
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
File: FDC83C8199C76D091E2AD9BFB460926573605DAC.mft (raw, json)
Hash identifier: aZbQAMm/8DnGS18wNMdWtY9i4lwFPq6YcqOxrkzMjmc=
Subject key identifier: 7F:A5:5F:FF:44:12:72:F2:DA:10:88:30:49:BF:93:AB:F9:33:3E:73
Authority key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
Certificate issuer: /CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Certificate serial: 6FA39B83DB4B8835DDE8EDA079659CF4D9C4E09C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 01:59:48 +0000
Manifest this update: Tue 12 May 2026 01:54:48 +0000
Manifest next update: Wed 13 May 2026 05:27:48 +0000
Files and hashes: 1: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: HY83csogytT2w209Tl/I/aSdwdqfc1PIHPj/kf5OuyA=)
2: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: Wv5QOv95KoK5JTFM1x127ZBoU6vSgAO7ost95PMM9yg=)
3: FDC83C8199C76D091E2AD9BFB460926573605DAC.crl (hash: LE21TbKA9elIBwXT5NZ4wENqI25JAMFxCr/KWqce7oo=)
4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: JADL0Usn7OFvGwpQCK4O1osTVNr3N2EptiwcYbNDB6U=)
5: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: gJ5hm9cILEEKSm4l7xrROyvEaAPh9vqFVYGE5hwRgjc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a3:9b:83:db:4b:88:35:dd:e8:ed:a0:79:65:9c:f4:d9:c4:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC
Validity
Not Before: May 12 01:54:48 2026 GMT
Not After : May 13 05:27:48 2026 GMT
Subject: CN=7FA55FFF441272F2DA10883049BF93ABF9333E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:eb:ed:65:80:af:5c:8f:73:77:63:a2:47:
98:73:61:81:9d:15:a7:2a:07:4b:b2:73:06:c0:68:
50:a1:b8:9a:3e:e3:d5:88:85:c6:49:b0:5e:48:bb:
8c:6c:50:97:a0:b0:7f:18:97:c1:ee:33:27:62:e7:
c5:8a:71:a6:6c:c8:47:db:1b:f2:41:89:36:27:d0:
dc:9b:3b:62:ce:2c:e0:a3:3c:73:32:bc:b2:49:04:
26:a4:b1:3c:00:3e:3c:99:56:21:cb:02:c2:b3:32:
f2:96:c8:b2:02:d6:1b:e0:3e:80:85:3f:f7:17:cd:
81:99:38:93:6c:b0:6f:e8:ae:0f:a1:33:c2:f1:c2:
37:fb:99:b8:fc:35:88:65:d4:5f:fd:33:ce:17:b2:
9e:6c:5d:4f:22:85:87:1c:0f:8e:ea:dc:ac:59:87:
03:5b:ac:65:1e:21:a1:44:91:89:e3:92:73:27:71:
67:ed:a9:dc:f5:0d:bc:57:d3:33:cc:07:d3:87:a4:
2c:e8:70:0d:02:86:04:f9:b7:96:a4:d4:0e:c3:46:
a7:d0:c4:07:bf:7b:fe:62:3f:4a:60:f0:8e:a8:1b:
2b:f5:ce:23:ae:ac:ef:be:6a:9a:0f:de:83:a0:27:
13:23:fb:7c:66:a2:b0:4a:ed:75:57:54:88:59:46:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:5F:FF:44:12:72:F2:DA:10:88:30:49:BF:93:AB:F9:33:3E:73
X509v3 Authority Key Identifier:
keyid:FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:ef:f2:97:0e:72:c3:7f:04:11:18:22:1b:96:d4:2f:89:
a3:51:76:47:1b:c8:a3:7c:4c:e6:28:b6:b7:bd:ec:e6:80:cd:
74:49:90:07:7b:24:41:29:90:8e:54:e9:b9:a3:77:5a:f7:6e:
38:f8:fa:64:c1:78:4d:ad:af:46:9d:65:a9:74:75:87:c2:80:
35:93:a1:8e:f7:1e:b4:d5:37:73:69:b8:05:08:49:bc:56:e2:
b9:c0:11:d4:91:c9:6f:74:e1:b1:cb:ee:88:5b:44:6b:15:c5:
b3:6f:ce:85:42:35:65:73:89:38:ac:11:58:13:78:e1:38:e8:
07:48:83:bf:2e:3f:80:80:40:63:10:49:98:33:db:fd:ad:4b:
0a:60:79:da:bf:9a:1c:fa:ae:3f:67:e5:a0:8f:4a:05:69:a2:
e3:6d:70:49:fa:05:ea:f5:ec:13:4f:4a:49:9e:82:e0:e2:b9:
81:34:71:dd:c8:11:19:2f:0d:cd:43:13:e6:8e:43:01:7d:0a:
21:96:43:e6:49:ca:48:f3:64:7a:8a:58:80:ab:19:c6:22:60:
58:9b:19:a6:ad:c1:5f:26:2f:ec:0a:04:ae:83:2c:25:9a:17:
50:c3:89:93:88:94:7b:d2:72:78:5d:b1:c0:58:c2:d6:3f:d8:
1d:3e:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:56 2026 by rpki-client