
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json)
Hash identifier: QA9VDrKus/LVXLKnkc0VCFGYdS+AtRmsAd4AS64Om7M=
Subject key identifier: 8E:3F:CF:5B:D5:A2:AF:64:BE:58:0E:E1:56:6C:88:37:1E:23:88:E6
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial: 5D7D01FE328EA3CC9FC0B4715939B8B2683600EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
Manifest number: 02A4
Signing time: Fri 27 Feb 2026 20:50:49 +0000
Manifest this update: Fri 27 Feb 2026 20:45:49 +0000
Manifest next update: Tue 03 Mar 2026 00:59:49 +0000
Files and hashes: 1: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: qUEFUeyx6PFKDpLj8lLr44AqFpnGjzqjL8vcRbAqP5U=)
2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: 7T0qhCvx1xUQ0ejRAS+BE16gGRrpbPoO/i/qSb56WPY=)
3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: 0B/Z8RQPoiVOhRHwE1cqN2QWbyPN7hLbYCLPIcC7ksQ=)
4: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: pJ+pketDrgyxlO6FDkupVNoKbhVs7VdAWWvUlmDxs/Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7d:01:fe:32:8e:a3:cc:9f:c0:b4:71:59:39:b8:b2:68:36:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Validity
Not Before: Feb 27 20:45:49 2026 GMT
Not After : Mar 3 00:59:49 2026 GMT
Subject: CN=8E3FCF5BD5A2AF64BE580EE1566C88371E2388E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:70:c0:0b:e6:34:a9:be:59:39:66:63:4e:
cd:b8:8c:a4:29:10:aa:af:b2:b5:a0:06:2f:fc:50:
c5:9c:df:2b:70:89:3b:d2:de:e4:ee:2d:24:e0:a6:
ac:13:30:ca:f3:d0:0f:f9:ca:81:05:93:cf:e1:e9:
40:6d:14:fc:4d:48:8a:f8:9b:29:17:5d:03:2c:5f:
bd:2a:33:38:a1:09:d5:43:ef:73:19:3c:92:1e:7d:
a5:b3:21:fd:7e:fd:6d:d8:95:a2:c9:1b:47:24:08:
6d:5b:81:67:70:e5:91:04:3c:01:f6:c5:c6:77:4a:
fd:4c:fb:e0:b8:eb:ea:2f:b1:97:36:4b:91:ea:51:
08:9c:07:49:f8:57:9b:21:a2:3a:4e:c2:3f:9d:91:
4e:98:b3:73:2b:da:f1:f3:25:12:00:f4:aa:e9:51:
56:0e:4d:9d:29:c0:25:7f:3f:64:c8:8a:91:91:c6:
87:45:52:68:ad:78:b1:0d:37:9a:a2:34:e8:73:f0:
f7:21:be:b8:35:08:9d:be:77:2c:0f:e6:4e:f5:29:
57:e1:19:66:9f:f4:73:dd:4a:8e:a6:0f:1d:a7:f2:
28:05:b1:e2:8c:4f:40:03:ee:e8:26:d1:d5:f1:d4:
a0:08:7f:d1:8c:dc:26:29:da:35:79:11:84:71:27:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:CF:5B:D5:A2:AF:64:BE:58:0E:E1:56:6C:88:37:1E:23:88:E6
X509v3 Authority Key Identifier:
keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:1c:04:f1:29:80:22:ce:bd:25:d3:ed:d0:66:39:4e:7f:
1f:83:81:86:3a:fe:bc:32:54:4d:e7:ac:f9:23:c9:f4:1f:08:
c4:b2:04:76:5d:6a:0a:f7:08:0e:8c:7d:9b:0d:4d:ef:9a:8c:
23:67:dd:44:38:de:b7:e2:83:70:eb:cd:af:d9:1f:79:b7:42:
80:40:10:75:2d:d9:1b:82:9f:13:d6:a7:27:61:0d:42:33:5c:
76:6d:2c:f7:7f:1d:da:41:7d:7f:b4:a5:f1:ef:44:68:d3:ef:
7f:00:5f:80:d4:ff:5a:b4:81:3a:08:0f:f8:b5:f3:cd:64:96:
3e:33:1b:08:c3:85:f8:08:a8:ce:a4:e0:8c:6d:d1:1c:bb:af:
db:9a:f0:10:1a:dc:a8:2f:90:4c:0f:07:8e:ee:76:a6:40:7d:
87:b8:52:19:f0:b8:2f:d2:95:05:39:79:15:5d:75:8f:42:23:
5b:c5:e0:b1:10:57:99:98:8b:68:20:c9:a0:18:60:34:74:ae:
99:35:41:67:ee:a9:3b:0c:0c:4b:dc:58:8e:fd:69:b2:11:cd:
d8:39:ee:f0:8f:21:b2:07:e5:17:99:4b:d1:68:9e:ee:e1:19:
bb:36:4c:87:cd:cc:b6:b3:2d:92:ce:98:72:f5:ac:2d:6c:bf:
17:94:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:31 2026 by rpki-client