
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json)
Hash identifier: jeW6pA/4aEJespKCBxla7vNGNBENumX6gYrtmzizTss=
Subject key identifier: 42:00:13:13:90:A0:20:91:35:70:CF:36:8B:1F:C9:EF:E9:45:95:50
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial: 34DB36B6FA09988E7D2A1D624DA047A35BA1EECA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
Manifest number: 0127
Signing time: Thu 16 Apr 2026 14:50:51 +0000
Manifest this update: Thu 16 Apr 2026 14:45:51 +0000
Manifest next update: Mon 20 Apr 2026 00:37:51 +0000
Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: PvJK3ruj9+ubVUJKBxM6si/hKikC4UhHFzPyETKQy6g=)
2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 00:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:db:36:b6:fa:09:98:8e:7d:2a:1d:62:4d:a0:47:a3:5b:a1:ee:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Validity
Not Before: Apr 16 14:45:51 2026 GMT
Not After : Apr 20 00:37:51 2026 GMT
Subject: CN=4200131390A020913570CF368B1FC9EFE9459550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:af:f2:ad:b0:b8:b1:51:57:aa:19:cc:45:
00:41:05:89:4b:f7:a3:4c:3b:e0:07:8b:d4:68:f0:
fe:f2:ca:8b:9d:a5:53:1d:f1:a0:2f:b6:5d:62:76:
e3:3b:9f:32:7d:4b:0a:d2:c3:8f:fd:df:80:45:94:
11:79:75:65:02:53:9c:82:6d:3e:18:26:8d:fe:fb:
22:a7:c0:ff:4a:97:07:a3:00:37:1b:8d:57:5d:2d:
77:9e:fb:6b:f7:f1:33:39:69:81:42:40:2e:31:13:
7b:d8:dc:0f:93:25:2c:6f:20:dc:4e:76:2e:47:2a:
2b:f8:58:c7:83:f6:03:24:78:38:74:05:b5:85:cd:
12:88:f4:49:da:4d:db:e3:16:19:16:9c:68:83:c3:
2d:23:b0:43:dd:4a:ce:4a:e7:4b:33:5e:53:d8:dd:
f3:f5:2f:bb:35:35:22:14:44:9e:43:4b:9e:64:06:
24:43:c5:48:cc:b3:c5:23:81:11:64:12:11:98:22:
f7:4c:86:22:21:a6:cc:74:f4:92:32:2e:c2:ea:12:
ee:01:e4:6a:84:e5:0b:bb:67:91:8b:84:61:e4:4f:
2e:c6:55:29:ec:7c:0c:11:7c:17:4d:a0:de:66:b2:
4d:ac:bd:e9:ca:cd:6f:d4:11:ee:51:39:0f:b5:d9:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:13:13:90:A0:20:91:35:70:CF:36:8B:1F:C9:EF:E9:45:95:50
X509v3 Authority Key Identifier:
keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:8c:69:d9:31:03:1c:df:7d:ec:10:48:ee:01:0c:d7:46:
55:3b:81:bd:94:e0:37:61:ff:37:7a:24:52:40:67:38:e5:b8:
41:11:0a:99:02:7c:ae:64:69:a5:1e:da:59:51:72:19:12:1d:
32:ed:ac:a1:e6:0f:3f:41:4e:89:36:3b:3a:6c:0d:59:1c:c4:
cc:e6:6d:0f:7d:06:47:98:73:bb:0e:50:6a:83:cb:e2:b2:b1:
90:74:21:f4:99:5d:ed:b6:ec:30:19:e3:db:0d:a7:e1:22:37:
d2:5f:b4:90:0f:33:f9:2e:1f:1b:68:8e:d9:40:4a:d5:57:cf:
75:7c:af:8c:14:91:09:83:20:46:a1:20:ff:a5:22:67:c8:b2:
72:be:87:bd:c1:74:72:69:c1:4a:ec:25:88:3a:bd:6b:5f:14:
c5:0f:c7:0f:89:6c:fd:2a:e7:30:5e:49:67:a3:f9:af:d0:30:
0a:f2:4e:04:37:e7:a9:3b:58:e7:31:fd:81:c1:8c:15:f7:b8:
1b:8d:1a:65:e3:f1:12:4e:ed:c4:21:a7:ac:7f:a8:6c:21:28:
fb:48:7e:d1:46:34:cc:52:7a:42:3f:a9:3d:78:c4:ff:45:62:
18:c1:88:21:18:cb:fd:5b:aa:86:5e:13:2b:70:29:ee:a7:b8:
3c:4d:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:22 2026 by rpki-client