
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
File: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft (raw, json)
Hash identifier: k4lW2gkhkE34xOXdWYVVTubqmis1gKP9hkPRCrVozI4=
Subject key identifier: 5A:2A:2D:24:6A:62:30:14:AC:2D:EE:79:CE:71:9B:F0:05:1F:C2:1A
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial: 562F83FB4513BD7400F8674B9E9F2B7D7E8ECB19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
Manifest number: 028E
Signing time: Sun 19 Apr 2026 08:50:52 +0000
Manifest this update: Sun 19 Apr 2026 08:45:52 +0000
Manifest next update: Wed 22 Apr 2026 18:54:52 +0000
Files and hashes: 1: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl (hash: cucXOZGM3AX0kx7lRqHJ1Ng3RSmek8pqsBHgN8I1cMg=)
2: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: pWW6aChZuEDy/+0vrjLWEhH3QTbtcqu7md1QFPSZMbA=)
3: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: Eu8noK11YtmIqP6t9xYjmQw1Qd5I4vjGt0rp0irsYoQ=)
4: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: INkpUO7QcpsFX9uRfCsq0kQs6LP2TMwC7sWQRzGxwL4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 10:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2f:83:fb:45:13:bd:74:00:f8:67:4b:9e:9f:2b:7d:7e:8e:cb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Validity
Not Before: Apr 19 08:45:52 2026 GMT
Not After : Apr 22 18:54:52 2026 GMT
Subject: CN=5A2A2D246A623014AC2DEE79CE719BF0051FC21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:62:c2:08:1d:e5:07:da:72:0d:a7:a7:71:
16:20:b0:10:43:3c:b8:ad:91:34:4e:6f:1c:bc:a8:
84:b5:3c:72:20:0b:67:25:67:fd:8e:24:6e:e4:38:
ac:fa:e0:f3:e5:55:db:fc:a6:c3:b1:5e:a7:e1:1c:
19:26:ac:ea:11:1a:86:05:c9:9b:dc:fd:6e:6f:31:
42:e7:23:4c:32:5a:c2:a7:3a:11:d6:73:5e:28:0e:
6d:70:ac:37:f6:10:cd:72:57:06:ca:c3:ce:83:0f:
ed:c3:58:2a:eb:bb:ca:f9:43:76:39:ec:fa:95:81:
5b:5b:1b:1f:45:2c:f5:14:d2:94:3f:30:1a:41:fa:
7c:c3:8f:70:d2:af:9b:eb:d1:d5:8d:17:7b:4e:db:
ca:a2:c8:fd:42:b4:a2:4f:06:8c:29:4e:ef:4a:79:
81:aa:9e:9e:d5:1b:85:f9:6b:f5:e8:9b:8a:83:23:
e0:1c:a0:04:73:9f:d5:ba:f6:42:2c:94:95:9b:1b:
23:e2:9d:43:1a:2d:fb:10:8d:f7:7f:ea:46:9a:7b:
b9:c8:1b:0c:c5:04:6a:93:ff:c9:d5:ef:4c:9a:e4:
0c:ed:66:b1:59:a8:57:4b:07:84:4d:dd:80:14:9b:
b8:5f:ed:5c:27:c4:9a:0b:a1:ac:89:05:c1:af:08:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:2D:24:6A:62:30:14:AC:2D:EE:79:CE:71:9B:F0:05:1F:C2:1A
X509v3 Authority Key Identifier:
keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:30:2a:f9:1a:da:1c:d2:45:27:95:d2:a1:1b:c4:dc:db:
45:2b:76:d2:68:64:64:6b:b4:6d:3f:17:4f:bf:be:50:22:58:
53:2b:1a:cf:e1:da:d0:c9:01:d0:9d:8e:b9:87:d4:ab:8d:ce:
44:c7:82:42:55:5d:66:2e:74:c9:2d:7b:08:f5:a7:23:db:f7:
d9:4f:d0:55:7f:6f:bb:59:f0:b3:fb:df:16:47:f8:51:e9:4c:
e1:1e:b0:14:9a:0a:d8:aa:a3:b3:03:60:86:1e:29:6c:8a:9a:
27:6d:9e:44:50:37:ac:72:55:b2:cc:ab:de:1f:50:d4:d8:7e:
25:f1:cc:72:94:d2:47:86:15:9e:ef:57:a2:e2:ff:16:d8:e8:
b5:e7:16:73:6b:bc:67:9a:72:8f:c0:b6:70:ec:b0:98:f1:d6:
08:4f:2c:c0:03:ff:0f:ed:12:39:02:7e:42:59:14:c7:18:99:
9c:8e:25:80:45:c6:25:c6:36:90:fc:ef:4c:8a:a1:52:64:25:
4c:82:a3:b9:50:19:40:af:c3:ac:cd:d2:6b:c4:3b:dd:0e:a4:
f6:30:2b:0c:db:2d:81:77:57:e8:bc:c6:97:36:43:b4:96:93:
5d:44:22:15:8a:7e:a2:12:eb:2f:66:70:6a:ee:8b:42:3f:14:
e6:1a:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:09 2026 by rpki-client