
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier: pqPSl4jgIoclBHc1ydYnmRSCxMYRy6/Ydd5CJTN2CCs=
Subject key identifier: A8:EE:FD:34:BA:13:CD:BA:76:4C:92:45:A6:EB:91:5A:0A:7F:55:D5
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 2E8609F43C98497BC3DA96772A26BF6EA98E18B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number: 0319
Signing time: Sat 28 Feb 2026 00:02:12 +0000
Manifest this update: Fri 27 Feb 2026 23:57:12 +0000
Manifest next update: Tue 03 Mar 2026 11:58:12 +0000
Files and hashes: 1: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
2: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: hoYxuGi8Dbg0+tKgNZ2iCXdlBeXd35+Q9Oyp2SGgsUw=)
3: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: NuLMhPJ0VY3kaMyz/Lw7RZSaI7EvMu5zQWl1sY3LKFs=)
4: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: b0tZZmtH36HTqeaBkAZXbgB/S56o/yJRyQaRIiw9gxU=)
5: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
6: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
7: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
8: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
9: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: J7nzxQoOQZd+f5FsS1z2JuLaZuo8BSYFqnL/f85DF9g=)
10: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
11: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
12: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
13: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
14: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
15: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
16: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 11:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:86:09:f4:3c:98:49:7b:c3:da:96:77:2a:26:bf:6e:a9:8e:18:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Feb 27 23:57:12 2026 GMT
Not After : Mar 3 11:58:12 2026 GMT
Subject: CN=A8EEFD34BA13CDBA764C9245A6EB915A0A7F55D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:4f:eb:33:15:e4:12:10:97:9f:ff:c4:e5:
11:4e:ba:dd:c2:ee:63:a8:f0:39:73:67:d2:bd:e8:
d4:94:73:9a:76:95:7e:e3:79:f1:05:87:f1:e8:d6:
e0:a9:d1:16:6b:65:67:fe:48:a4:e7:98:e4:02:9b:
71:7c:80:25:95:68:74:7a:4a:a0:55:d8:a6:27:a7:
3d:77:0f:01:3d:14:a8:ba:18:2a:44:64:52:4f:d9:
21:72:48:17:c3:2d:7b:9b:57:8c:3a:b3:a4:b8:2b:
ab:3e:ee:20:ce:a5:f6:41:02:65:96:83:a0:65:c1:
46:5f:f3:87:0b:84:19:7e:8c:05:90:3c:4b:6d:12:
9e:b5:50:1e:4c:97:2f:8c:41:80:bf:be:17:78:90:
22:44:e6:15:2e:9c:df:3d:14:c3:9d:e2:a3:e7:37:
e2:ba:a5:aa:0d:fa:13:25:ac:6e:59:1f:f6:24:c0:
9f:2e:48:18:58:07:1c:5f:e9:fb:d1:7f:fd:fe:df:
b2:73:a8:df:5f:71:e9:6e:d9:a8:19:b1:20:18:dc:
bc:28:3c:7a:7a:6f:31:91:d8:3d:61:38:86:a3:45:
95:43:1b:b1:f6:11:f6:08:53:43:0e:3b:95:16:7e:
40:21:7b:c2:23:0d:bc:c2:7f:e1:88:29:f5:87:eb:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:FD:34:BA:13:CD:BA:76:4C:92:45:A6:EB:91:5A:0A:7F:55:D5
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:61:6d:22:4b:3a:4f:79:75:07:69:a8:ee:79:5f:70:25:d2:
7c:2c:0f:3a:73:8f:96:6a:e6:d7:07:ae:e4:ec:72:54:aa:db:
b3:d5:f9:94:6f:54:f1:40:aa:0c:d0:9a:51:34:58:49:34:bd:
c3:99:f0:cd:cf:1a:9b:6a:5b:94:54:f9:d8:4c:fa:0b:70:19:
b6:97:e0:c2:8a:b2:a7:fc:9b:80:96:f2:cc:a9:4a:0c:96:ba:
f1:ff:82:06:03:da:67:ba:8a:8f:bb:11:13:50:b2:6a:4a:61:
48:6e:d7:7d:5e:86:e7:0a:02:b6:03:3a:8d:97:73:5c:38:66:
25:15:48:68:1c:06:18:28:d0:29:dd:41:c2:90:b3:c0:7c:0b:
b1:b7:64:3e:98:94:9c:78:54:4f:2a:75:a1:c5:ba:a5:d2:85:
9a:d3:ad:e3:90:b1:23:be:cb:ef:31:0f:c9:3c:85:f6:d8:5f:
67:09:a3:c4:67:15:81:06:9e:15:d8:d6:12:ff:f9:de:e6:7a:
d4:88:4f:d4:99:cb:be:80:82:f4:86:29:95:f3:ab:fa:db:d7:
8e:4a:cd:16:7d:ca:60:b6:da:fc:0a:23:69:a9:45:c8:d0:b3:
09:1f:70:51:ea:87:0f:6a:23:ec:52:53:86:01:fa:6a:2e:c5:
11:c4:dc:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULoYJ9DyYSXvD2pZ3Kia/bqmOGLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF
QjNCRkYzOTAeFw0yNjAyMjcyMzU3MTJaFw0yNjAzMDMxMTU4MTJaMDMxMTAvBgNV
BAMTKEE4RUVGRDM0QkExM0NEQkE3NjRDOTI0NUE2RUI5MTVBMEE3RjU1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsy0/rMxXkEhCXn//E5RFOut3C
7mOo8DlzZ9K96NSUc5p2lX7jefEFh/Ho1uCp0RZrZWf+SKTnmOQCm3F8gCWVaHR6
SqBV2KYnpz13DwE9FKi6GCpEZFJP2SFySBfDLXubV4w6s6S4K6s+7iDOpfZBAmWW
g6BlwUZf84cLhBl+jAWQPEttEp61UB5Mly+MQYC/vhd4kCJE5hUunN89FMOd4qPn
N+K6paoN+hMlrG5ZH/YkwJ8uSBhYBxxf6fvRf/3+37JzqN9fcelu2agZsSAY3Lwo
PHp6bzGR2D1hOIajRZVDG7H2EfYIU0MOO5UWfkAhe8IjDbzCf+GIKfWH65ddAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqO79NLoTzbp2TJJFpuuRWgp/VdUwHwYDVR0j
BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF
RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC
RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2
MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2
REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH5hbSJLOk95dQdpqO55X3Al0nwsDzpzj5Zq
5tcHruTsclSq27PV+ZRvVPFAqgzQmlE0WEk0vcOZ8M3PGptqW5RU+dhM+gtwGbaX
4MKKsqf8m4CW8sypSgyWuvH/ggYD2me6io+7ERNQsmpKYUhu131ehucKArYDOo2X
c1w4ZiUVSGgcBhgo0CndQcKQs8B8C7G3ZD6YlJx4VE8qdaHFuqXShZrTreOQsSO+
y+8xD8k8hfbYX2cJo8RnFYEGnhXY1hL/+d7metSIT9SZy76AgvSGKZXzq/rb145K
zRZ9ymC22vwKI2mpRcjQswkfcFHqhw9qI+xSU4YB+mouxRHE3Co=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:01 2026 by rpki-client