
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
File: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft (raw, json)
Hash identifier: N3qmaJ/eERi5IViYulDeNkVN2U6ubo29gqxtOwHaPjE=
Subject key identifier: 59:E1:EE:6E:94:4D:2C:7C:59:93:D8:FF:B1:F7:3D:B5:00:54:FF:0E
Authority key identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7
Certificate issuer: /CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
Certificate serial: 6ADF3A373C886265FC27E6434B6F43D14CD268E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 17:37:06 +0000
Manifest this update: Fri 25 Sep 2026 17:32:06 +0000
Manifest next update: Sat 26 Sep 2026 20:37:06 +0000
Files and hashes: 1: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl (hash: fla8boTRWjZn7jo2szz11hTV/rZUcgnv0dtY9OHln/U=)
2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: fXBAdM3eV/OnDDNzfHAaJqAymYnadEFB3GVcvsNkVi0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl
rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:df:3a:37:3c:88:62:65:fc:27:e6:43:4b:6f:43:d1:4c:d2:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7
Validity
Not Before: Sep 25 17:32:06 2026 GMT
Not After : Sep 26 20:37:06 2026 GMT
Subject: CN=59E1EE6E944D2C7C5993D8FFB1F73DB50054FF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:08:a5:fd:ef:7f:fd:05:01:27:d0:00:20:
b3:32:14:86:27:44:2d:0c:a7:7a:2e:82:99:35:6d:
d6:be:cf:a8:46:cb:8a:80:76:87:c3:58:8d:9e:ae:
ed:20:8c:39:b4:37:0a:da:16:32:6a:cd:4b:27:d5:
7e:f6:f9:e2:9e:76:b2:11:4a:2d:43:91:38:cf:94:
76:ae:88:0d:69:61:74:49:bc:2b:3c:59:3d:6d:85:
ab:a0:5a:f2:96:96:7f:f2:22:a9:1a:4a:ff:39:e0:
5a:7e:29:2a:43:b7:61:42:13:ae:89:76:5f:02:9c:
e5:9f:7b:cd:f2:06:9f:67:6b:46:4f:0f:d7:26:1d:
6d:7d:2d:1f:a8:ac:ed:41:e4:06:cd:93:c8:5e:bb:
3b:8c:68:85:4f:3f:c5:94:44:91:02:63:52:8a:3b:
fd:70:89:c7:b4:ab:21:3a:3f:de:a6:f4:d7:a6:c4:
09:92:35:95:75:d5:88:43:b6:98:ea:24:e4:58:85:
40:ce:df:ba:70:eb:01:47:ec:54:e4:5a:a4:10:6a:
da:ac:f9:f1:c1:5b:d8:4a:64:71:7a:1e:04:d9:57:
4a:5b:03:69:a5:e4:f4:57:53:6d:47:1c:23:9b:62:
c6:f7:89:1b:ac:fd:28:14:9d:e3:b0:e7:2d:94:4d:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:EE:6E:94:4D:2C:7C:59:93:D8:FF:B1:F7:3D:B5:00:54:FF:0E
X509v3 Authority Key Identifier:
keyid:FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:42:33:8c:51:88:c4:67:84:fc:3f:7c:90:08:55:28:cc:
e3:21:b7:6d:88:1e:88:18:cd:e1:23:96:55:12:19:99:22:2d:
06:bd:12:ff:b1:5d:7e:a3:e2:22:00:32:96:70:f4:32:d7:b8:
2f:7d:e0:8a:1f:26:42:b9:e4:0b:81:9c:a4:c3:73:40:0f:b6:
1f:d2:07:bc:8a:bd:99:04:8b:1b:6f:b8:5a:79:06:db:54:da:
a3:6b:01:57:e7:51:47:e6:00:1f:0f:3c:ee:33:63:e5:f5:29:
d6:3d:e9:77:6f:b6:a8:d7:22:66:4e:55:d9:50:d0:96:99:8a:
5e:db:87:20:c4:f7:68:82:59:fb:e3:4e:d5:e6:da:73:a7:19:
2d:09:db:ff:11:d4:4f:6d:a6:56:cb:07:72:b3:6a:3c:3b:33:
58:a8:eb:96:a8:6b:63:71:03:ea:95:1c:fd:d5:6f:10:c6:a6:
65:4c:b7:75:91:40:c4:0b:87:11:36:71:c4:f2:a2:b3:a9:04:
1f:dd:c6:dc:0c:c2:cf:fc:26:53:ba:43:4a:33:a6:d2:7d:24:
ea:cd:03:e6:a4:d5:a3:31:a4:01:f4:68:63:cc:66:e6:d6:7d:
23:cf:51:a4:17:c2:0f:58:45:53:aa:32:e9:90:76:5b:e0:c0:
68:08:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:40 2026 by rpki-client