
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
File: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft (raw, json)
Hash identifier: mTr8KMZaXJ5O++7nk88c1pyjjXP3F42pKOWI8XmvuRs=
Subject key identifier: 44:29:D3:C9:DB:AA:55:D0:2B:34:41:3F:F7:FB:EB:CF:EA:64:0F:D6
Authority key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD
Certificate issuer: /CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
Certificate serial: 556534B4A271F322F1D72E5F19A6DABD3B6122
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 04:37:10 +0000
Manifest this update: Tue 22 Sep 2026 04:32:10 +0000
Manifest next update: Wed 23 Sep 2026 06:11:10 +0000
Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: yDrVyoeowwpodsmIoAkE1qIpwTZ6W9Penvq2Oshsmwc=)
2: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl (hash: WrT+ApTS6VkdMCKL5R4Eeb/Z0uaibDpSQACshT2KYBE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl
rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 03:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:65:34:b4:a2:71:f3:22:f1:d7:2e:5f:19:a6:da:bd:3b:61:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD
Validity
Not Before: Sep 22 04:32:10 2026 GMT
Not After : Sep 23 06:11:10 2026 GMT
Subject: CN=4429D3C9DBAA55D02B34413FF7FBEBCFEA640FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:8f:6a:1f:bd:58:55:da:ba:12:eb:68:75:
ed:0d:71:53:18:c4:09:2b:76:a0:16:26:b9:86:61:
9d:80:cb:5e:fb:1f:e4:be:e5:2b:8b:c5:26:04:3a:
42:c8:6e:ab:64:ed:25:a4:e7:43:e9:a2:24:4a:c4:
17:1a:b8:3e:15:3f:19:77:bb:44:06:80:ab:36:6c:
51:9c:a5:c0:56:27:56:04:96:a6:8b:60:e2:24:2a:
a6:18:59:67:35:f4:8b:75:78:5e:1b:e2:35:54:45:
25:1c:d3:09:80:43:84:ae:b1:19:1e:a9:4a:e6:3c:
6f:3c:84:60:49:d8:6a:cd:d9:93:2e:7f:43:e6:55:
c3:9e:32:9f:39:39:3b:22:21:21:d7:b6:c6:62:0d:
c4:ed:fa:7f:e6:6b:03:a0:94:a4:4f:ab:94:bb:db:
fc:01:8d:0a:7e:4c:75:e5:2e:30:d6:46:de:d1:fc:
9f:40:f5:44:40:1b:73:00:a7:29:d9:69:ee:06:13:
4c:bb:53:44:e8:3b:45:27:a3:83:74:2f:b9:24:4d:
5e:f4:c1:82:9a:e8:1a:8d:79:bb:0a:91:b7:1e:e0:
d0:50:7e:d7:da:93:37:51:08:aa:50:34:49:d1:8a:
30:0b:06:b4:5b:79:ca:9d:00:ef:42:f9:8c:aa:3a:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:D3:C9:DB:AA:55:D0:2B:34:41:3F:F7:FB:EB:CF:EA:64:0F:D6
X509v3 Authority Key Identifier:
keyid:FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:96:32:66:96:93:c4:0c:d1:00:d0:3b:6a:05:d1:f6:a6:26:
2d:b3:08:b5:8d:21:ca:b6:46:17:e6:9c:d8:20:2b:ea:57:65:
67:f7:82:56:54:73:7d:32:b6:60:67:92:0c:be:88:8c:c6:d1:
a1:0c:6b:a6:dc:fc:16:90:2c:59:e9:3c:60:e3:02:8c:81:e9:
3d:3c:a3:9f:90:ff:46:8e:5f:84:ae:4e:16:3a:c9:e3:7f:d7:
84:fd:ec:7c:c9:b2:b6:0e:63:21:24:61:ab:c7:91:72:59:b5:
ce:2f:53:1b:bd:17:ed:31:30:55:bc:59:08:12:73:1e:c3:7a:
42:f8:62:90:2d:2e:66:1a:c6:5c:a3:9d:2e:43:00:b1:ae:90:
74:cd:c2:dc:f7:84:ec:6f:32:b5:14:ae:19:f3:db:b4:34:0a:
64:20:d9:8a:10:c0:dd:b2:a4:a1:a4:43:dd:f1:dc:51:56:03:
c5:a6:db:db:b2:bc:ec:d2:c7:eb:61:69:77:d8:5f:3f:bb:84:
bb:8f:11:e0:f3:95:2b:46:85:0a:22:11:f2:32:3a:70:67:47:
95:4a:e8:a3:2c:32:e7:34:35:3e:29:d5:dc:10:81:94:cc:fc:
22:ef:c6:64:6a:bf:92:88:7f:38:f6:1d:f5:3d:6f:e5:ef:0f:
36:f2:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:12 2026 by rpki-client