
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: yGJO+scXj4RoXhdA9m74vloeQTfxSOBTYvQHudGnDSY=
Subject key identifier: 19:59:96:31:B9:AF:F5:1F:EB:FE:50:75:57:98:67:C7:06:D5:56:33
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 53BB322919EE6AC2A5E38628B76CDF795F0AA0B2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 00:36:53 +0000
Manifest this update: Wed 29 Jul 2026 00:31:53 +0000
Manifest next update: Thu 30 Jul 2026 02:47:53 +0000
Files and hashes: 1: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: fyZMBEtlrQ2TqSTjlRavs4cf6O01uQpp13gPGjxjonw=)
2: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
3: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bb:32:29:19:ee:6a:c2:a5:e3:86:28:b7:6c:df:79:5f:0a:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: Jul 29 00:31:53 2026 GMT
Not After : Jul 30 02:47:53 2026 GMT
Subject: CN=19599631B9AFF51FEBFE5075579867C706D55633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:2d:38:48:c4:2a:32:ba:09:9d:b1:f3:49:
4e:f4:5e:4f:49:ae:30:46:01:f9:a9:0f:11:27:1b:
1f:ed:5a:db:35:ba:3c:b6:b9:40:0e:5e:37:69:80:
ea:2b:12:3f:e1:58:97:28:f8:76:cd:16:88:e2:5a:
7b:50:b0:01:ab:33:b6:74:04:87:40:ee:a4:6d:3b:
84:61:8f:35:9f:e6:58:0f:49:74:99:71:84:ed:a8:
ff:04:02:fc:d1:60:d8:62:54:e1:f9:b0:58:93:ee:
53:ed:cb:5a:51:3c:44:83:2b:2d:34:62:3c:0c:56:
5c:e2:83:d3:be:c1:a2:49:59:b9:66:73:d3:38:df:
dc:e6:d8:c1:04:4c:2e:ac:2b:9b:c6:9b:3a:a5:d8:
f6:c9:55:bf:98:59:39:40:f6:7d:e6:cc:5a:cb:65:
6d:58:db:67:2a:1f:5f:58:97:27:26:f3:6a:d0:c6:
ad:b2:cd:cc:92:2a:ab:ac:b1:8b:73:fb:21:12:d0:
d3:aa:1d:26:2a:0c:f5:ac:a8:53:2e:0a:3e:11:16:
df:19:57:cd:1a:17:fa:19:e7:6a:5d:b7:63:45:ed:
35:0a:01:d4:44:39:f3:93:98:7e:9f:dd:96:4b:2e:
ae:03:04:8a:af:3d:da:a7:f4:b5:c1:28:4f:93:d8:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:96:31:B9:AF:F5:1F:EB:FE:50:75:57:98:67:C7:06:D5:56:33
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:38:25:3a:00:eb:90:e9:91:6c:b5:4a:43:56:94:b9:9e:
05:a8:76:ff:70:41:f1:ee:28:2d:f0:ca:b9:5d:cf:20:86:21:
00:86:9d:d9:d3:4f:3a:b1:4d:b5:d7:5e:a2:04:0b:3a:46:f7:
d8:9c:84:d8:a1:6a:e3:59:18:2f:a6:09:d9:d1:c6:0e:2a:bd:
a3:4c:85:6f:37:38:80:b7:cd:34:46:83:96:72:e4:b4:86:c6:
1b:d4:d6:d7:76:f5:34:b6:e3:e1:29:c1:79:30:4d:f3:b6:44:
d6:fd:5a:e2:db:c3:5f:1d:73:bf:10:08:1d:03:09:8e:63:ee:
4c:ed:82:b0:58:3d:3f:82:f9:34:90:6b:a2:00:6a:65:90:c5:
d6:43:80:8b:05:77:4b:9e:9f:86:fd:c3:51:6c:44:0a:c3:45:
e2:b6:85:fc:c3:8f:4d:10:72:49:14:10:76:f5:b7:42:80:4a:
a9:c9:ca:b2:75:8a:36:00:f7:ef:6f:d4:a2:7a:aa:c7:5a:99:
24:b6:b4:ee:5f:e9:3f:f8:68:47:f3:38:a4:d5:02:6a:1c:5a:
fa:5c:d0:13:34:9a:1d:9f:15:7b:e2:46:37:37:e2:d4:87:96:
4f:3e:29:c9:09:70:ec:d2:58:97:06:93:05:62:03:2c:14:01:
4d:02:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:41 2026 by rpki-client