
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: 1vR6lIeXyNPSzdUzoUuXaJUXnNZ281u1NW4+84QFnpk=
Subject key identifier: 52:7A:8D:D6:82:61:0D:12:E4:5A:C1:9A:C0:E0:70:A5:16:7E:9F:12
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 42CD1A87027E90E24554D499D924555898F63EA2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: 0105
Signing time: Sun 15 Nov 2026 02:47:34 +0000
Manifest this update: Sun 15 Nov 2026 02:42:34 +0000
Manifest next update: Mon 16 Nov 2026 04:38:34 +0000
Files and hashes: 1: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: ndpF1ZzSsRw8i0cy747uhUWzO7J5WVqy2nPk2dmVtoM=)
2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 04:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cd:1a:87:02:7e:90:e2:45:54:d4:99:d9:24:55:58:98:f6:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: Nov 15 02:42:34 2026 GMT
Not After : Nov 16 04:38:34 2026 GMT
Subject: CN=527A8DD682610D12E45AC19AC0E070A5167E9F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:04:71:d6:d0:7c:dc:f9:ad:23:37:04:c9:
bb:2f:0d:8f:b1:be:08:86:6d:3d:23:ea:4d:63:ac:
a0:67:b6:61:44:98:d7:ea:ad:33:52:4f:5e:21:5a:
2f:c4:96:8b:d8:2c:fb:68:07:f1:92:f4:33:a3:4c:
72:f6:77:01:b3:68:17:40:b0:80:5b:5e:4d:a3:46:
11:16:f0:98:c4:84:e2:01:22:78:10:cd:4d:6a:63:
54:70:ae:36:e7:87:31:9f:89:19:56:00:f0:b6:22:
fc:a4:9f:c4:ce:f9:d4:c3:88:81:22:a2:fb:3e:d0:
cf:9f:23:b5:7f:a5:fd:ad:4a:07:6d:63:6c:b4:f6:
78:09:9d:c5:ae:42:30:d3:62:28:bd:d0:41:bc:88:
30:12:bb:23:39:69:d6:eb:b8:32:be:ce:ce:88:8f:
55:da:39:b2:8d:7f:cf:54:0c:7b:ef:9f:89:ad:98:
0d:70:30:c8:e4:40:f5:8f:75:d4:50:05:c3:4b:f9:
70:57:e5:bf:58:2b:88:ff:30:a7:21:ba:56:2f:fe:
b9:7a:2a:e3:26:55:44:cc:a1:cb:fb:30:f9:32:72:
45:fd:7f:33:40:e6:b8:3f:0e:57:63:3a:0a:61:ff:
d7:a0:aa:7b:55:dc:9b:6a:07:7f:0b:8c:c3:5d:b5:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:8D:D6:82:61:0D:12:E4:5A:C1:9A:C0:E0:70:A5:16:7E:9F:12
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:e2:45:12:76:fd:aa:b0:3c:c1:cd:b0:3a:4d:32:db:c7:
ef:e7:8a:4f:d4:dc:cf:50:9c:8a:2c:be:59:eb:c0:b0:cb:34:
e8:68:b5:fe:89:69:89:f3:71:a8:be:e2:20:fe:a1:b5:04:d9:
23:1c:c8:23:d8:a1:29:c3:03:54:be:70:66:77:61:6e:88:d5:
1b:88:4a:15:1f:e5:d1:14:70:81:08:fd:ca:d8:c8:ce:52:a3:
28:a7:ee:c5:d0:a5:ab:e6:aa:45:af:e7:3a:3f:5a:a5:77:dc:
26:ab:02:22:83:3d:2c:92:b3:41:40:f4:87:86:04:b4:18:c4:
8b:07:19:2f:27:55:b6:28:01:e2:b7:82:ec:28:da:7c:aa:41:
70:39:1b:dd:3d:2a:4a:dd:f0:e8:df:d7:e9:0f:b1:d8:2d:ac:
2a:39:c1:22:fe:cd:6a:78:b3:bc:f7:19:76:4a:55:90:fa:2a:
30:29:99:32:a9:78:e0:33:61:61:53:90:ce:df:70:5b:24:23:
83:ea:c6:ea:a0:2d:30:a2:33:ac:a4:77:82:8d:5e:d3:64:1c:
95:09:3e:39:4a:4e:f4:4f:b0:19:a1:fe:5e:4a:89:47:69:15:
b8:40:28:03:d7:ba:e3:8d:0c:b2:71:cc:4a:81:4c:03:ab:32:
33:98:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:58:39 2026 by rpki-client