
$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json)
Hash identifier: Yrrphsy2pXNZU5bIQTYPUG5KqufU1CMtH96jGciJlqc=
Subject key identifier: 55:85:10:B4:1A:08:DA:F3:A2:EC:27:29:29:25:15:A5:47:E7:BB:B6
Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Certificate serial: 0E6903D8737C791748AC149036BE1109935834B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
Manifest number: 0203
Signing time: Wed 25 Mar 2026 04:12:24 +0000
Manifest this update: Wed 25 Mar 2026 04:07:24 +0000
Manifest next update: Sat 28 Mar 2026 10:56:24 +0000
Files and hashes: 1: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: p5j/vdKfN1+UvAL8/QSh+FoihTIdcx5jqwGSehaFD1o=)
2: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: ah6jjuDsScnETUKRuJMdbV7gAyHOG7vH/cUJcAPOG7U=)
3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:69:03:d8:73:7c:79:17:48:ac:14:90:36:be:11:09:93:58:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Validity
Not Before: Mar 25 04:07:24 2026 GMT
Not After : Mar 28 10:56:24 2026 GMT
Subject: CN=558510B41A08DAF3A2EC2729292515A547E7BBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:d6:56:c9:87:64:78:bc:45:ab:f7:71:37:
49:a9:28:dd:51:ad:5f:99:35:23:94:34:0d:22:d9:
5a:72:27:a5:c5:9f:44:73:af:31:c1:6e:37:c7:08:
4a:01:a7:49:47:de:7d:88:39:cc:08:23:6f:e4:a0:
0a:23:84:a7:05:7a:10:2d:d2:ed:33:ee:af:b2:66:
11:07:e2:92:e4:1a:56:a9:65:91:ab:cd:6e:c5:20:
5c:d6:2b:dc:1d:d6:6b:3c:9e:f9:d3:41:89:f0:2a:
a8:f6:c1:8f:1e:27:ea:69:5c:ed:72:f4:37:7d:51:
83:1f:66:da:d0:4d:2c:9a:56:df:0c:79:df:5a:e0:
c2:63:49:eb:d2:0e:36:58:59:a9:95:be:85:6e:aa:
d9:df:98:15:17:7f:8f:fc:eb:35:2c:db:d6:9f:a1:
94:47:e2:82:eb:21:87:37:02:66:1c:81:bd:89:eb:
2d:4e:b3:7d:1e:b7:3a:1f:91:1a:3b:82:7d:1c:03:
89:10:fa:0a:26:6d:a4:44:e3:d9:a2:f1:d7:1b:1f:
99:bf:6a:68:94:71:5a:1d:0d:bc:0e:75:d5:60:0f:
af:2e:48:47:5d:1b:d2:f5:e6:32:bf:8e:10:ec:31:
ec:29:f5:67:36:4f:32:8d:c1:38:aa:04:e5:a4:1b:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:10:B4:1A:08:DA:F3:A2:EC:27:29:29:25:15:A5:47:E7:BB:B6
X509v3 Authority Key Identifier:
keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:13:c2:4f:83:d0:91:dc:44:49:2b:0a:20:82:28:eb:d6:
6f:27:35:c8:45:15:05:20:5b:9a:95:1d:b1:7d:5c:d7:d7:04:
8f:78:c2:99:43:ac:14:ed:56:d5:13:a8:ce:6f:9f:dd:d4:9d:
b5:55:39:7a:ee:4b:3c:43:e9:d7:65:5f:3b:0e:4f:bf:4a:bc:
7a:4b:9f:42:6f:b2:ca:45:5e:23:a4:5f:34:5a:d6:a1:74:4d:
35:41:10:93:88:80:c6:6b:f3:89:5e:fb:d9:59:d5:3f:74:02:
98:6c:11:86:d4:d4:97:ce:87:8f:1a:9f:d6:41:3f:4f:46:20:
c1:79:5e:ef:96:2a:55:ac:0e:85:fe:db:93:58:3f:d5:73:5e:
6a:a4:18:65:3d:ed:f9:85:07:aa:ea:60:dc:c7:22:4f:2d:25:
62:74:4a:52:f9:38:7a:71:61:32:f9:dc:fc:d6:ad:2e:24:a8:
85:7b:12:dc:20:ac:cc:e9:e8:c8:ae:0d:44:1a:18:57:7a:6c:
f8:f1:23:87:92:73:f5:e5:01:fb:c4:81:d8:99:a2:ac:fe:6c:
ca:5b:fb:f5:2c:ff:2a:b6:a6:e5:23:56:de:bf:40:a8:01:18:
2f:15:a3:ef:38:57:c4:e4:07:86:99:81:af:c9:ca:76:d6:cb:
43:ca:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:30 2026 by rpki-client