
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json)
Hash identifier: qMOUPEwlo8I+8ye0sHVzJJOeqgf1rryh6hjMAlAZhV0=
Subject key identifier: 2D:8A:93:98:49:DC:69:A5:12:E8:99:AF:BD:23:A3:CF:48:77:E5:9C
Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Certificate serial: 3F19DBD4C2EDD31CEFC9DE1A768CCD605549AAAA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 10:44:24 +0000
Manifest this update: Wed 23 Sep 2026 10:39:24 +0000
Manifest next update: Thu 24 Sep 2026 12:57:24 +0000
Files and hashes: 1: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=)
2: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: 2K/28zrBI85+gVZt3krQWAJFtM9czSsSGuL/0eaPddI=)
3: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=)
4: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 12:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:19:db:d4:c2:ed:d3:1c:ef:c9:de:1a:76:8c:cd:60:55:49:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Validity
Not Before: Sep 23 10:39:24 2026 GMT
Not After : Sep 24 12:57:24 2026 GMT
Subject: CN=2D8A939849DC69A512E899AFBD23A3CF4877E59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:75:25:6c:ab:f7:7c:f1:b2:60:aa:82:53:
d4:e0:7b:85:05:5b:5d:82:e2:2b:fd:af:1a:0b:66:
87:40:24:97:c9:dc:04:6f:5e:af:75:6e:24:f1:f3:
3e:ec:88:19:d9:98:6c:d1:ab:f4:8e:6e:0c:f4:ed:
cc:34:9a:1e:17:24:11:fe:4c:9e:5f:03:d3:ef:fa:
5d:33:5a:15:7a:82:95:89:a2:db:74:53:de:c2:9e:
30:59:c4:15:e4:78:d2:95:1a:7b:0e:23:14:1f:da:
59:3b:79:4a:22:66:e4:ed:68:e4:14:3f:d0:00:f4:
5b:d5:65:ee:1d:12:7d:83:0b:1c:e9:f3:0a:8b:64:
5c:28:cc:3a:cf:87:c5:93:c1:47:d3:e8:bd:4f:b2:
30:b0:da:5b:f1:66:94:6b:5d:0d:ba:b1:bc:07:31:
5d:5f:07:e5:d3:e7:1b:3a:a7:bb:01:49:95:98:88:
10:b0:7b:f9:5a:8e:c3:74:69:a9:44:df:e3:6a:de:
3e:4d:f3:61:17:df:54:43:5d:54:92:2b:74:d0:f0:
3d:5a:df:f5:0c:84:d8:00:71:5e:9f:35:50:02:ec:
90:0a:1b:7b:6c:6e:16:ab:b5:13:1a:ef:b9:02:f3:
82:1d:4c:43:2b:a0:62:93:9e:83:f6:5d:c1:1c:2a:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:93:98:49:DC:69:A5:12:E8:99:AF:BD:23:A3:CF:48:77:E5:9C
X509v3 Authority Key Identifier:
keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:92:c7:0e:60:a4:ff:03:2a:85:4c:cb:90:eb:57:d3:6a:08:
50:dc:3a:7d:3c:60:dc:dc:66:90:7a:ab:48:92:df:eb:f1:44:
ef:cf:22:ad:84:94:ad:4d:e1:74:a0:2d:66:03:ec:16:98:a8:
13:a6:06:46:5b:81:e7:f4:5b:65:01:93:15:b3:8d:d1:e0:89:
ac:71:1d:5d:f3:8a:e6:20:9e:f1:ca:5e:0b:42:53:a9:2a:49:
24:2c:e1:c2:d6:cf:00:bd:4b:d8:3e:90:a1:b7:3f:42:e1:91:
da:f9:5f:d5:69:7c:f9:ec:8b:e7:76:e3:f9:46:cf:17:28:12:
15:52:40:98:b6:60:99:db:88:bc:d9:b3:a5:a2:79:62:8f:8c:
92:65:3b:8f:22:30:d3:2b:4e:aa:26:a3:f8:4b:70:d6:ba:77:
1a:3c:9e:51:66:d1:aa:b6:4b:7d:0e:02:73:ff:d5:39:72:28:
2c:c1:56:25:b8:63:d3:c9:f9:80:dc:ce:f9:a1:de:8d:85:f8:
47:c2:91:e6:5f:53:8e:3f:d2:02:4e:24:a4:74:bc:3f:f6:95:
62:f9:8a:70:34:4b:94:75:87:35:78:11:f5:9d:28:f2:9f:87:
fb:74:cd:aa:b9:dc:a8:0c:20:8a:6b:0b:a4:af:fd:24:b9:da:
5e:2d:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:57:44 2026 by rpki-client