
$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json)
Hash identifier: AZtJZK/WlqPUtwiK8nkmj/TOnNJKUgyH1g4o9elfSWk=
Subject key identifier: 8E:5A:02:00:3A:A2:E2:66:C0:34:9E:65:D9:4B:0B:74:62:3E:3E:10
Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343
Certificate serial: 459A67EB35E9014B2173BE85C52D84572202F6E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
Manifest number: 0163
Signing time: Mon 02 Mar 2026 00:41:36 +0000
Manifest this update: Mon 02 Mar 2026 00:36:36 +0000
Manifest next update: Thu 05 Mar 2026 11:51:36 +0000
Files and hashes: 1: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: SKZ4JC2PVchiPELxqukX4ZUosexDdg2XkKRXWqgW864=)
2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=)
3: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: Gmnnliz/sXilaW8sNs2Al3PxNI5lkebSh0pKkWZ7rLw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9a:67:eb:35:e9:01:4b:21:73:be:85:c5:2d:84:57:22:02:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343
Validity
Not Before: Mar 2 00:36:36 2026 GMT
Not After : Mar 5 11:51:36 2026 GMT
Subject: CN=8E5A02003AA2E266C0349E65D94B0B74623E3E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:c7:fe:58:8f:59:64:1d:d4:01:0b:64:c1:
b0:81:0c:ed:ae:3f:a5:93:55:c5:85:ac:11:dd:cb:
65:c9:7b:0c:93:70:ff:7b:38:e5:42:1a:14:98:30:
a4:ec:c2:8c:ea:3b:22:98:c7:44:38:c9:8c:4a:0d:
d3:ca:1b:dc:c4:f3:3b:29:ea:2b:6d:4f:f7:93:dc:
f0:67:f0:19:05:d2:22:73:41:bd:46:fc:c8:b6:2a:
d8:73:9c:86:e0:70:ce:d4:53:42:1d:7c:25:b6:af:
57:2e:93:9e:18:91:e1:3c:fd:ce:41:fd:db:00:3e:
f1:fe:a5:f6:db:47:e4:20:7b:5f:8c:03:a5:53:76:
c7:09:4c:6b:5d:b5:6c:b0:47:b6:31:f8:bc:13:a7:
b2:a7:0e:2a:70:53:29:09:21:7b:51:04:91:79:e7:
60:55:98:7c:0b:b8:35:00:74:fb:24:d3:3c:d1:33:
53:ef:b9:76:a0:52:b9:b7:27:00:f3:3b:86:ac:e0:
34:c4:f3:a5:f4:cb:70:42:97:61:f6:58:ef:42:b2:
3c:bd:18:30:6a:cf:0f:80:4e:14:29:e5:f5:cf:86:
0b:d6:a8:8d:0e:66:1d:9c:08:e1:47:de:6b:76:47:
4e:f0:f8:9e:5a:62:a5:62:b0:ce:32:86:89:37:45:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:02:00:3A:A2:E2:66:C0:34:9E:65:D9:4B:0B:74:62:3E:3E:10
X509v3 Authority Key Identifier:
keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:66:47:45:4b:23:a9:1d:de:55:67:5c:63:7e:7c:b1:f2:98:
c8:55:92:c4:9f:be:79:eb:b9:66:13:c6:60:fa:6c:31:d8:b1:
dd:0e:2d:e8:da:4e:cd:f6:96:b1:aa:ce:0e:0f:eb:c8:0b:e5:
dd:91:48:60:db:26:2e:8a:f3:f7:f2:fb:eb:5f:dd:e1:b8:21:
29:cc:06:eb:ed:5c:cc:27:09:ce:3f:35:57:ce:4d:6b:d0:9b:
b2:3f:b0:81:29:d4:34:ea:de:21:94:16:42:b1:88:15:c6:93:
6c:58:1e:ab:83:14:1e:e6:61:56:0b:8b:20:ea:11:fa:22:7c:
2e:8f:13:08:0f:02:86:1d:01:c2:08:82:c6:ab:0c:96:24:4b:
49:e1:fe:9d:74:42:2f:81:98:c5:75:2a:a0:05:7c:b0:f2:9e:
f4:b4:77:78:35:35:ae:0f:dc:6f:ad:78:14:9e:c4:72:6b:3d:
bd:e2:2a:11:db:d5:74:5c:78:24:95:3e:51:97:8a:ea:7c:08:
f3:6f:93:bc:63:1b:70:7c:e6:59:ee:27:aa:7b:09:60:89:a0:
65:c7:6e:dd:21:4d:41:79:37:3f:36:00:1f:0a:e7:85:df:af:
1f:08:87:b5:bc:31:2d:c4:ce:02:30:da:6c:b2:95:ec:fc:b8:
e1:e1:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:26 2026 by rpki-client