
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json)
Hash identifier: lDkwlGTVgv/CK7NZtUnuFgVnuAU5NCFxYwh9CZKXGqs=
Subject key identifier: 50:DC:E9:7F:DF:98:A0:0C:14:37:65:04:9C:60:1A:C1:D9:C9:C9:02
Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Certificate serial: 65A39A0AA1B0BDEFB31CE1D65E298C3FDA334E89
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
Manifest number: F0
Signing time: Sun 19 Oct 2025 05:21:45 +0000
Manifest this update: Sun 19 Oct 2025 05:16:45 +0000
Manifest next update: Wed 22 Oct 2025 06:03:45 +0000
Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: zEX2zvBjt157yqeJ3lViczjWUiYCUWpG52AxWV4xz8k=)
2: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: ZO7MlP0O0cI5rDjF9+TnE3Y38Xd5UBtYbDiS7LkByQ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl
rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Oct 2025 06:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a3:9a:0a:a1:b0:bd:ef:b3:1c:e1:d6:5e:29:8c:3f:da:33:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Validity
Not Before: Oct 19 05:16:45 2025 GMT
Not After : Oct 22 06:03:45 2025 GMT
Subject: CN=50DCE97FDF98A00C143765049C601AC1D9C9C902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:6c:ee:99:03:b6:63:5e:32:33:5e:37:49:
d2:3f:51:b4:c9:31:56:87:91:35:78:e7:99:07:e1:
15:c2:b5:f8:02:39:2e:8a:6d:e7:1c:dd:11:a1:97:
08:cd:8b:4a:f1:11:ea:3b:57:57:5a:c0:8f:55:f6:
6a:b0:da:eb:71:ba:e5:ea:75:51:be:7b:c5:ce:d9:
04:43:ce:b2:76:36:eb:a3:d5:3c:f3:12:61:68:2a:
54:39:5b:2c:1d:3e:7f:79:69:3e:8a:ce:c5:4d:f6:
32:15:78:f1:de:d7:04:31:db:41:ad:71:ba:22:5a:
a7:8c:da:0b:3f:2e:1d:47:3e:ea:ca:09:bd:fc:e4:
dd:49:2d:4d:37:e5:cc:9d:0e:32:84:30:2d:88:38:
45:dc:29:ef:3a:bf:97:6b:4e:4e:65:0e:d0:84:7c:
6c:fb:45:cf:d1:97:17:fd:e9:9c:e1:6b:76:2c:0e:
ab:c5:ea:4c:16:6d:1a:a5:4a:31:3a:71:e7:d0:a4:
8f:c9:ff:5c:79:fe:bd:84:8b:8c:ff:08:8b:96:4a:
32:36:da:f6:b7:47:48:9c:46:05:07:25:9d:ed:dc:
d1:55:52:64:79:ca:18:a2:69:e2:f5:b6:46:e0:0c:
35:be:5e:56:d6:24:55:cb:bd:3f:32:6f:eb:8a:c6:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:E9:7F:DF:98:A0:0C:14:37:65:04:9C:60:1A:C1:D9:C9:C9:02
X509v3 Authority Key Identifier:
keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:95:c1:15:4b:6b:a1:95:cf:99:f4:d3:6e:0f:84:d4:c7:
c9:1e:1f:3b:49:f9:96:0f:e9:b6:75:99:1e:ba:e6:b5:4c:c8:
df:16:bb:62:05:00:04:4e:e9:8e:2d:c8:69:e6:38:01:43:55:
e0:11:46:f2:60:bb:94:7a:ff:f3:02:33:bb:fc:bf:9c:8d:bb:
8a:a5:95:9a:bb:3f:39:cf:c0:f0:a0:cc:b8:6d:05:66:d3:b9:
8c:4a:db:2f:1d:52:d4:aa:b1:99:18:11:a2:67:77:ef:ae:05:
dd:01:e8:16:66:50:da:b1:1f:9f:39:9f:a8:51:7e:fe:19:69:
19:a1:06:4e:c9:21:bd:50:5e:ea:b8:b0:32:70:cf:5d:90:2e:
60:7a:b3:c7:47:ae:27:38:58:82:b3:8c:45:92:3c:a5:98:17:
39:f7:e5:f8:8e:56:92:15:b7:a2:4f:e5:e7:83:18:a0:bb:f4:
1b:a1:7a:9e:86:dc:e0:da:72:cd:81:e9:97:ef:72:18:63:b9:
03:ea:b9:e0:ce:d9:8f:96:c6:d1:00:64:4f:c5:53:1b:3f:f0:
17:a1:5a:26:a9:c8:ff:f5:16:4b:5d:0f:08:18:05:c4:2d:b2:
93:ec:07:e6:f4:9a:71:56:9f:e2:d9:d9:5c:9b:16:e6:6a:e7:
51:ae:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:31:06 2025 by rpki-client