
$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json)
Hash identifier: qQhmu2sYSNfi0qyhKagdVWvhBOUAQnnSZWiYCLlktPw=
Subject key identifier: 93:29:D8:33:89:AE:C7:0E:C0:94:FF:4E:A5:43:AE:82:D9:AC:AF:20
Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE
Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
Certificate serial: 1DAD19CC04AECD5463CF8E1EB81771A2F663464D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
Manifest number: 0554
Signing time: Sat 28 Feb 2026 18:12:35 +0000
Manifest this update: Sat 28 Feb 2026 18:07:35 +0000
Manifest next update: Tue 03 Mar 2026 21:08:35 +0000
Files and hashes: 1: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: y5KRe7Zu8StrvHuolcqdXq36vWAeB30X3A2C7IsPLxo=)
2: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl
rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ad:19:cc:04:ae:cd:54:63:cf:8e:1e:b8:17:71:a2:f6:63:46:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE
Validity
Not Before: Feb 28 18:07:35 2026 GMT
Not After : Mar 3 21:08:35 2026 GMT
Subject: CN=9329D83389AEC70EC094FF4EA543AE82D9ACAF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:56:d5:67:b9:5f:90:fb:06:1c:3e:5c:bd:
ea:62:af:ae:40:d2:db:df:20:8b:9a:70:55:4f:43:
7f:42:c7:df:48:f4:47:43:cd:27:41:64:2d:7b:ee:
56:e3:24:70:53:fe:79:1a:79:79:06:48:76:c1:b7:
0e:c6:95:0c:9c:72:32:1b:38:bb:cc:37:2c:48:a2:
ce:d8:d2:ba:e4:bd:39:21:42:53:45:e5:fa:9c:40:
6c:47:43:26:d4:4a:77:06:49:ba:0b:ba:fe:d0:4f:
e2:e7:b0:5d:76:f7:d8:bf:d4:86:31:9c:5b:ef:43:
5d:da:48:b8:51:e8:de:05:83:29:df:2e:f5:ed:69:
0a:e7:80:0f:39:03:3d:fe:a2:97:25:8a:d2:af:11:
7d:bc:15:49:b1:df:1a:14:b1:cc:b9:4c:02:ca:ba:
af:6a:52:4b:d0:55:6c:0a:a8:10:03:70:da:b5:3e:
13:4b:11:1d:db:51:bd:8c:d4:11:90:11:26:90:71:
ec:65:01:c9:7a:07:51:c0:16:cb:11:db:86:fd:b7:
a3:96:15:e8:a3:1c:fa:6f:14:73:4a:51:e1:ef:fd:
8d:db:fd:3f:51:c0:c5:22:83:31:09:47:9f:45:27:
f2:d5:fb:9a:d1:7c:0d:48:2b:39:9a:3e:da:c5:91:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:D8:33:89:AE:C7:0E:C0:94:FF:4E:A5:43:AE:82:D9:AC:AF:20
X509v3 Authority Key Identifier:
keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:a6:5a:74:0c:07:6e:7c:da:67:73:e4:6f:1f:de:2d:20:
42:60:20:47:43:f3:9f:8b:28:27:9d:98:b2:3c:10:92:0e:29:
60:d7:c9:55:61:7d:0b:d3:a7:b6:e5:18:5a:93:f5:12:fa:ec:
c8:27:d6:2b:4c:5f:cf:b3:86:19:c1:ce:a8:aa:06:7e:bd:ae:
62:24:76:7c:d0:a0:f5:a7:75:4b:58:e0:b4:10:77:d3:22:d7:
c3:87:01:16:b4:45:ea:90:f3:ad:b2:6a:8f:c6:72:b7:c0:f2:
3e:d4:64:c7:da:be:31:af:84:2b:d2:9b:c3:b5:a7:7d:32:19:
ef:46:ba:b6:92:83:54:79:fe:04:7c:90:f0:c4:bc:0a:cd:c4:
56:f7:44:c0:b7:a4:74:36:07:d6:59:7d:8f:67:f6:b9:a6:46:
5f:e2:6c:ac:b2:72:89:86:1e:c9:b3:bc:06:0d:5a:17:a8:9c:
f8:59:7f:da:b5:45:82:0b:ae:7e:cd:ce:e1:66:75:ee:bb:01:
4c:0a:44:b8:4f:17:2f:a5:0f:94:58:e8:ac:2a:06:8b:d0:fb:
6e:61:e5:98:ea:9f:a1:b4:35:dc:d7:b2:e2:33:e4:ae:89:c8:
c3:f1:cf:16:98:2d:ef:aa:59:8f:89:89:04:e4:a7:0f:42:49:
33:78:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:09 2026 by rpki-client