
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json)
Hash identifier: c6WD6YmG42kdrTy+vklVY9TrSkN9r+CPS/udmoVS7XA=
Subject key identifier: 24:B6:A0:A4:DB:B6:CE:20:74:E2:3C:E5:5C:7A:3D:E3:85:60:94:5C
Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Certificate serial: 2F25EF741EC3AD44ACDF5F80809DD3417F3A1646
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
Manifest number: 054E
Signing time: Thu 16 Apr 2026 02:21:57 +0000
Manifest this update: Thu 16 Apr 2026 02:16:57 +0000
Manifest next update: Sun 19 Apr 2026 06:09:57 +0000
Files and hashes: 1: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: lenAK++A1YnNyuEPdL+rHfCfShrCKXseWyMz8kwdpbI=)
2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=)
3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 06:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:25:ef:74:1e:c3:ad:44:ac:df:5f:80:80:9d:d3:41:7f:3a:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Validity
Not Before: Apr 16 02:16:57 2026 GMT
Not After : Apr 19 06:09:57 2026 GMT
Subject: CN=24B6A0A4DBB6CE2074E23CE55C7A3DE38560945C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:af:7f:01:44:d2:3e:3f:e5:0e:ab:13:b6:
b9:e4:99:74:36:da:cf:0d:c8:77:3e:3f:3a:34:9d:
1a:b1:f3:f5:63:3a:03:15:79:01:5c:0e:57:b9:06:
d1:3c:9b:10:63:1c:fe:dd:ea:8d:ba:29:e0:fc:cd:
5d:9e:e3:a6:73:c3:d3:ec:2d:f4:cc:b2:51:c6:8d:
7d:01:b7:e0:54:cc:b2:ed:01:16:db:69:50:fa:3b:
87:8c:2d:ef:6c:9a:80:08:83:f7:97:28:e4:57:2f:
4d:df:b9:ec:86:1b:20:c1:f4:f5:86:6e:5e:01:99:
4d:6d:67:c6:45:15:63:3c:2c:50:54:bf:6a:e0:14:
fd:3e:20:dc:6b:13:ec:70:d9:b0:6c:c6:af:ce:0e:
df:32:78:cc:fa:7b:6f:f8:a3:ad:b9:d6:23:99:86:
f7:66:cd:b8:c8:15:f0:71:b1:bd:d5:90:b0:59:20:
bd:71:a3:83:22:ae:21:a3:3c:c9:3e:6a:ff:bd:5e:
6a:e1:c0:2f:90:0c:53:da:a3:9f:b1:ba:4d:50:11:
fd:5e:a8:1e:a5:a9:47:93:86:cf:f1:0a:ca:12:8b:
da:56:60:f2:7f:59:92:69:95:4d:8a:22:ab:99:47:
cc:94:61:4e:4f:e1:6b:41:c3:9e:3e:0c:10:7c:53:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:A0:A4:DB:B6:CE:20:74:E2:3C:E5:5C:7A:3D:E3:85:60:94:5C
X509v3 Authority Key Identifier:
keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:65:4d:e1:90:00:58:78:44:b9:e4:ef:9c:fc:d0:14:af:
4b:17:22:f9:3e:41:9e:21:3d:21:ff:af:32:af:cd:7a:0f:29:
05:15:8a:3e:9e:29:ab:f8:f7:c1:b1:35:73:b3:85:b2:44:8f:
f0:30:a4:1d:9d:d3:5a:58:bf:08:b7:7f:31:d4:a3:6f:f9:9a:
77:06:c8:a6:63:3d:e8:01:bd:a7:46:60:7f:bc:9d:5b:4e:7c:
e7:25:71:a5:5b:58:09:66:72:63:4c:3a:94:68:26:0c:39:9d:
8a:17:99:60:4c:1b:d8:c4:d3:92:8c:4a:3d:05:f9:27:df:41:
16:d9:8c:da:3d:93:1f:9f:87:be:6e:db:62:aa:fd:7f:90:e4:
a8:b8:60:48:01:d7:9a:b1:8c:6e:ce:9e:88:ea:4f:a6:34:03:
c4:8e:01:6f:04:a1:d3:47:c7:8d:f6:d8:53:32:2a:2c:9c:09:
62:1f:10:9c:c2:53:3d:0e:d2:23:b3:60:d7:3a:05:98:a7:e1:
d5:3c:32:63:b9:4e:39:8a:58:6e:95:f8:1e:cb:dc:c5:be:74:
06:97:76:b4:39:78:97:f2:02:8e:6a:b1:e0:e3:c2:f2:53:09:
92:6d:d5:da:bb:18:7a:13:4f:9e:50:64:05:be:5a:d2:8d:0c:
45:68:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:23:13 2026 by rpki-client