
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
File: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft (raw, json)
Hash identifier: TlmPMaFYU0A73Wl9DufgUQnvgBmugREw5j7Ucj54iqM=
Subject key identifier: 2E:83:92:2D:8D:22:7A:6E:1B:72:CF:6A:18:47:7F:A6:ED:41:6A:7C
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial: 27BD600B10113610C5B61F7FCBC96E09D2BB3416
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
Manifest number: 0283
Signing time: Wed 25 Mar 2026 04:20:51 +0000
Manifest this update: Wed 25 Mar 2026 04:15:51 +0000
Manifest next update: Sat 28 Mar 2026 14:04:51 +0000
Files and hashes: 1: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl (hash: Q3OFPYowTmZ+8Gr9oG60e8kY1iY0QoybTcO2J50JgAQ=)
2: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: Eu8noK11YtmIqP6t9xYjmQw1Qd5I4vjGt0rp0irsYoQ=)
3: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: INkpUO7QcpsFX9uRfCsq0kQs6LP2TMwC7sWQRzGxwL4=)
4: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: pWW6aChZuEDy/+0vrjLWEhH3QTbtcqu7md1QFPSZMbA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 14:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bd:60:0b:10:11:36:10:c5:b6:1f:7f:cb:c9:6e:09:d2:bb:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Validity
Not Before: Mar 25 04:15:51 2026 GMT
Not After : Mar 28 14:04:51 2026 GMT
Subject: CN=2E83922D8D227A6E1B72CF6A18477FA6ED416A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:5b:da:64:15:dd:95:75:12:9c:87:d1:dc:
42:ef:cc:d0:b1:d0:9d:f5:98:1d:8b:e5:30:f9:db:
c2:97:41:88:44:b8:a3:db:a6:c3:da:c8:6f:f3:2f:
b8:57:fa:84:13:5b:83:64:bc:38:e0:81:6d:b9:f1:
24:77:ec:09:d3:c9:4e:e0:67:40:7e:c4:5b:c4:a8:
14:c3:ea:f0:c6:1d:8e:c2:11:30:91:7b:9d:50:cf:
80:9c:c2:01:dd:ae:f8:85:30:26:2f:f8:01:66:d9:
33:e9:bd:c9:fc:b3:c5:11:48:34:58:3e:0d:47:c7:
bd:9d:de:bc:b7:28:cd:7d:c1:b4:cd:86:13:b2:0a:
d4:a3:df:81:b9:81:e8:f3:06:96:6b:01:8a:bb:4d:
b2:08:39:5c:f8:22:d2:7b:af:99:d8:3c:12:54:e1:
94:f2:c8:e8:cd:cd:1f:3e:a7:a2:82:0f:44:48:2f:
7a:fd:ab:30:d4:28:50:3c:01:c0:8b:99:22:b3:6f:
ae:cf:80:6b:28:76:0a:72:db:d0:ac:df:72:c9:ad:
0f:60:da:77:cd:e1:6e:4d:95:c1:36:07:3d:06:7f:
72:c4:b0:74:06:78:46:a3:7b:7c:bc:75:8d:8f:e5:
8e:8b:d4:90:a5:a6:1e:b1:7a:b5:3b:ac:de:c2:d1:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:92:2D:8D:22:7A:6E:1B:72:CF:6A:18:47:7F:A6:ED:41:6A:7C
X509v3 Authority Key Identifier:
keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:88:59:65:74:e0:8c:c6:ff:ec:6b:8e:0c:44:c5:6c:60:
09:03:63:bd:fe:4c:c3:3c:33:f4:91:07:c9:89:9d:b1:99:13:
f2:b4:1c:b7:02:fe:c3:7f:3c:c0:3f:da:36:98:88:58:09:e4:
9f:20:70:49:ba:af:4d:b9:91:ed:df:9c:50:0b:cc:fa:47:5a:
3c:63:4d:bd:1f:ca:da:c5:4c:d5:5c:b7:ba:aa:12:b3:b4:67:
c7:b7:60:31:5c:31:0e:cf:75:4a:7e:e9:ff:1a:b7:54:9d:90:
c5:10:10:28:a5:dc:bd:2e:74:48:c6:7a:98:eb:38:d4:ee:cd:
1b:f9:d4:4e:8e:3c:c2:3e:83:6d:d4:33:27:df:12:2b:69:be:
91:be:10:7b:4e:eb:2e:cf:ec:3c:23:dd:74:f5:ad:bb:65:19:
2a:aa:8d:e7:ab:2d:e3:5b:22:53:b9:35:57:5b:20:2d:31:6f:
eb:f9:0b:1b:bc:46:14:b5:20:21:fe:9e:db:93:3f:ca:ab:1c:
14:58:c2:6c:96:d5:f2:be:a4:fb:55:67:b0:c4:0c:ee:0b:62:
62:4b:99:8e:55:29:2c:33:cc:61:9e:0d:64:62:40:a4:e2:ef:
21:82:32:f5:1e:dc:f0:36:4a:9a:a7:d8:ed:91:5d:2e:57:15:
2b:bc:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:51 2026 by rpki-client