
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
File: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft (raw, json)
Hash identifier: iyWpu8rhcfUBzGwpNNHlunudLFjluTqmh4O/rGUufRQ=
Subject key identifier: 8A:55:3A:1C:C9:85:8B:80:55:26:0C:C4:C1:D6:FA:55:85:79:58:3B
Authority key identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
Certificate issuer: /CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Certificate serial: 4BA04A0E84B2AF98DDF5050C49185AABE74C156C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
Manifest number: 0100
Signing time: Mon 09 Nov 2026 16:05:55 +0000
Manifest this update: Mon 09 Nov 2026 16:00:55 +0000
Manifest next update: Tue 10 Nov 2026 17:55:55 +0000
Files and hashes: 1: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: fbSCqhwvsaol0lBcmUKKDf4ORcQLNjmes/NlWyieIPw=)
2: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl (hash: iQtH42ULF+bW4k0FM5CJry15jvlowwdPiEt45sq1544=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a0:4a:0e:84:b2:af:98:dd:f5:05:0c:49:18:5a:ab:e7:4c:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Validity
Not Before: Nov 9 16:00:55 2026 GMT
Not After : Nov 10 17:55:55 2026 GMT
Subject: CN=8A553A1CC9858B8055260CC4C1D6FA558579583B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:e1:6b:6d:03:b5:6c:b6:2d:90:01:40:52:
80:91:5b:14:62:be:4b:8c:a8:c3:58:30:88:20:62:
b4:6d:06:db:a5:fa:9f:4d:ea:bc:6d:b2:19:46:e7:
03:1c:78:01:27:1c:d6:80:a7:3d:69:9c:a8:25:57:
33:68:b9:e6:7e:ea:65:28:45:b1:15:98:12:3f:49:
91:4d:0b:55:53:9d:bc:fc:cb:1a:34:23:42:92:d5:
c4:80:81:9c:ee:98:f3:40:ed:71:1a:96:a5:3b:b1:
52:1b:c2:1b:90:a9:dc:df:c2:b5:0a:c6:57:1a:d6:
89:58:88:65:ec:45:05:b8:70:88:bf:22:0f:9f:be:
64:4e:d7:a1:0e:d0:aa:f5:72:0d:2f:1f:36:7c:cf:
28:d8:a9:06:36:0b:d2:dd:8d:ae:a5:15:c1:e4:e7:
a1:c2:df:84:42:5a:5d:77:c9:28:ed:b6:7b:3c:1f:
b2:98:fe:85:cb:c4:24:4f:dc:60:07:56:36:9a:48:
07:bd:d3:b0:21:ed:09:46:0b:cf:62:46:d5:aa:06:
d0:e1:8e:e5:e3:23:66:65:65:2b:bf:ca:c9:be:91:
58:65:d6:2f:c3:b2:f4:a3:78:c3:bb:bf:82:5a:02:
99:89:51:65:4f:67:2b:78:5b:05:10:f2:31:83:4e:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:3A:1C:C9:85:8B:80:55:26:0C:C4:C1:D6:FA:55:85:79:58:3B
X509v3 Authority Key Identifier:
keyid:FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:88:62:0d:a4:40:fa:7d:f8:81:9b:3a:65:3a:55:39:5f:
51:28:9b:bb:0c:ed:88:c6:5a:48:56:20:f3:bd:f9:9c:a6:ab:
