
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json)
Hash identifier: +W52oV7trtqlcyokkF6nNMTbB+VZtRnOMPrETNSOXXA=
Subject key identifier: DF:14:7C:31:B6:B2:AB:B4:63:74:6A:77:13:58:BE:55:4D:FC:68:43
Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Certificate serial: 6E44CA2FCC9AE36290C564AEAE8DE19E39C5FCCD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
Manifest number: 055B
Signing time: Sat 28 Feb 2026 18:32:13 +0000
Manifest this update: Sat 28 Feb 2026 18:27:13 +0000
Manifest next update: Tue 03 Mar 2026 22:57:13 +0000
Files and hashes: 1: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=)
2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: qsv/vVTjxa13kTfS+jxnHw+D/hMu2lrks7qVnIhuM5A=)
3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=)
4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:44:ca:2f:cc:9a:e3:62:90:c5:64:ae:ae:8d:e1:9e:39:c5:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Validity
Not Before: Feb 28 18:27:13 2026 GMT
Not After : Mar 3 22:57:13 2026 GMT
Subject: CN=DF147C31B6B2ABB463746A771358BE554DFC6843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:d7:45:f4:a1:42:ba:82:97:c1:f5:ef:a3:
70:94:55:a2:f9:1d:a1:1f:41:08:d7:b2:7a:07:5b:
8b:5a:5b:d6:91:2d:3e:12:2c:a5:f3:29:61:0d:84:
06:33:09:f8:d6:15:fc:fe:bd:a0:d3:23:cb:a7:cc:
55:54:55:e7:52:6f:d1:f3:85:64:56:ce:7d:d0:67:
28:d4:31:b5:16:d4:d5:2f:9f:0b:00:fb:7d:e4:f2:
87:d3:d5:23:17:d3:e4:95:da:87:12:91:fb:d2:aa:
ee:ea:c5:09:c9:eb:8f:32:4f:d1:42:52:85:4a:78:
79:ba:8a:c2:22:02:cb:f6:f0:22:8d:f1:69:d5:6c:
75:d4:e7:43:4a:98:5c:d3:7f:1f:f5:91:aa:34:67:
36:3d:69:a5:3d:51:aa:56:5c:43:a9:64:cf:13:4f:
0d:7f:2f:a7:3e:2c:cc:03:02:11:8f:7c:05:0b:f3:
b5:20:c3:6b:bf:79:13:59:8a:67:03:d8:09:87:a6:
32:69:38:1f:88:a5:81:a5:9a:2e:35:26:fe:ed:02:
7f:14:90:6e:0e:fd:80:be:cb:6e:04:af:13:61:e0:
af:9b:77:ce:38:87:be:a6:22:3f:88:f4:cd:70:e7:
4d:05:77:e7:54:a3:e4:77:eb:66:39:6a:17:b8:6e:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:7C:31:B6:B2:AB:B4:63:74:6A:77:13:58:BE:55:4D:FC:68:43
X509v3 Authority Key Identifier:
keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:f5:99:f4:91:87:41:2d:7b:66:43:9e:f7:69:f9:0d:c4:
6a:23:26:b8:37:1f:59:5c:b1:22:58:a5:bf:1b:c9:75:b5:f7:
3a:6b:ff:95:ce:d5:a7:db:4a:b7:33:a0:61:e2:cf:0c:57:68:
d3:cd:e0:c9:4a:92:67:5f:fc:9e:ff:88:b9:37:93:c6:e9:14:
94:16:ba:07:64:24:d7:b2:6b:59:7c:a6:c4:06:66:1e:dc:c7:
51:1e:81:55:b7:86:75:4d:f8:8f:8c:16:cf:9a:ac:df:b5:64:
2f:ac:1b:16:1c:da:e6:f0:1f:2c:93:8b:e2:cf:7a:22:e7:70:
6f:25:1e:ab:34:6c:ec:ed:c6:97:eb:bf:b4:78:ab:a0:4b:9c:
ec:50:6c:c1:ce:da:44:1b:83:df:de:6a:94:aa:d9:61:7e:83:
1b:36:63:c7:70:df:e9:92:4b:6e:7e:82:eb:be:e1:39:b1:23:
65:48:aa:46:e2:0c:8d:29:e0:fb:81:77:39:1c:95:e8:a8:64:
41:c7:ac:0a:ea:94:27:64:d7:3d:77:b2:fd:dc:b4:fd:26:8f:
4a:00:d9:51:b1:30:b5:92:5b:e6:86:9f:72:d7:a5:90:e2:02:
21:ce:76:38:b5:b5:e3:73:aa:0e:35:f0:0a:d5:6c:3c:53:f5:
f9:4f:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:35 2026 by rpki-client