
$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json)
Hash identifier: LBnANTR7C4bMcbN9adkRIutcxUAUxq+jXbvRpJC2JOY=
Subject key identifier: 05:D7:CB:28:66:F2:35:CE:90:B3:C1:F8:48:D2:99:07:CE:D3:3C:CE
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial: 47231DF7F2617A86B0A5B30236292CD2CE6CCA65
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
Manifest number: 0557
Signing time: Mon 02 Mar 2026 00:31:24 +0000
Manifest this update: Mon 02 Mar 2026 00:26:24 +0000
Manifest next update: Thu 05 Mar 2026 06:05:24 +0000
Files and hashes: 1: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: cBKI91E82619dGXlbZQsR3kG8PLRa84sQYxG51fCSE0=)
2: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE=)
3: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: 8dgs2b2YiXRgcG0YHl6WEkbqirf1fMvsBp14Ss65UsA=)
4: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo=)
5: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: Rkqt5EaL5SlKX5GmTTNQMVHFRYt3xFbyKGI2eZYOOAk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:23:1d:f7:f2:61:7a:86:b0:a5:b3:02:36:29:2c:d2:ce:6c:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Validity
Not Before: Mar 2 00:26:24 2026 GMT
Not After : Mar 5 06:05:24 2026 GMT
Subject: CN=05D7CB2866F235CE90B3C1F848D29907CED33CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:9e:16:b5:11:86:66:57:c0:52:9f:3f:cd:
14:ee:41:81:88:cb:1e:4b:be:c3:00:e1:a2:da:48:
f3:b5:82:cf:22:d4:d0:92:41:1c:f5:cf:db:70:f3:
52:a5:de:f0:38:07:5e:77:35:a1:ea:d0:f6:bd:23:
49:2e:20:36:72:cf:52:fe:33:c9:6a:b0:d6:d6:c0:
4d:b4:c8:91:88:45:66:95:17:4a:40:5c:b2:db:95:
ab:54:8b:5a:ea:da:8f:a2:4a:82:d5:6e:c6:2c:f5:
8d:a9:50:ce:26:61:a6:ca:66:79:63:f1:51:97:75:
a3:3e:f1:7c:85:ba:82:50:e5:c6:c8:57:a2:7e:c9:
1e:48:f5:7c:ba:af:2d:e5:e4:24:34:a0:81:34:f7:
af:86:9a:cf:4d:0a:56:a6:2f:cf:59:50:91:d5:68:
24:90:66:ac:09:89:c3:50:7a:b8:42:a9:95:e0:0b:
74:cb:b1:cb:45:21:b6:7d:bf:e4:8a:c4:c1:6f:28:
71:41:0b:a2:f2:eb:fe:5f:f8:2b:f7:8f:b8:c6:ba:
f7:f8:5b:b4:a0:aa:54:8a:3d:bd:dc:7e:74:02:68:
15:a4:f0:43:a1:9a:ea:05:f3:cc:fe:80:79:93:b8:
06:b0:21:55:23:1d:8d:70:fd:38:1c:a4:92:2f:7e:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:CB:28:66:F2:35:CE:90:B3:C1:F8:48:D2:99:07:CE:D3:3C:CE
X509v3 Authority Key Identifier:
keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:39:9d:6d:4d:35:b2:e6:cf:86:ea:3a:3f:99:f8:0a:74:94:
5f:d6:b5:c5:16:3c:db:50:9b:e6:4f:14:d8:34:8d:72:46:95:
7f:18:ab:4b:f3:24:85:f0:7e:e2:b6:b3:2c:c7:a8:f9:4c:da:
61:73:12:f0:4d:99:ec:e9:11:99:11:50:d0:17:e7:59:45:20:
b8:4b:54:71:79:bd:99:e4:82:53:ee:d3:db:a2:8e:87:fd:66:
e8:24:70:aa:24:a8:f8:fc:3d:1d:17:19:d5:7c:52:f7:10:ef:
f7:d7:44:75:73:63:25:db:29:5b:4a:d0:f6:bd:ad:ea:1c:a8:
e0:de:8b:98:6d:7c:a3:96:9a:cf:a4:03:1a:eb:02:b1:0c:45:
a5:6f:e6:d1:f9:a4:51:44:bf:7a:70:79:a4:f5:7c:36:aa:bb:
1e:64:8a:e6:3a:2d:e6:f3:f8:38:83:f6:4a:2a:07:8b:c4:a9:
47:dc:0e:cd:87:05:79:56:fc:65:36:de:7f:e6:7f:aa:03:07:
f3:cc:00:73:87:fa:69:6a:a8:e6:33:83:35:56:a4:3e:02:51:
83:d1:d5:5f:27:20:3a:bd:8d:38:f6:c4:49:61:55:68:4f:2f:
4c:90:42:62:83:b5:e2:35:25:e8:d1:f7:73:f9:9f:88:95:67:
68:28:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:59 2026 by rpki-client