
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json)
Hash identifier: 0cpDbDK6L7xoeG2/15vx+YVFh5Z1Nvl1sUL393EefdI=
Subject key identifier: 69:5D:5A:E8:FD:57:18:FD:92:C1:D2:A5:F3:2D:68:65:03:39:EB:9A
Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48
Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048
Certificate serial: 6FD6548EFDDAB232B9695F0744AA8F837158C400
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
Manifest number: FD
Signing time: Wed 15 Apr 2026 09:21:45 +0000
Manifest this update: Wed 15 Apr 2026 09:16:45 +0000
Manifest next update: Sat 18 Apr 2026 13:46:45 +0000
Files and hashes: 1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: ruB5pjv/75XeKUaWhknocpawfQxsOz/J2Vr2+QbuOVs=)
2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl
rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d6:54:8e:fd:da:b2:32:b9:69:5f:07:44:aa:8f:83:71:58:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048
Validity
Not Before: Apr 15 09:16:45 2026 GMT
Not After : Apr 18 13:46:45 2026 GMT
Subject: CN=695D5AE8FD5718FD92C1D2A5F32D68650339EB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:c8:38:28:8d:83:f2:5c:c1:b8:05:4f:5b:
8f:1e:f1:7b:28:96:69:b9:a2:a7:77:af:b9:07:68:
0a:9b:7d:25:de:cf:95:13:73:32:eb:c2:07:58:7f:
7a:3d:28:f6:65:54:c5:60:ed:ed:f2:39:9d:2f:2b:
e3:49:1c:9a:40:40:61:60:3c:29:41:90:a1:e8:e6:
e6:61:d7:66:75:e7:0d:32:d1:e7:92:41:16:41:f5:
e1:46:02:07:4b:cb:64:bf:5e:72:e7:72:12:40:e6:
91:6f:f2:00:aa:7c:e6:bc:c6:b0:63:f5:cb:f8:63:
2e:67:25:8b:6b:28:cf:d1:85:89:46:1f:a9:d2:95:
ad:b0:6c:5e:d1:bd:5f:1b:b0:1c:8b:6e:43:1a:fa:
de:b8:0d:1a:08:6a:14:70:73:83:01:d8:6b:f0:39:
9c:7a:bb:ee:4d:25:c5:10:fd:24:a7:ca:45:dd:72:
f6:c6:ee:aa:37:10:7c:c5:c1:3f:5a:72:af:93:31:
44:19:d2:32:3d:99:75:3a:ce:90:75:ca:8e:eb:b0:
5c:c6:24:56:e2:d2:a0:61:ab:ec:dc:f3:14:83:5d:
e5:75:7e:d8:97:54:21:46:8b:cb:7d:f1:4e:2a:94:
75:19:bc:50:a1:47:a6:53:b3:47:8a:3c:38:39:ca:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:5A:E8:FD:57:18:FD:92:C1:D2:A5:F3:2D:68:65:03:39:EB:9A
X509v3 Authority Key Identifier:
keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:17:ef:5e:b7:a6:ea:f8:6c:ab:34:c3:dd:6c:61:06:4b:
0f:e1:1a:da:e2:e6:26:27:10:34:14:7d:e3:ea:6c:bc:5f:e9:
17:b4:74:13:84:75:6f:6a:ab:b9:b7:91:a3:12:f8:6c:d3:89:
54:f9:52:f5:0b:a6:6b:32:8d:db:36:3e:b3:a0:35:1b:f3:e3:
8c:c8:ea:44:aa:e6:26:ba:22:09:6c:07:12:44:76:ed:f8:6a:
d0:4a:c4:31:e2:b0:83:6b:91:d6:6e:1a:cc:dc:88:10:48:23:
d2:f4:9b:6f:ec:2a:00:6b:f4:eb:f6:1f:9a:9c:1d:7b:c0:89:
e9:8b:50:7e:6e:57:76:b7:00:f2:4c:fb:55:5f:5e:65:2b:aa:
2d:d4:4a:df:7e:cd:74:94:4e:5a:df:f6:11:8b:4d:cc:7f:27:
77:b0:2b:a8:dd:52:2f:7f:1d:2c:1c:a7:cb:1d:74:75:98:93:
c1:a7:13:49:d6:76:b3:bf:b6:80:0a:ae:b3:b8:b1:c2:73:2f:
69:79:58:d0:96:a6:0d:db:46:40:54:7f:c2:82:c0:2b:2c:55:
aa:af:97:88:09:3a:ef:44:dd:30:38:8b:4b:e7:84:06:98:e4:
43:1a:eb:9d:ad:93:7c:7f:56:56:8f:18:b2:c5:00:e8:01:c0:
fa:eb:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:15 2026 by rpki-client