
$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier: h2rQljGp3QmrLBfxtGf1Cl5opUJ+/iDeMdyM79D4Qh4=
Subject key identifier: 71:CD:52:70:D6:E0:84:78:0E:87:F7:D4:09:5B:41:35:C0:29:D1:46
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 359F623027E83BD284FBE8CCAEA8E8FC0EF6A1CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number: 0570
Signing time: Wed 15 Apr 2026 18:22:29 +0000
Manifest this update: Wed 15 Apr 2026 18:17:29 +0000
Manifest next update: Sat 18 Apr 2026 20:22:29 +0000
Files and hashes: 1: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: IOFzZe1IvwoIGSoJhxZwtkEkEW47dvJdJ0E5fC3jeys=)
2: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: zwjRbhAd37vYOMqQTMDgbFZLcXrfLuBXrkpquQN03WE=)
3: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 9BxarKCax6xXzwA7sCkwW9bstNPy4ZEaa9LRlsVppIQ=)
4: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: bGPK4/XEobq1bk7eW0IqEOt5RrHUWnGxVvGe+M2MWVI=)
5: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: H4PttalZLNptjPsZ0cni/wefIj1b5DtDJUp4pLmDsx8=)
6: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: zhsac+dR+hLwxuxKAvs58KLjwCG2OW3/qJ9XL7XL52Y=)
7: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: PVQdneK9Q2r+2YuMkyuS3S7JvDEOimiQ6kS5G4qY3D8=)
8: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 3zcWmXCIsv3omjOiSti1UlbmTCz0e0HYT7ukX9kfxvE=)
9: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: VXuEsrUjBUraWB5GeM4W6dfuMEU9X+IXajG+jXJX29c=)
10: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: tcAOfelZsfvkpX9bUklTUsOMqUIe7iMnYq8XrY6rniM=)
11: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: Aqv+Cv2xxpkL4seMoOW2PqWbLLYJHATV5/+tD0LtsgA=)
12: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: gZk1T/dkMTrS84pw0J4gV2Y2OTBmX53r/tMt8sk8xyk=)
13: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: Ulal03KaCVZbu0jye4Et6grNN6xfSzGRs7XoejJgRmc=)
14: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: r4N7YVGjSR/vf/OS/81YrBx8jNMdTo+vkJbDS2Aeqlg=)
15: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=)
16: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 20:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9f:62:30:27:e8:3b:d2:84:fb:e8:cc:ae:a8:e8:fc:0e:f6:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Apr 15 18:17:29 2026 GMT
Not After : Apr 18 20:22:29 2026 GMT
Subject: CN=71CD5270D6E084780E87F7D4095B4135C029D146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:6d:9b:62:e8:04:06:e9:40:a5:09:e3:12:
2e:2c:fd:33:d5:86:70:d3:8b:29:46:70:eb:60:4c:
b8:7a:1a:3d:2b:d6:b2:c1:af:bd:ec:94:e1:64:25:
e2:35:62:01:8f:84:34:cb:58:77:e9:c1:c9:bc:53:
5a:98:d4:ba:55:4d:c9:ba:b8:15:8c:a2:db:48:ec:
b0:4c:e3:19:5a:17:0f:28:ce:95:af:d0:dd:c7:68:
7a:3e:e0:05:50:66:cc:5d:8b:6c:e2:fa:c6:09:d1:
c0:6e:be:03:38:c3:36:65:df:70:b6:ab:d6:0f:6f:
66:63:37:20:f1:5d:75:59:82:d2:d1:08:a6:72:67:
da:7f:69:2d:c3:f5:17:f8:39:db:b6:6a:04:6f:a2:
9d:5c:3c:97:06:ee:85:c1:2d:1c:75:f5:56:ae:b6:
d5:ad:cd:42:01:12:fd:b3:5e:b9:33:ad:fd:bd:d9:
8a:42:88:b0:9e:12:bd:42:c4:50:77:b1:5a:d9:b4:
d5:24:9b:6d:16:6f:9a:92:fd:5b:48:50:a4:f6:94:
f7:5d:e6:ce:4e:fe:91:a9:1f:74:58:ac:88:38:fc:
18:cc:a8:b9:ec:79:81:51:ef:04:86:9e:dc:b9:cb:
0d:f1:d3:16:31:8f:b3:0c:59:83:f8:06:db:ea:aa:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:52:70:D6:E0:84:78:0E:87:F7:D4:09:5B:41:35:C0:29:D1:46
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:e0:d1:89:8b:5d:58:9d:64:00:66:a3:cb:3a:27:ab:c8:
d6:16:ac:cb:30:b3:61:e2:7d:05:c3:a9:38:80:26:29:0d:fd:
bf:11:38:e4:94:cd:cd:24:2d:c6:7d:c4:81:e5:e8:95:54:c8:
45:54:8e:c9:d6:17:50:21:10:e2:fe:28:0f:27:4c:6e:5e:92:
e3:8d:21:aa:e6:0d:52:d8:44:97:3a:33:0c:2d:f0:87:26:25:
56:66:c9:cd:56:86:f2:25:ec:cb:47:51:95:71:d0:23:a3:c0:
ae:06:4b:0f:70:ea:c3:79:4d:79:c4:55:b7:60:16:ff:11:0a:
fd:25:fe:12:05:04:f4:5d:d7:a3:0f:5a:dc:c0:34:e5:f7:bc:
f6:e2:53:f9:f3:69:e6:c2:e7:9e:35:e2:9e:31:d1:c5:fa:f7:
c0:fe:b8:d2:e3:7f:ff:c5:ae:c5:04:04:e6:31:34:1a:a7:e7:
78:c4:55:cb:bd:76:4a:23:21:45:82:00:ca:78:51:c7:50:38:
e6:8d:0e:26:ba:f1:0c:54:0a:26:88:52:51:d4:98:d6:bc:43:
6c:a9:1e:db:66:c0:b1:d7:11:6a:15:be:bd:0a:b7:92:76:c9:
0d:17:af:e2:5b:06:2b:6b:0d:a0:41:45:79:c9:1a:a5:bf:45:
04:53:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:34 2026 by rpki-client