:74:b1:d7:43:8a:8c:
93:fc:3d:b7:49:9c:f5:c4:3f:40:fb:11:e6:9f:87:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:88:5A:40:D7:0F:20:2C:B7:83:DA:1A:BD:38:59:09:7C:7E:C5
X509v3 Authority Key Identifier:
keyid:FD:D5:42:AC:0E:A5:AB:4F:83:D0:C6:A8:63:C5:D5:B6:A1:30:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/FDD542AC0EA5AB4F83D0C6A863C5D5B6A130E1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bc:2e:d2:52:d0:14:7c:60:67:08:d5:67:03:22:e5:d4:ad:
98:c2:47:c3:60:1c:fd:cb:e2:0b:a8:77:91:7e:2c:19:15:0d:
93:72:82:7d:5e:44:82:9a:b5:7c:6b:8e:35:b2:98:a4:8a:2d:
25:92:91:b4:0b:01:29:ba:38:bb:b1:87:98:5a:dd:53:7d:8b:
cc:1c:30:76:d0:05:c7:eb:7c:66:52:cb:f5:f7:0b:f8:2e:59:
75:c8:68:9f:11:17:2d:4c:88:b9:66:c9:63:c0:e3:8f:3a:cb:
c3:7d:fe:13:a1:33:38:ff:d7:d3:4d:a9:c0:b3:f9:2d:3f:d2:
ff:51:0a:51:17:85:d1:89:08:e1:a3:87:17:27:26:d8:83:f7:
67:cf:08:6b:41:92:fe:81:55:e7:a6:9a:dd:a6:7b:ff:d5:10:
60:15:ee:f6:77:41:b3:d1:5f:69:9b:90:18:ae:03:9d:40:f4:
e0:2e:a4:f5:67:69:dd:5b:5f:a3:8f:86:6c:53:9a:76:39:af:
24:ab:93:93:fd:32:2c:0a:75:4f:d0:e2:ec:20:22:dc:f4:b6:
1e:9d:c6:66:50:50:2d:e4:a9:bf:12:d4:fb:d2:26:72:4c:9c:
37:51:42:10:bc:36:86:7d:b3:0d:df:3a:dd:31:2a:ce:1f:6e:
96:ad:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:03:03 2026 by rpki-client