
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json)
Hash identifier: GK6knJ/mFl4GBLB012Tsah+9aisDx1FzYnrZfn0U42A=
Subject key identifier: 22:64:BD:E3:E2:F8:F6:39:01:5C:B7:64:49:3D:5B:B2:E3:43:4F:4B
Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Certificate serial: 1EAF57568E41CB74679813E4FFA6809BA63B7781
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
Manifest number: 023E
Signing time: Sat 28 Feb 2026 13:32:15 +0000
Manifest this update: Sat 28 Feb 2026 13:27:15 +0000
Manifest next update: Tue 03 Mar 2026 14:10:15 +0000
Files and hashes: 1: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=)
2: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=)
3: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: m16O2k9a7TD9yDMLZa5SV5Q3pEyiaOTPhIY0BP5wlrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl
rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:af:57:56:8e:41:cb:74:67:98:13:e4:ff:a6:80:9b:a6:3b:77:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Validity
Not Before: Feb 28 13:27:15 2026 GMT
Not After : Mar 3 14:10:15 2026 GMT
Subject: CN=2264BDE3E2F8F639015CB764493D5BB2E3434F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:92:de:dd:b6:ac:8d:4a:38:36:a0:43:b2:
99:5f:5c:8a:05:54:ce:84:8a:d0:8f:9f:d8:0d:1d:
58:6e:82:b5:c3:a7:ce:db:39:50:fb:75:95:db:8c:
da:3d:59:93:f7:b8:fd:88:0a:86:36:0f:fe:a4:ab:
ba:28:f0:f3:e6:f9:c9:1d:70:04:e6:43:d2:c6:1c:
6e:e4:77:9c:dd:4c:62:4a:f9:52:bb:c6:6e:e1:44:
3b:72:52:6c:b3:22:f0:df:aa:9b:7d:49:3a:23:35:
91:fb:35:b9:82:57:d4:91:07:fc:31:11:a7:78:51:
ed:26:3e:31:52:32:89:83:19:7e:53:c0:0f:b2:c2:
ba:7f:58:db:f0:24:54:0f:7d:45:3e:28:e5:dd:cd:
f8:22:8a:4d:bc:5b:90:99:5a:aa:81:40:e7:38:72:
05:22:b2:9e:62:89:ec:01:10:6c:ee:51:2a:10:9c:
79:bd:9e:7a:22:79:20:8a:b0:78:a6:a1:f2:d8:84:
db:3b:60:a9:09:8a:09:69:d9:28:8a:7d:46:99:35:
ee:b5:d1:75:f7:46:6b:51:26:5b:44:80:89:a1:18:
20:35:c8:c6:03:43:e4:ca:06:a3:32:db:05:98:6f:
cc:45:59:87:6a:9d:3a:59:d2:64:f9:41:d1:25:72:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:BD:E3:E2:F8:F6:39:01:5C:B7:64:49:3D:5B:B2:E3:43:4F:4B
X509v3 Authority Key Identifier:
keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d9:27:1c:da:62:d5:b1:b5:b0:2b:f8:d5:98:5b:a1:f8:4a:
03:b1:8b:1f:b0:4b:28:fc:6e:3d:08:33:c8:f3:c8:86:80:bd:
ba:e4:43:dd:95:f1:eb:67:14:96:e7:f5:51:f9:5f:79:e4:fc:
87:01:1a:c9:59:a7:e8:4c:3a:8e:d6:c4:cb:fc:4c:c1:ca:af:
06:5a:9f:ad:92:8c:80:68:6e:02:3e:5c:2f:00:8b:0b:9c:66:
29:2a:ad:60:2b:55:e1:da:33:91:cd:b9:2c:26:a6:77:c0:07:
be:f3:18:57:35:09:4a:c8:29:b3:18:3c:4e:ba:ce:00:fd:f6:
6d:9f:02:ff:f9:93:6d:1f:99:c8:f7:cd:09:f8:a5:79:95:23:
44:01:45:77:47:1f:1e:17:4c:73:c7:70:b3:aa:d8:7d:2e:5c:
61:dd:30:d9:81:f4:5a:66:1c:74:b0:2b:a1:7d:02:d3:da:3b:
8c:bd:3f:cc:d7:7a:5f:48:cd:d1:94:a7:7e:96:bb:46:a1:c5:
45:01:fc:31:18:c5:bf:79:b8:6a:62:3e:0f:fc:0f:ba:8a:b4:
01:bd:cb:c8:19:10:a2:95:45:25:53:d2:20:7e:e0:e9:ca:9a:
88:2c:02:cd:58:9c:d4:c1:96:30:23:ef:82:be:1a:61:3c:f8:
2b:90:38:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHq9XVo5By3RnmBPk/6aAm6Y7d4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE
REU1N0MwQjAeFw0yNjAyMjgxMzI3MTVaFw0yNjAzMDMxNDEwMTVaMDMxMTAvBgNV
BAMTKDIyNjRCREUzRTJGOEY2MzkwMTVDQjc2NDQ5M0Q1QkIyRTM0MzRGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscJLe3basjUo4NqBDsplfXIoF
VM6EitCPn9gNHVhugrXDp87bOVD7dZXbjNo9WZP3uP2ICoY2D/6kq7oo8PPm+ckd
cATmQ9LGHG7kd5zdTGJK+VK7xm7hRDtyUmyzIvDfqpt9STojNZH7NbmCV9SRB/wx
Ead4Ue0mPjFSMomDGX5TwA+ywrp/WNvwJFQPfUU+KOXdzfgiik28W5CZWqqBQOc4
cgUisp5iiewBEGzuUSoQnHm9nnoieSCKsHimofLYhNs7YKkJiglp2SiKfUaZNe61
0XX3RmtRJltEgImhGCA1yMYDQ+TKBqMy2wWYb8xFWYdqnTpZ0mT5QdElcnthAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUImS94+L49jkBXLdkST1bsuNDT0swHwYDVR0j
BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC
NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1
N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw
N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB
MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGDZJxzaYtWxtbAr+NWYW6H4SgOxix+wSyj8
bj0IM8jzyIaAvbrkQ92V8etnFJbn9VH5X3nk/IcBGslZp+hMOo7WxMv8TMHKrwZa
n62SjIBobgI+XC8AiwucZikqrWArVeHaM5HNuSwmpnfAB77zGFc1CUrIKbMYPE66
zgD99m2fAv/5k20fmcj3zQn4pXmVI0QBRXdHHx4XTHPHcLOq2H0uXGHdMNmB9Fpm
HHSwK6F9AtPaO4y9P8zXel9IzdGUp36Wu0ahxUUB/DEYxb95uGpiPg/8D7qKtAG9
y8gZEKKVRSVT0iB+4OnKmogsAs1YnNTBljAj74K+GmE8+CuQOIs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:53 2026 by rpki-client