
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier: Rr/L6FvQuiEj2wnD16VEpwuIHy7iUBflEug+GvYt2pY=
Subject key identifier: 07:FF:0B:77:78:B4:F8:1A:1A:40:36:14:FF:F5:7D:2B:2C:B2:9E:BC
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial: 6B1FDCEF442471C377483ED76683AEA608CA1DDE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number: 0135
Signing time: Thu 16 Apr 2026 05:40:59 +0000
Manifest this update: Thu 16 Apr 2026 05:35:59 +0000
Manifest next update: Sun 19 Apr 2026 06:28:59 +0000
Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: zcAed+U0LIMKkO2m1wb6BGRlQ4YM9y2CMvt4q2VNLq8=)
2: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: IfsKiSRBjE1mOXYKFPBFIdi59DUWmmfMjGJMHYes25U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 06:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1f:dc:ef:44:24:71:c3:77:48:3e:d7:66:83:ae:a6:08:ca:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Validity
Not Before: Apr 16 05:35:59 2026 GMT
Not After : Apr 19 06:28:59 2026 GMT
Subject: CN=07FF0B7778B4F81A1A403614FFF57D2B2CB29EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:69:1f:8b:ac:d8:60:b8:d3:a3:f3:70:9e:
b1:69:d5:82:2b:1d:ca:2b:e1:1c:f3:60:64:10:e0:
80:cb:ab:57:eb:60:c9:80:08:a7:1a:a5:05:e5:00:
bb:99:bc:54:24:90:45:83:5a:a9:66:cd:09:27:3b:
65:5d:06:3f:2e:af:00:f8:07:d2:38:33:8d:96:04:
57:f4:5f:6f:96:22:47:29:8d:de:92:d2:ce:97:0e:
c8:e8:d8:cb:b0:05:b1:fa:93:cb:60:75:86:3d:37:
51:60:f8:66:28:f6:a4:df:e5:31:55:1e:3f:7a:fd:
8b:7d:ee:6c:53:77:94:2b:5f:49:df:93:8b:ba:93:
2a:ef:20:bc:f8:89:cd:b1:b4:67:53:e7:34:69:31:
29:17:74:6d:1a:91:5f:98:10:f2:06:36:2e:b3:20:
07:0e:6e:89:33:5d:32:f6:54:4c:6f:b1:21:e8:d1:
e7:42:39:b6:18:1f:7c:47:55:9e:8d:53:ac:7d:ca:
2c:50:82:d5:12:14:aa:59:6c:ca:e4:ea:06:35:16:
46:18:7d:ba:35:04:cb:34:ff:44:e2:d4:80:d9:cc:
d0:80:25:11:64:a7:1a:65:95:20:ec:74:5b:7b:d6:
8e:73:b6:7c:23:9c:46:bf:96:b8:aa:8e:dd:26:f4:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:0B:77:78:B4:F8:1A:1A:40:36:14:FF:F5:7D:2B:2C:B2:9E:BC
X509v3 Authority Key Identifier:
keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:aa:28:f9:7c:a9:a7:42:ad:14:d3:1e:ca:0e:fe:cc:23:
74:0a:1b:d6:12:d6:9f:9c:b8:39:42:ee:42:94:a0:05:ca:83:
a0:67:39:19:af:3b:a6:2a:43:e0:71:17:12:3b:a2:b9:a6:c0:
84:92:91:de:46:35:a3:f3:08:5e:8c:cf:5b:33:0f:7d:ce:34:
cf:c9:3c:46:a8:04:da:b4:6e:d6:7f:1d:fc:9f:56:66:77:5f:
ac:3f:f2:ff:13:90:83:e8:06:0d:f0:14:ec:16:aa:f3:fe:5b:
86:22:87:ea:68:02:99:45:a8:2e:48:51:76:8c:04:96:3e:cc:
57:a2:98:3a:ce:eb:1b:d1:02:c1:c1:1a:3d:49:fe:51:9e:10:
02:15:08:c0:c5:ba:a5:3b:75:1d:88:1c:53:d5:c7:b3:c7:88:
18:a8:c5:50:43:14:24:39:be:83:d8:3a:ca:06:ce:24:e9:d2:
48:de:9f:ac:15:41:b6:ce:5f:d4:7b:c9:66:40:a1:7f:97:17:
30:1b:f6:10:68:30:22:e7:23:36:51:33:44:84:98:18:99:cb:
64:97:9d:3f:d2:5f:20:77:44:3f:2b:2d:8b:17:a3:9e:9f:ba:
d1:73:eb:fb:c9:51:80:a6:1a:28:43:0b:9f:56:1d:42:6e:27:
0c:55:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:36 2026 by rpki-client