
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
File: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft (raw, json)
Hash identifier: 0wa0nsCF3h8OQK4LdLGkcM5hUIijpw9sbNI/w71CN2g=
Subject key identifier: BB:75:50:1D:1F:1C:F4:5C:48:E4:D9:E5:E8:00:C7:AA:37:EA:50:4B
Authority key identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
Certificate issuer: /CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Certificate serial: 12A0BECB68F4666C2BAEDDEE5FB57A8C5DCF3DEE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 12:10:47 +0000
Manifest this update: Thu 24 Sep 2026 12:05:47 +0000
Manifest next update: Fri 25 Sep 2026 12:45:47 +0000
Files and hashes: 1: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: fbSCqhwvsaol0lBcmUKKDf4ORcQLNjmes/NlWyieIPw=)
2: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl (hash: l4MZIaP/9omO0Xiv3Yjv8B4RZgXCrH5Fp/TDmTZi90Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a0:be:cb:68:f4:66:6c:2b:ae:dd:ee:5f:b5:7a:8c:5d:cf:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46
Validity
Not Before: Sep 24 12:05:47 2026 GMT
Not After : Sep 25 12:45:47 2026 GMT
Subject: CN=BB75501D1F1CF45C48E4D9E5E800C7AA37EA504B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:bb:76:7c:b4:00:2e:f9:7b:94:69:a2:cb:
87:04:46:17:8c:45:e7:fc:8e:8a:b4:2a:39:ff:c8:
a6:11:32:4e:2b:59:33:17:d9:c9:52:8a:c4:95:ba:
07:5a:35:bc:15:b6:5a:1d:b2:48:cb:d0:8b:cc:52:
86:48:3a:41:fa:ba:21:0d:6e:4d:41:35:5e:ac:db:
5b:4e:e9:37:53:08:14:f8:06:f7:73:d6:d9:61:93:
bd:b0:b6:31:b2:d4:b7:73:4e:b7:b1:47:e5:d8:3b:
bc:04:23:14:18:e3:e6:ce:d3:92:f6:0d:54:2d:fa:
9c:dc:dd:5e:78:33:de:9a:a1:7f:a6:ff:40:27:fc:
88:44:a6:b9:7e:23:43:b6:88:9e:8e:48:30:a2:ea:
33:03:85:a1:09:31:4a:9f:b3:26:22:4d:bc:9c:94:
40:38:b7:34:bd:76:48:75:59:96:f1:5f:b6:ac:e0:
52:a9:8c:9c:12:67:3b:74:1c:fe:25:49:88:f5:53:
01:26:e8:12:2d:54:bf:7e:91:88:4c:aa:88:5a:ff:
65:56:ad:d4:ff:c4:47:ae:66:fc:35:96:67:7a:7a:
ca:d9:f1:ea:62:fb:5b:53:c2:cf:9a:f7:76:e2:22:
74:9d:03:7b:75:6b:f6:b1:cf:31:94:db:c7:cc:fe:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:50:1D:1F:1C:F4:5C:48:E4:D9:E5:E8:00:C7:AA:37:EA:50:4B
X509v3 Authority Key Identifier:
keyid:FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:d7:2e:4c:90:b5:9e:34:ba:7f:f7:17:d8:ee:26:eb:55:
58:d7:5a:43:bd:7f:43:92:2d:db:fe:4d:e2:85:65:e3:4c:41:
84:35:8c:7b:4e:76:c9:eb:af:dd:17:27:2e:62:c7:67:42:b4:
d5:96:d4:07:88:e8:ec:c7:94:9c:18:e3:a9:97:2d:d3:5a:b6:
e5:4a:7f:61:f2:08:d5:27:c9:7e:d0:61:02:41:5f:bc:57:4b:
03:63:25:76:80:65:81:65:68:e4:1d:cf:e5:b1:e4:7c:9d:f3:
23:6f:c4:eb:6c:92:1e:80:6b:ae:26:e9:8d:be:ff:cd:51:f9:
43:f9:80:a4:d9:ba:1f:01:e3:cc:69:a8:cf:6b:e6:65:e9:42:
26:fb:2d:42:ed:8b:48:80:dc:45:bd:f2:47:61:b9:95:86:f2:
54:8d:4b:36:35:91:69:50:40:4a:d1:26:5a:21:3a:09:91:69:
75:c9:27:6c:3f:c3:aa:8c:c9:c8:48:31:6d:3c:5b:48:76:b6:
b9:b1:81:8b:3b:9e:8c:c2:41:af:f9:1f:ee:34:66:49:ff:74:
55:6b:b0:dd:f1:ac:53:be:1a:df:bf:e3:7d:a8:73:f2:ab:8f:
85:9c:4b:13:4e:4e:e3:9c:70:5e:2a:8e:8e:7c:f2:83:22:4f:
60:91:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:07 2026 by rpki-client