
$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json)
Hash identifier: RGy3Ppnh14/d6b+BscKzgEWVJxOahSJpcg5/W56IGFg=
Subject key identifier: 2E:47:33:69:C0:A3:DD:A9:09:9A:51:E7:E7:77:3D:D3:4C:E7:5C:E0
Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Certificate serial: D6E7465E8BD2B5C6F2FAE02532F35F47EE5880
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
Manifest number: 0109
Signing time: Wed 15 Apr 2026 10:41:57 +0000
Manifest this update: Wed 15 Apr 2026 10:36:57 +0000
Manifest next update: Sat 18 Apr 2026 19:11:57 +0000
Files and hashes: 1: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: +Bze8BZBC0KvVnUg4RX2G7fEv3vmnD5w1jsJXTgCCsg=)
2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=)
3: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=)
4: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 19:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d6:e7:46:5e:8b:d2:b5:c6:f2:fa:e0:25:32:f3:5f:47:ee:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Validity
Not Before: Apr 15 10:36:57 2026 GMT
Not After : Apr 18 19:11:57 2026 GMT
Subject: CN=2E473369C0A3DDA9099A51E7E7773DD34CE75CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:cb:26:ef:ae:b5:70:05:d1:62:64:95:50:
c9:42:4b:a6:7f:ce:0f:10:93:6b:4a:b8:56:17:b1:
5e:4a:99:fb:5b:b5:39:a9:87:a1:08:4a:a0:8a:26:
0a:ca:9b:ae:fd:fe:1f:44:8f:bf:46:f8:33:ff:ba:
70:70:fe:bb:79:61:d8:5a:a8:02:88:3a:30:5d:af:
1c:19:d2:48:9c:86:1f:9d:a3:fd:68:08:83:a7:d0:
3b:b0:e1:20:76:e8:1f:67:1d:3c:ab:f4:e0:10:cd:
14:72:71:72:44:36:68:31:8f:ca:b9:78:19:03:61:
c1:b9:aa:1f:02:9a:6c:70:81:96:d1:35:fd:1f:08:
44:35:b0:aa:47:bf:27:2c:5a:53:2d:26:75:e7:7f:
ed:82:7a:76:4c:5c:43:e7:02:5c:a7:da:20:c7:58:
b2:0b:21:d0:44:83:20:8a:4d:05:5d:f3:6f:d6:bf:
d6:f9:45:28:53:72:9e:e7:9e:31:44:a9:8c:34:85:
d5:2e:96:b5:e0:2b:ce:67:f8:43:da:bb:33:51:d1:
3b:3d:df:61:be:78:e7:e5:c0:07:3d:61:15:28:73:
1c:e0:9f:af:73:a3:47:66:a3:b4:56:82:ea:9a:5e:
85:f8:84:2f:38:b2:13:b8:2d:69:22:0a:2f:e5:2f:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:33:69:C0:A3:DD:A9:09:9A:51:E7:E7:77:3D:D3:4C:E7:5C:E0
X509v3 Authority Key Identifier:
keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:93:2d:d1:93:73:ab:b2:97:ff:34:09:e1:a4:ba:b6:b4:2e:
3f:0d:a6:73:1f:d8:15:08:6b:80:77:5c:fc:40:d8:f5:65:0f:
fc:6d:06:4b:c8:bf:0c:57:18:04:a2:94:ed:97:10:7d:0f:2e:
f2:08:37:5a:bf:72:8a:a8:c3:8f:dc:eb:68:eb:32:b8:73:19:
6c:bb:4b:da:0b:2e:1f:43:14:f1:6c:a4:4a:c2:27:b9:b2:c1:
ec:9f:2a:7e:88:f7:9d:95:7b:41:08:02:af:2f:48:60:6f:5d:
76:7c:2d:8e:ab:ad:b6:a0:02:76:ea:04:41:af:28:aa:db:4c:
67:73:2c:7f:6f:59:94:ca:10:d2:8f:11:62:09:3b:74:ce:bb:
4c:31:78:06:09:11:0b:f9:1e:f4:ff:db:77:7a:a9:de:92:e6:
a5:e6:a3:5e:07:d0:c3:42:5d:3c:e7:e8:a6:fa:04:c7:8a:80:
a6:b1:f8:48:3a:87:d6:77:6f:b6:d0:d3:70:08:4a:53:82:41:
b6:47:32:76:8e:d5:b6:ba:be:b4:36:04:0c:40:88:ab:75:60:
a8:b5:9f:02:9a:d4:45:50:65:48:5d:f4:15:bc:5b:b8:05:0e:
38:2f:37:e4:04:ea:33:e1:a9:e5:1b:41:13:ac:82:42:8f:a6:
35:9e:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:44 2026 by rpki-client