
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json)
Hash identifier: IPbkoYAmur9sadmTd4xYdDsmBfTcqZQevsomvKsHw54=
Subject key identifier: 18:BE:C1:2B:D4:1A:5F:7D:14:86:CA:27:07:50:F2:5E:B7:5D:5A:B0
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial: 3497DC4D3325526F260505B3A0E0FE715FED9FCF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
Manifest number: 0112
Signing time: Sat 28 Feb 2026 06:20:46 +0000
Manifest this update: Sat 28 Feb 2026 06:15:46 +0000
Manifest next update: Tue 03 Mar 2026 10:43:46 +0000
Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=)
2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: Pm4S5GmBaqZqc89AEj8CEWJc7SjHiNX95ok6PI6Gj+4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:dc:4d:33:25:52:6f:26:05:05:b3:a0:e0:fe:71:5f:ed:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Validity
Not Before: Feb 28 06:15:46 2026 GMT
Not After : Mar 3 10:43:46 2026 GMT
Subject: CN=18BEC12BD41A5F7D1486CA270750F25EB75D5AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:89:ad:65:69:66:8f:26:e5:bb:30:21:e7:
16:49:aa:b7:ce:a8:6c:a8:ee:fa:72:b7:ac:32:60:
a0:0d:b9:4e:ce:84:78:ae:04:d2:1c:ef:6a:5d:c8:
3d:6d:ec:13:49:58:33:8e:2b:91:db:91:7b:8c:42:
cb:e9:de:af:e7:af:b3:32:27:0c:ae:cc:64:41:e8:
67:80:4a:c3:33:32:13:6c:00:b0:d5:60:f8:43:d2:
24:17:7b:61:11:e0:ee:af:0e:36:4c:63:78:e2:93:
bc:1e:32:2c:03:d6:8e:6c:22:58:2a:0a:57:68:d3:
6b:91:37:00:77:f2:51:2d:7b:2b:ef:7f:97:3f:45:
97:48:e3:16:fe:ee:1b:c6:58:07:ed:95:c9:71:73:
ea:38:14:d3:27:7c:9b:51:ff:bc:f3:32:15:0e:d1:
af:59:54:18:1f:d2:49:cb:a1:cf:3b:a4:0c:7a:05:
c9:41:73:8b:27:fb:29:d8:be:92:b8:24:7e:f7:9f:
7c:75:5e:53:7e:d1:17:cc:8b:75:58:0d:d9:d6:c0:
ff:7e:89:5b:c6:d4:7a:0d:f1:a9:cc:9e:d0:73:11:
01:8b:fe:af:3e:fd:43:43:80:7f:89:1d:27:77:4d:
39:45:27:ce:53:19:a1:fc:81:b0:d0:0a:9a:15:ab:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:C1:2B:D4:1A:5F:7D:14:86:CA:27:07:50:F2:5E:B7:5D:5A:B0
X509v3 Authority Key Identifier:
keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:26:e0:2a:e4:1b:82:2e:c0:68:a1:12:d7:95:09:87:8d:
89:98:0f:56:e4:73:34:69:37:da:2d:8a:b1:1e:18:9f:92:43:
5b:af:97:5c:4d:fc:24:85:8b:75:fa:ee:95:50:d6:05:8e:3d:
f0:fa:e4:25:db:8d:0f:e4:4b:57:78:3d:0b:7f:a2:10:ff:67:
71:88:7d:ff:c4:73:05:26:52:8d:96:f7:f3:3a:03:71:4c:61:
ab:49:a0:1d:90:22:1b:7d:98:95:52:05:ce:9b:51:9f:42:59:
82:09:c6:69:eb:be:dc:59:01:41:62:27:79:2e:60:4e:8b:bb:
09:1c:65:56:72:d2:24:60:a0:f7:6a:6e:3a:8c:5e:65:06:50:
84:9d:9e:d4:04:2c:69:1a:38:d2:8f:d8:62:d4:43:01:a5:d8:
55:59:12:10:a8:d4:5a:09:06:d1:5c:94:ac:4f:0c:72:cc:24:
c8:29:eb:bd:10:fb:13:df:2b:48:03:85:56:46:5d:67:4b:cc:
0c:4f:be:5b:ef:cc:36:79:55:db:36:6b:b2:87:db:a6:1c:7e:
1e:ee:16:db:b8:cc:83:de:3a:36:ef:1c:10:67:f1:f2:3c:4d:
df:1c:89:e6:7b:e0:11:a8:23:ea:a2:ae:f2:52:1b:cc:a8:75:
c4:19:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:29 2026 by rpki-client