
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json)
Hash identifier: Y0w9fdsMN1naJm0oKuyxYR1ky4eKQwM0lDIybo+8SXU=
Subject key identifier: 86:CD:B0:F9:91:87:6B:F6:A1:D0:4C:A4:D4:FE:C9:80:1B:F3:A2:AF
Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Certificate serial: 655FBD3536FF5DBF3BA2D22B205214E065CF0D04
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
Manifest number: 0554
Signing time: Sat 28 Feb 2026 14:11:18 +0000
Manifest this update: Sat 28 Feb 2026 14:06:18 +0000
Manifest next update: Wed 04 Mar 2026 01:12:18 +0000
Files and hashes: 1: 3130332e33312e3130392e302f32342d3234203d3e20313333333630.roa (hash: 49661VGQ4ZvwDmpnxmNaIUS/VEvyTMAxvwwlmJQfjlM=)
2: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: S1vgIa4TejuABlD/HM39pW7lq7uYwq6ujikciOhBknc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5f:bd:35:36:ff:5d:bf:3b:a2:d2:2b:20:52:14:e0:65:cf:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72
Validity
Not Before: Feb 28 14:06:18 2026 GMT
Not After : Mar 4 01:12:18 2026 GMT
Subject: CN=86CDB0F991876BF6A1D04CA4D4FEC9801BF3A2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:29:28:1c:d8:cf:b7:92:90:69:db:23:79:
49:b4:49:34:5e:ae:e8:75:33:da:e5:b9:51:33:84:
bc:0b:74:45:20:d1:a9:7a:f6:31:a3:c3:d4:29:a1:
fc:1d:e4:6d:7e:5a:27:ac:09:70:40:3e:f7:15:8c:
bc:f2:06:f6:1e:39:c1:89:1d:7f:6d:67:1a:09:e4:
05:3f:2b:07:6d:fd:b0:39:67:22:3c:e4:90:88:7e:
d4:e5:36:54:e9:4a:f7:8b:8c:7b:2c:e0:52:c8:24:
7e:bb:45:38:ec:d5:7a:3e:68:bf:2f:15:b9:5d:d7:
68:97:6b:8f:85:cc:f7:43:2b:8f:31:2f:e3:3e:00:
3f:3b:07:81:5d:5d:1f:44:dc:08:26:38:a7:22:d5:
1e:e9:c6:72:b6:be:b1:ba:b1:57:a2:f8:16:0e:5c:
a3:18:e6:cb:22:13:0e:e0:db:f6:16:c5:8f:2a:ad:
72:50:15:57:7b:f7:c1:aa:58:45:fd:e3:e4:20:bb:
0c:2c:13:54:5d:13:63:75:ad:81:2b:5d:58:9b:1b:
fc:79:bf:f5:00:ce:32:86:a3:3e:9b:fb:be:02:f2:
fc:7c:76:14:4b:c2:34:d1:33:6d:46:86:b9:1a:d3:
3c:c2:c2:28:84:11:d5:a5:08:cd:3b:ea:df:76:f6:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:B0:F9:91:87:6B:F6:A1:D0:4C:A4:D4:FE:C9:80:1B:F3:A2:AF
X509v3 Authority Key Identifier:
keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a7:f9:5e:a6:7d:e7:29:8f:59:7e:9a:a1:dc:09:c0:c2:c8:
60:c1:9b:8f:1a:f0:21:98:b3:8b:f0:68:cf:31:7c:4e:23:c5:
d0:62:c9:03:29:a7:26:d3:a1:bf:c9:0b:72:56:01:65:5b:82:
42:32:c5:d2:47:42:47:55:be:c9:e6:ed:2c:ed:fb:10:6e:3d:
79:fe:fd:e1:0d:ef:5d:26:61:e7:2b:f8:00:0c:9c:82:2c:60:
d0:2b:94:6c:db:1d:4a:42:31:36:6a:1b:97:78:39:dc:18:b2:
b7:94:0c:8d:34:b5:2c:f3:70:ce:3d:30:ed:3c:88:6a:95:ce:
15:86:23:4e:75:3d:dd:b1:df:dc:c7:d1:9d:24:96:d6:68:33:
7a:de:fa:5e:77:fd:78:3b:c7:d5:cd:90:22:b9:80:ca:19:3e:
46:ff:3d:d8:a7:92:23:6d:17:55:43:9e:d9:95:18:76:e0:2a:
91:e6:48:8f:45:39:de:5a:23:61:ae:77:2c:93:c2:75:81:e7:
0c:d5:7b:3d:43:fa:83:f5:ff:85:65:46:29:a4:8d:6e:21:8d:
67:37:70:2b:82:fc:f0:60:5e:2f:35:ec:d0:7f:a3:f9:4d:02:
1f:29:bb:0c:0f:99:29:45:4b:4f:1b:c2:78:e8:09:4b:1e:8d:
f8:38:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:40 2026 by rpki-client