
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json)
Hash identifier: +EiBJcBVFxpdXngeedtfYnlVXAfQLjm7apN2ciTPUGk=
Subject key identifier: 96:EA:49:1B:51:ED:AC:D6:CA:06:FF:22:A3:33:4B:90:BD:20:7F:1A
Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Certificate serial: 500FD52844F8F61134045828AA5F3A0294DB020E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
Manifest number: 053A
Signing time: Sun 01 Mar 2026 16:21:57 +0000
Manifest this update: Sun 01 Mar 2026 16:16:57 +0000
Manifest next update: Thu 05 Mar 2026 03:07:57 +0000
Files and hashes: 1: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: rj0wRQwpwHdbkknFnlCvj8YHTHffjRm6ymmAliQzZlE=)
2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=)
3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 03:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0f:d5:28:44:f8:f6:11:34:04:58:28:aa:5f:3a:02:94:db:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Validity
Not Before: Mar 1 16:16:57 2026 GMT
Not After : Mar 5 03:07:57 2026 GMT
Subject: CN=96EA491B51EDACD6CA06FF22A3334B90BD207F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:56:d3:16:58:c2:23:79:d5:64:2b:ad:75:58:
8d:dc:ae:8b:fa:fa:34:55:15:27:7e:80:0c:53:cc:
6a:73:42:da:d7:a0:9a:fe:9a:71:e5:67:76:0a:32:
82:29:29:84:92:40:28:64:ce:3f:a1:da:89:0f:95:
6b:34:1d:5d:53:28:37:d7:40:b1:52:7f:32:fc:62:
09:38:74:65:f4:dd:ed:87:12:99:78:d7:c4:f8:08:
75:c2:06:31:26:ff:d7:5d:a0:e3:dc:e4:16:11:10:
c3:ea:84:b8:eb:31:77:fd:3f:73:af:78:69:00:2d:
70:4b:d2:1f:c3:51:48:82:51:0f:63:92:4b:62:09:
f1:79:2c:0c:6c:e9:02:99:86:e2:e7:1c:59:0a:04:
6c:86:f4:af:4e:bb:86:d8:eb:86:3c:86:91:c3:59:
08:04:5c:c9:2d:06:88:72:e5:14:ee:f6:f9:63:2e:
32:c9:58:e7:fa:ac:ce:84:7a:00:0a:93:a6:8d:08:
13:db:04:6d:28:1f:72:89:5b:8a:87:94:42:dd:29:
79:fc:80:fd:09:66:4e:37:ca:36:1b:10:42:5e:b7:
94:94:e5:c8:eb:52:d4:3f:6b:cb:da:87:d7:4f:64:
b7:cf:09:20:e2:59:af:46:62:7a:0b:19:11:d0:a3:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EA:49:1B:51:ED:AC:D6:CA:06:FF:22:A3:33:4B:90:BD:20:7F:1A
X509v3 Authority Key Identifier:
keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:3c:90:07:7e:2d:54:69:7e:74:e3:c4:cd:0f:33:4c:a3:
89:e2:9e:71:8f:62:2d:a8:60:93:76:8f:12:d4:6d:d6:66:2b:
c7:96:4e:fc:b4:f7:bf:e2:01:40:0b:e5:da:d6:45:f8:75:d4:
ae:6a:5a:a8:56:a9:45:32:e7:02:07:91:29:bb:f7:06:7f:64:
66:15:91:f5:33:5e:6b:28:5d:b3:99:dc:48:95:99:db:3c:93:
ff:c3:b8:a4:c2:0f:43:30:a7:7d:ba:65:26:87:80:d9:1c:e9:
5d:78:7b:fd:c6:91:21:1a:08:ac:39:11:d7:7e:78:ee:92:14:
a8:c9:f4:4f:00:7a:95:5d:d5:a9:47:d9:ff:4b:03:a0:b3:de:
24:58:19:0f:cc:67:00:1a:0b:fc:5b:47:3f:11:5a:f0:bf:fc:
c7:d8:71:c7:49:dd:67:fc:62:65:67:81:2b:77:93:bf:b9:bd:
e6:a2:d0:ed:47:42:f6:fb:89:eb:f1:c5:58:51:97:a5:b1:db:
72:67:73:0c:bf:03:50:0e:5c:b4:2b:6a:53:ef:26:8d:48:7e:
8d:22:04:e7:87:4c:0d:87:49:d1:27:16:eb:ce:9f:3c:f6:7a:
7c:32:ff:a3:b2:8c:4e:67:9d:4a:50:42:12:41:60:45:86:5f:
12:4b:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:52 2026 by rpki-client