
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: NuwvA1GXNBTUQFFCwQXBj/Y5WSEUosdn7Yw5+Yo4sns=
Subject key identifier: CB:62:0C:16:DB:A3:6D:FA:14:A2:59:76:CE:D9:6A:25:4A:CC:E9:60
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 051FA822FBBF3D45184F82DE9D8012BB90425AE5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:10:38 +0000
Manifest this update: Sat 13 Jun 2026 13:05:38 +0000
Manifest next update: Sun 14 Jun 2026 14:14:38 +0000
Files and hashes: 1: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: kLXuYP6mS8N7WOddzXI0RQ/yjC9M6neIsTXmmpxjwfo=)
2: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
3: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1f:a8:22:fb:bf:3d:45:18:4f:82:de:9d:80:12:bb:90:42:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: Jun 13 13:05:38 2026 GMT
Not After : Jun 14 14:14:38 2026 GMT
Subject: CN=CB620C16DBA36DFA14A25976CED96A254ACCE960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:d2:aa:37:3c:b5:6f:b9:b9:98:21:70:d6:
6e:6e:e6:de:3a:88:69:88:27:9a:3c:1b:17:31:fe:
fd:70:8f:c8:b5:b7:d8:25:e3:91:12:c8:d0:a4:fd:
a2:68:c6:47:83:e9:bd:bc:08:60:39:bd:5e:ff:3f:
47:ce:55:c5:5f:6b:0e:f4:8f:91:4b:e7:c7:f9:37:
f9:d1:6d:b9:9e:61:5c:47:ab:47:d0:18:1d:d2:62:
81:42:4f:e4:fc:df:f1:c2:bb:91:9a:24:61:3b:e9:
22:85:7b:35:b5:4e:f8:90:56:4e:9e:7d:72:f1:b3:
d6:70:ee:69:03:9a:92:0c:5c:20:a7:8a:5c:f6:eb:
07:05:69:d1:14:ba:e1:46:af:2b:fd:67:e3:51:e9:
90:ee:ff:f6:ee:19:08:e0:0e:3c:32:9b:49:ea:c2:
a0:c2:3c:eb:f3:d7:c2:c6:67:50:f7:c4:ff:d2:47:
2b:bb:05:c7:95:99:f3:ef:82:fd:c0:07:0b:49:00:
14:b6:f4:8c:7e:47:1c:5e:db:4b:53:9a:19:18:63:
8b:bb:c1:1f:1d:72:98:bb:c1:24:91:d2:04:0d:f8:
00:2f:bd:cd:83:aa:5e:df:07:c4:37:16:4a:d4:76:
1c:53:fc:2e:ae:04:12:97:28:82:cd:b4:cd:15:53:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:0C:16:DB:A3:6D:FA:14:A2:59:76:CE:D9:6A:25:4A:CC:E9:60
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5d:8d:a8:52:4f:fb:91:a0:86:24:85:fc:c7:fe:09:79:06:
f9:40:df:0c:f2:3d:dc:fd:37:f3:f0:43:bb:59:f4:f0:43:17:
09:01:71:56:c4:b0:d8:e3:bd:da:d9:cd:9c:d0:07:10:7d:1d:
7e:36:09:4a:ca:74:8c:6b:5a:cb:8c:d6:7b:bb:04:11:a8:6e:
2c:c6:bf:be:49:1f:dc:77:bd:bd:fa:3d:2a:12:cb:5b:28:7e:
00:2a:af:05:e1:31:b6:45:69:33:66:d9:c2:c5:a5:11:c7:3f:
92:75:56:fa:6e:03:a9:3a:34:b2:2c:6d:36:83:57:84:9c:33:
89:56:90:84:7b:24:b3:d1:1f:87:32:36:22:80:99:88:97:80:
bd:a6:61:2d:97:7c:d0:e8:2b:fb:0b:a5:b6:f6:42:fe:32:55:
a8:21:ce:3e:9f:8c:91:49:ca:30:e2:e4:9f:f3:6e:25:06:f2:
4d:7e:c0:3a:a1:78:fc:02:0a:58:89:36:cf:6e:fc:ec:73:82:
e8:b8:0a:04:46:84:a6:da:a1:22:04:5f:7b:b0:cd:66:4a:09:
5b:7a:a6:c5:91:55:4e:d2:a3:3a:09:8c:a8:53:6d:20:9c:11:
9e:97:59:4d:69:cd:cb:80:e9:3a:59:19:21:8b:95:e9:1b:45:
50:16:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:18:22 2026 by rpki-client