
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: s/SWGbo4EfZADUPUMjpRXveWhFBxeojMnUdI3d5B/4M=
Subject key identifier: 5E:AF:89:8A:9C:D3:F9:4C:FA:77:7F:AC:D8:7A:5F:17:45:FD:80:85
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 78636B69A63B308CED64DADC56A190C4EFC433F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 05:58:19 +0000
Manifest this update: Wed 23 Sep 2026 05:53:19 +0000
Manifest next update: Thu 24 Sep 2026 08:51:19 +0000
Files and hashes: 1: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: vNvYmSGJyISCnPadiY3Iq6jdYH/QtrV2EgvtdBLK/aU=)
2: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
4: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:63:6b:69:a6:3b:30:8c:ed:64:da:dc:56:a1:90:c4:ef:c4:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: Sep 23 05:53:19 2026 GMT
Not After : Sep 24 08:51:19 2026 GMT
Subject: CN=5EAF898A9CD3F94CFA777FACD87A5F1745FD8085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:a9:3f:a1:a4:48:0c:be:0d:5e:f2:55:06:
fe:aa:64:85:74:42:19:07:36:a6:55:21:07:9e:bd:
5f:d2:70:4c:a4:aa:67:56:94:d7:a2:a5:cb:ac:cc:
d4:cb:44:50:73:40:00:f9:be:9a:8c:bd:47:78:de:
fb:76:34:98:e5:5a:4f:38:96:cd:c5:94:c7:59:57:
33:eb:50:e9:00:b3:63:66:ac:11:15:43:50:c3:4f:
28:1a:7e:5b:d2:6c:ff:b1:6f:a9:26:38:af:cb:d2:
d7:51:05:95:42:a0:f2:87:00:67:54:bd:42:a4:d4:
fc:77:f3:5e:2d:0f:d4:6f:70:8a:2c:ed:0b:1d:dc:
c3:e0:b9:83:d1:12:36:d5:88:83:e9:3d:cc:7e:28:
89:3f:02:03:ae:37:b9:28:86:c6:f9:6c:6c:3c:72:
50:a2:cf:47:5b:bc:07:c7:ac:7e:7f:da:c9:98:69:
84:5a:2b:71:61:22:63:d2:f8:d3:a2:c5:89:48:5b:
21:b0:f4:de:6b:65:4e:be:16:c3:ac:f7:8f:4f:bb:
3a:8f:18:83:8e:fa:7d:9a:05:4c:b0:6f:e9:23:51:
d5:41:a0:c1:c0:82:bb:4b:bf:ff:79:41:cb:b3:bf:
22:89:b8:ef:50:0d:64:ed:68:2a:11:6b:e7:b0:70:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:89:8A:9C:D3:F9:4C:FA:77:7F:AC:D8:7A:5F:17:45:FD:80:85
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:84:ba:1b:e3:18:f8:ac:ed:5f:54:d9:c9:06:3a:fd:54:e4:
71:a8:23:0c:16:72:14:aa:90:99:ee:03:53:73:2c:2a:b0:86:
99:1f:0a:ec:f1:87:a7:e2:ea:26:e3:5a:1e:eb:da:48:6f:ac:
94:a0:8b:e7:ac:1e:39:15:9a:c9:14:cc:d4:a9:e6:d5:58:52:
aa:29:ed:16:5f:57:57:d8:21:a1:e5:34:20:d8:a7:1e:2d:d8:
fd:c8:0d:48:68:be:c4:6e:1d:15:a2:39:3e:48:81:c1:80:83:
34:83:7c:e7:6d:41:24:46:82:a4:c9:77:85:69:a3:d2:3f:8f:
08:d2:3b:7a:a7:ab:02:03:70:f8:5e:21:fe:d1:83:a7:af:1e:
88:24:2b:b2:24:96:d6:49:33:62:c2:31:37:33:b5:34:92:85:
76:9d:77:fe:11:3e:83:78:e1:42:cc:58:80:bc:f5:f2:17:8f:
2f:e8:ba:c1:a1:a0:ca:2c:94:03:85:43:61:1c:b0:5f:14:9a:
e5:62:e2:3e:85:f9:b4:55:11:28:c4:37:c5:80:49:36:ca:5a:
60:6c:7c:13:5c:e4:9a:62:63:86:ee:9c:42:f0:65:86:07:2f:
ed:fe:60:64:b8:af:49:f7:60:91:7e:c6:63:20:39:e1:45:d7:
f8:1f:3e:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeGNraaY7MIztZNrcVqGQxO/EM/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3
MzYwNURBQzAeFw0yNjA5MjMwNTUzMTlaFw0yNjA5MjQwODUxMTlaMDMxMTAvBgNV
BAMTKDVFQUY4OThBOUNEM0Y5NENGQTc3N0ZBQ0Q4N0E1RjE3NDVGRDgwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+qk/oaRIDL4NXvJVBv6qZIV0
QhkHNqZVIQeevV/ScEykqmdWlNeipcuszNTLRFBzQAD5vpqMvUd43vt2NJjlWk84
ls3FlMdZVzPrUOkAs2NmrBEVQ1DDTygaflvSbP+xb6kmOK/L0tdRBZVCoPKHAGdU
vUKk1Px3814tD9RvcIos7Qsd3MPguYPREjbViIPpPcx+KIk/AgOuN7kohsb5bGw8
clCiz0dbvAfHrH5/2smYaYRaK3FhImPS+NOixYlIWyGw9N5rZU6+FsOs949PuzqP
GIOO+n2aBUywb+kjUdVBoMHAgrtLv/95QcuzvyKJuO9QDWTtaCoRa+ewcAfPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXq+JipzT+Uz6d3+s2HpfF0X9gIUwHwYDVR0j
BBgwFoAU/cg8gZnHbQkeKtm/tGCSZXNgXawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTA1Zjc2OGItNDIxOC00YzVkLTg5M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5
OUM3NkQwOTFFMkFEOUJGQjQ2MDkyNjU3MzYwNURBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GREM4M0M4MTk5Qzc2RDA5MUUyQUQ5QkZCNDYwOTI2NTczNjA1
REFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5
M2EtMGZmNjk2NTI2NjM5LzAvRkRDODNDODE5OUM3NkQwOTFFMkFEOUJGQjQ2MDky
NjU3MzYwNURBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJuEuhvjGPis7V9U2ckGOv1U5HGoIwwWchSq
kJnuA1NzLCqwhpkfCuzxh6fi6ibjWh7r2khvrJSgi+esHjkVmskUzNSp5tVYUqop
7RZfV1fYIaHlNCDYpx4t2P3IDUhovsRuHRWiOT5IgcGAgzSDfOdtQSRGgqTJd4Vp
o9I/jwjSO3qnqwIDcPheIf7Rg6evHogkK7IkltZJM2LCMTcztTSShXadd/4RPoN4
4ULMWIC89fIXjy/ousGhoMoslAOFQ2EcsF8UmuVi4j6F+bRVESjEN8WASTbKWmBs
fBNc5JpiY4bunELwZYYHL+3+YGS4r0n3YJF+xmMgOeFF1/gfPsw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:14 2026 by rpki-client