
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft
File: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft (raw, json)
Hash identifier: bPaNb2zsbp2aJ9dD/5w3zZHqdsPh9FbUthwKKVUC7hI=
Subject key identifier: 28:29:92:26:F0:15:BF:AA:B0:F2:20:AA:FD:7B:9A:4B:CB:43:B1:65
Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64
Certificate issuer: /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764
Certificate serial: 58677F56298C4606F498485963E82F9C5039E191
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft
Manifest number: C0
Signing time: Mon 21 Sep 2026 21:53:45 +0000
Manifest this update: Mon 21 Sep 2026 21:48:45 +0000
Manifest next update: Tue 22 Sep 2026 22:19:45 +0000
Files and hashes: 1: FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl (hash: ZayeWOu/RD01EqVRT6xgzl4ObsrAuA/3JHvRsmLohQ4=)
2: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: zLgVQYA5xLAWWDvEEhgF6F2kUEICyQjNZMvsMOscIV8=)
3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl
rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:67:7f:56:29:8c:46:06:f4:98:48:59:63:e8:2f:9c:50:39:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764
Validity
Not Before: Sep 21 21:48:45 2026 GMT
Not After : Sep 22 22:19:45 2026 GMT
Subject: CN=28299226F015BFAAB0F220AAFD7B9A4BCB43B165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:b2:e8:c6:8d:12:b1:74:7f:2c:0e:eb:ee:
68:7a:b6:43:2d:ab:e9:e5:ac:e8:ac:c4:e7:71:e5:
e8:55:cf:6f:32:00:9c:90:4b:7d:28:e4:3d:01:27:
b0:70:57:ae:40:02:27:58:db:bd:5b:82:98:58:a7:
bb:d9:d8:7a:e9:06:b5:1c:6b:11:d1:aa:bb:f6:05:
41:94:c6:be:be:e2:bd:3d:d0:d6:40:d1:a5:3d:31:
7e:bb:ea:72:06:ab:a8:91:b8:59:40:34:e5:9a:f2:
db:ea:14:c6:49:5f:2d:32:97:91:ae:a8:e7:11:e8:
e1:f1:41:12:55:49:0d:29:ae:6e:92:0b:27:ef:f0:
1a:04:e5:a7:bf:03:11:22:03:bd:13:55:b8:4a:24:
da:22:05:a9:db:a1:3a:27:b7:f2:35:81:22:f5:9f:
e9:27:8b:c8:df:2a:c3:50:33:4f:bc:ab:59:62:57:
b7:84:8b:78:fb:bc:98:08:c6:3b:60:ce:4e:6f:17:
55:ac:8c:5a:ad:87:28:5e:58:1f:09:6e:2b:8a:49:
fd:2a:e9:37:5c:2d:35:39:54:92:27:5a:20:3e:1d:
4d:b1:a2:fd:48:60:d1:8d:3d:50:c5:24:bd:cd:3c:
69:c4:a7:e4:25:99:0a:81:5a:8f:2b:6e:0d:68:f0:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:92:26:F0:15:BF:AA:B0:F2:20:AA:FD:7B:9A:4B:CB:43:B1:65
X509v3 Authority Key Identifier:
keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:33:17:cb:7c:96:3c:a8:1a:e7:32:0b:9f:a8:a2:a6:dd:
9d:de:47:b5:56:06:7a:b5:8c:18:ff:4e:a9:05:d0:60:0a:16:
48:70:ba:d3:9e:07:40:db:96:e5:da:1e:79:af:89:31:5c:66:
fe:a3:c5:08:69:6e:d5:39:7e:c4:9a:54:2e:96:48:d8:f8:5b:
05:96:80:a2:2c:52:0a:6d:e1:a7:e0:f5:97:ed:71:c2:fb:6f:
07:a9:3c:03:3c:8c:92:a1:2a:bf:96:87:e7:f3:4b:ca:06:2b:
a6:e4:5d:d6:a4:33:0f:a8:14:b9:b9:42:7c:62:d2:4e:60:31:
37:27:5d:34:9b:26:89:de:d7:53:08:18:5f:0d:ff:28:e6:11:
7d:56:db:d8:1d:93:6b:7c:5d:bf:13:c5:9d:86:f9:9e:1b:98:
2c:61:0e:9d:8c:af:90:41:04:f4:b6:4f:bf:79:f4:92:f5:5f:
cd:17:0f:28:40:72:7a:67:ae:71:e4:86:c3:48:b2:50:b5:ed:
d1:e8:f1:64:40:78:4a:ca:47:39:62:6d:a7:7d:c4:26:a1:b7:
56:ef:20:6b:3e:ec:79:37:55:59:d8:85:27:88:7e:72:9d:3c:
19:95:94:f0:43:28:27:26:a7:0e:f1:af:ae:11:3b:af:8c:ff:
48:9f:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:34 2026 by rpki-client