
$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json)
Hash identifier: 0qVm2kGCxkOf4zFWzujD8hbVrl9UWixL2bvOF4wCHEI=
Subject key identifier: 17:7E:8C:1D:C7:B0:7A:B1:60:7B:65:6C:2C:8A:C2:00:24:D9:DD:E1
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial: 2FAD0F25CEA59AFB042AF541FF00AA874B1D5621
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
Manifest number: 04E2
Signing time: Fri 17 Apr 2026 11:53:19 +0000
Manifest this update: Fri 17 Apr 2026 11:48:19 +0000
Manifest next update: Mon 20 Apr 2026 18:52:19 +0000
Files and hashes: 1: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=)
2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=)
3: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=)
4: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=)
5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=)
6: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: gSTYXS2yBq05eSKPpTrmcGyCgd/1XgA6nW7ECvI2AiQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ad:0f:25:ce:a5:9a:fb:04:2a:f5:41:ff:00:aa:87:4b:1d:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Validity
Not Before: Apr 17 11:48:19 2026 GMT
Not After : Apr 20 18:52:19 2026 GMT
Subject: CN=177E8C1DC7B07AB1607B656C2C8AC20024D9DDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:82:0a:53:6a:63:8e:96:c2:98:74:b1:7c:
a1:13:18:91:91:1e:34:60:ab:08:4e:9b:cf:a7:da:
3c:0e:56:22:cb:69:5a:c0:08:2b:76:80:0a:3e:46:
6f:3e:11:c5:8c:fb:b1:71:d5:e1:b9:07:21:58:95:
0b:c9:61:b8:b1:d9:37:85:94:a6:64:05:94:78:7b:
af:d0:95:d3:78:71:d0:23:fc:49:d9:eb:85:5f:d9:
56:80:da:b2:8b:e8:31:a3:cf:4c:6a:7f:f2:9f:a2:
3c:1c:b1:1e:7d:18:3a:a6:46:b4:01:75:31:71:97:
53:aa:e1:85:d8:79:bc:8e:51:08:70:e8:33:07:51:
25:8a:2c:d0:ee:6e:ce:00:67:ed:43:ed:72:cf:d5:
f0:88:ee:11:2c:d9:a4:60:a1:ed:61:3e:e1:da:0d:
dd:4c:2f:87:66:73:d7:f1:da:d7:87:04:74:00:10:
b1:61:5b:32:2d:e9:a2:93:6f:b7:ce:70:00:26:a2:
77:18:f8:d5:fc:2f:5e:12:a7:73:05:3d:58:dc:95:
d7:6c:23:70:23:26:7e:6f:2c:dc:4f:16:68:77:4d:
32:e1:23:59:55:dd:84:16:90:b2:09:42:91:7b:8f:
91:bc:bc:d2:d3:cf:8e:33:67:12:6c:8f:b1:db:67:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:8C:1D:C7:B0:7A:B1:60:7B:65:6C:2C:8A:C2:00:24:D9:DD:E1
X509v3 Authority Key Identifier:
keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:83:68:1d:58:97:98:01:a6:c1:e1:0e:17:fa:6e:7f:80:
5a:9f:be:88:11:ad:fd:8b:66:1f:ff:e4:4f:e5:99:cf:c9:d0:
23:36:64:f3:dd:85:b2:bd:5a:91:1d:7b:9c:9d:08:84:87:20:
06:8b:18:da:99:0c:0d:22:0e:ef:be:13:10:93:6f:a7:03:c3:
34:00:a0:c3:ee:cf:63:84:02:36:c2:64:24:22:13:8e:1e:93:
3d:c6:08:c7:23:2d:1e:11:4c:11:9a:04:bf:48:1e:41:b8:1d:
87:0d:8f:b9:9e:db:d4:89:cd:16:41:56:d9:ea:8e:55:bd:d3:
21:7c:21:5b:5c:18:05:6c:ef:20:af:69:e5:83:f4:52:5d:4a:
db:10:86:87:6b:95:f6:1d:b5:58:ae:94:ab:8e:94:f0:c5:1d:
19:0b:f3:90:de:b3:e0:bf:22:b7:2b:ea:8c:ff:27:de:94:71:
bd:63:6f:8e:5d:4d:19:6f:39:19:7b:e2:29:0d:90:59:8a:62:
f9:57:58:3b:dd:06:bb:06:f9:94:09:b9:1b:6e:4f:35:d3:71:
4a:ed:1b:28:87:f9:c6:c9:e1:ca:d8:61:39:96:7d:64:cb:f1:
6e:3c:3b:48:9a:8e:a3:24:1b:24:71:bc:39:64:58:63:fc:6f:
39:a6:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:40 2026 by rpki-client