
$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier: Ga0fITJEANkAiYlaHyn+LYHpGZikfO49pF8Ag9K+A5I=
Subject key identifier: 4F:0E:2F:8E:2A:E9:96:C5:4A:78:88:66:AF:34:00:B2:16:6D:7D:5C
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 7F774CC76D51D17476EFB39F63BB818743CA0CCC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number: 0566
Signing time: Tue 24 Mar 2026 05:22:27 +0000
Manifest this update: Tue 24 Mar 2026 05:17:27 +0000
Manifest next update: Fri 27 Mar 2026 16:57:27 +0000
Files and hashes: 1: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
2: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
3: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
4: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
6: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
7: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: LP20HfshJwQOceNt1VvrquukYaJYsiGhnjymh9Hizw4=)
8: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
9: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
10: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
11: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
12: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: zwjRbhAd37vYOMqQTMDgbFZLcXrfLuBXrkpquQN03WE=)
13: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
14: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
15: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
16: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:77:4c:c7:6d:51:d1:74:76:ef:b3:9f:63:bb:81:87:43:ca:0c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Mar 24 05:17:27 2026 GMT
Not After : Mar 27 16:57:27 2026 GMT
Subject: CN=4F0E2F8E2AE996C54A788866AF3400B2166D7D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:3c:c6:68:be:93:8d:9c:7c:6c:39:d2:d4:
88:e5:7f:4a:cd:5a:9c:f5:1a:d4:10:f8:ed:4e:af:
bb:65:81:1d:40:f1:43:b5:db:bd:de:74:eb:94:33:
f5:58:25:6d:0b:73:b5:bf:df:51:09:f1:31:74:b5:
e1:2e:96:40:3d:45:58:d3:b0:18:c4:54:b6:a1:c3:
ca:93:69:fb:e8:9a:24:4e:a7:8d:50:be:d9:08:e7:
a6:f0:66:b0:7f:5d:37:95:07:88:d2:4c:d7:56:59:
a2:61:ca:33:4f:cc:ea:8e:3d:32:c1:ca:fe:0e:18:
11:ea:71:f4:a4:75:b6:3f:a0:8c:77:df:d2:31:d7:
5a:57:35:a7:f6:1d:60:06:8b:5a:49:e3:a7:32:f9:
7c:c6:e7:28:6f:fd:9d:b8:6c:34:bb:9c:e8:04:1a:
36:33:c8:56:3a:e6:d1:80:f7:97:90:40:7a:9c:16:
61:bd:21:a2:da:88:3e:0e:75:2b:69:91:0c:1d:12:
8d:cb:d5:a4:de:93:b8:7c:52:a2:1b:5a:16:a9:76:
f1:b9:62:52:1c:36:a8:1e:42:a3:84:5a:5e:d8:7c:
5d:f6:d1:6b:ed:99:71:e1:44:f7:85:da:4f:9f:d2:
bd:c1:af:ff:36:42:d7:40:9e:5b:62:58:48:d7:0d:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:2F:8E:2A:E9:96:C5:4A:78:88:66:AF:34:00:B2:16:6D:7D:5C
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:65:de:dd:1c:5f:75:2c:22:95:26:b8:71:5b:0a:98:8b:
8a:6f:fe:47:c1:03:02:9c:bf:e1:b6:13:d9:2f:a1:f7:94:1b:
5b:1d:b0:48:5e:6b:39:17:5f:89:04:e3:8a:88:ba:0e:00:bb:
ab:28:44:b5:32:4b:88:34:b5:ba:95:73:73:f2:c0:b2:90:49:
85:d4:26:a0:db:c9:7d:7c:03:e8:a9:13:e9:c2:6f:e5:d9:5f:
62:c0:5a:d4:0d:f9:26:df:e1:f6:6e:36:72:55:91:74:8a:ad:
d1:18:da:ab:48:76:ce:62:cd:70:71:e4:a9:47:be:b2:34:4a:
84:19:ef:42:9a:ce:52:9d:04:e0:67:23:d5:db:d2:d0:ee:e1:
1e:44:d1:56:f3:ff:1c:15:57:ed:ac:1d:12:46:c0:f8:bb:39:
8f:f9:bc:fb:14:b0:2b:79:97:96:f6:f6:19:7d:6a:48:1a:e6:
04:3f:e5:9c:68:33:01:7c:0f:5c:5e:4c:03:85:be:3b:1e:d2:
ce:ca:61:df:8c:c1:5e:b9:55:2f:43:7a:cb:33:bd:32:a3:ae:
62:c6:d6:91:3f:c1:3f:47:40:ab:82:69:c5:25:10:9a:05:90:
4d:04:56:51:c9:31:b1:d1:47:9b:67:fb:97:fe:d1:c1:18:8f:
67:d5:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:31 2026 by rpki-client