8b:81:25:8e:ee:ac:21:bd:3f:51:d2:4c:00:63:0a:ec:75:20:
13:b8:37:4e:b8:37:9f:7c:22:f9:87:d4:d2:75:92:2d:3e:b3:
fe:0a:2c:df:ca:82:44:41:b9:e0:ba:d1:18:85:9a:73:c5:21:
cc:0e:e7:ba:73:dc:26:aa:24:cd:7d:d9:df:ee:3d:e0:fe:1f:
04:ef:d4:d9:a8:89:dc:07:c1:1c:49:35:d5:e1:ca:c4:a0:24:
ab:03:e2:ac:f2:18:21:c6:57:23:50:92:fe:f0:87:6a:d8:39:
3f:15:21:05:4a:89:55:95:f5:05:66:30:dd:8d:27:a1:2f:71:
38:8e:9f:9c:07:25:cd:f1:3c:40:c6:3e:59:97:cb:84:7b:55:
49:ec:c5:1f:13:66:9b:31:27:1d:5e:6c:af:fc:00:73:91:1f:
7d:6f:92:eb:c8:b9:1e:80:77:04:35:60:4d:75:b4:a2:38:e5:
e2:02:e5:c9:88:1c:46:d1:61:b4:76:14:69:7d:ef:09:eb:80:
7d:c7:db:37:b9:a9:01:d8:5e:db:72:e4:7b:e7:29:f7:be:aa:
90:d9:97:24
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUS6BKDoSyr5jd9QUMSRhaq+dMFWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2QkMwMTAyNjAzNDcwNUJBNUQxNEVCMzFDRDIzQjZD
M0Y4NkI0NjAeFw0yNjExMDkxNjAwNTVaFw0yNjExMTAxNzU1NTVaMDMxMTAvBgNV
BAMTKDhBNTUzQTFDQzk4NThCODA1NTI2MENDNEMxRDZGQTU1ODU3OTU4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIeFrbQO1bLYtkAFAUoCRWxRi
vkuMqMNYMIggYrRtBtul+p9N6rxtshlG5wMceAEnHNaApz1pnKglVzNoueZ+6mUo
RbEVmBI/SZFNC1VTnbz8yxo0I0KS1cSAgZzumPNA7XEalqU7sVIbwhuQqdzfwrUK
xlca1olYiGXsRQW4cIi/Ig+fvmRO16EO0Kr1cg0vHzZ8zyjYqQY2C9Ldja6lFcHk
56HC34RCWl13ySjttns8H7KY/oXLxCRP3GAHVjaaSAe907Ah7QlGC89iRtWqBtDh
juXjI2ZlZSu/ysm+kVhl1i/DsvSjeMO7v4JaApmJUWVPZyt4WwUQ8jGDTnGrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUilU6HMmFi4BVJgzEwdb6VYV5WDswHwYDVR0j
BBgwFoAU/WvAECYDRwW6XRTrMc0jtsP4a0YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzc0YmNjZDUtMjUyYy00OTQ3LTg3MWItMTU2ZGZmZmU3NzE3LzAvRkQ2QkMwMTAy
NjAzNDcwNUJBNUQxNEVCMzFDRDIzQjZDM0Y4NkI0Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRDZCQzAxMDI2MDM0NzA1QkE1RDE0RUIzMUNEMjNCNkMzRjg2
QjQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc0YmNjZDUtMjUyYy00OTQ3LTg3
MWItMTU2ZGZmZmU3NzE3LzAvRkQ2QkMwMTAyNjAzNDcwNUJBNUQxNEVCMzFDRDIz
QjZDM0Y4NkI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAADZiGINpED6ffiBmzplOlU5X1Eom7sM7YjG
WkhWIPO9+Zymq4uBJY7urCG9P1HSTABjCux1IBO4N064N598IvmH1NJ1ki0+s/4K
LN/KgkRBueC60RiFmnPFIcwO57pz3CaqJM192d/uPeD+HwTv1NmoidwHwRxJNdXh
ysSgJKsD4qzyGCHGVyNQkv7wh2rYOT8VIQVKiVWV9QVmMN2NJ6EvcTiOn5wHJc3x
PEDGPlmXy4R7VUnsxR8TZpsxJx1ebK/8AHORH31vkuvIuR6AdwQ1YE11tKI45eIC
5cmIHEbRYbR2FGl97wnrgH3H2ze5qQHYXtty5HvnKfe+qpDZlyQ=
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:35:35 2026 by rpki-client