
$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft
File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json)
Hash identifier: G/qbMcFZLe9VqxHu5swE6Gw0xYzrb22++fcJQkBP3zs=
Subject key identifier: 34:9E:09:43:2A:2D:17:CF:30:6F:79:57:ED:36:19:9C:E7:7B:96:94
Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC
Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC
Certificate serial: 771193B15D53C7EB34063FD0223CCD15E1A2CA16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft
Manifest number: 013E
Signing time: Sat 28 Feb 2026 19:41:52 +0000
Manifest this update: Sat 28 Feb 2026 19:36:52 +0000
Manifest next update: Tue 03 Mar 2026 22:14:52 +0000
Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: UkhnMSZMkiCpxxBAajk5y4lR5KgGb33qi3U72EE2TeE=)
2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl
rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:11:93:b1:5d:53:c7:eb:34:06:3f:d0:22:3c:cd:15:e1:a2:ca:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC
Validity
Not Before: Feb 28 19:36:52 2026 GMT
Not After : Mar 3 22:14:52 2026 GMT
Subject: CN=349E09432A2D17CF306F7957ED36199CE77B9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:17:26:f6:ca:88:c8:66:7e:d2:e2:8a:e1:
78:b6:4e:ba:3f:5b:d1:69:51:e1:45:13:ed:3a:95:
3b:72:cc:59:16:a8:68:22:a9:ce:a1:45:50:fc:78:
5b:54:18:d3:d4:7c:f9:12:6a:41:a2:d9:d1:89:da:
99:5d:f0:07:f9:23:3d:75:12:df:f0:d6:3b:d7:a9:
03:4b:6b:1f:21:67:58:42:fb:3b:1f:f7:45:f6:5d:
f8:70:21:f5:b3:55:19:11:e6:45:2e:fe:d2:9b:6c:
3c:a3:08:db:b9:ba:94:21:a1:7f:43:30:6c:f5:0b:
ea:f4:71:ee:60:fb:48:86:ab:cc:c5:9b:17:8d:be:
79:cc:32:47:00:73:de:9b:d6:8e:33:06:05:70:8f:
36:77:91:7a:d1:5f:2f:77:cf:7a:72:60:03:87:29:
bc:f3:77:c2:4a:b3:71:4b:04:c4:4a:08:97:ab:9b:
16:2a:bf:f8:e2:5f:13:a7:5f:11:1b:2e:e3:d9:a9:
c2:86:5c:26:db:0e:a4:81:5a:1e:30:84:29:c7:0f:
3c:f9:bd:c1:fe:30:b6:10:0a:c3:88:22:47:5e:b7:
9f:40:e8:d7:69:2f:72:0f:97:66:b8:19:62:fa:52:
52:3d:10:b9:a8:3b:a0:de:78:45:d8:52:98:52:26:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:09:43:2A:2D:17:CF:30:6F:79:57:ED:36:19:9C:E7:7B:96:94
X509v3 Authority Key Identifier:
keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:11:88:31:2d:ea:92:40:fe:8a:6a:b1:29:9a:ed:52:f8:
b4:7d:e7:be:15:16:05:cc:90:0c:c6:1a:64:c1:a5:e9:1f:27:
cd:0a:e2:c3:c3:66:04:6a:a5:bf:b7:63:24:1a:69:9d:11:00:
ba:e2:4c:64:e6:49:6f:42:07:aa:75:51:a9:1e:76:c5:0b:62:
3d:f2:6b:fb:58:e8:02:b4:80:dc:8e:7c:33:ea:37:c9:79:ef:
81:32:39:1d:a4:b7:a9:44:5c:b3:8a:1b:ea:26:4e:1c:e4:6a:
02:17:0c:16:67:f0:0d:7c:cc:af:10:40:d9:40:f7:08:a9:c1:
b7:45:b3:f6:7e:b7:16:6b:63:6d:d1:01:20:c0:51:1d:13:21:
92:b9:38:4c:50:05:27:08:a7:69:e0:30:45:4c:53:28:07:aa:
15:2f:41:72:7e:3d:ed:56:a9:e6:d2:01:73:9f:ff:0a:91:6f:
cd:28:6a:3f:26:5a:82:21:6e:b3:b4:f7:3d:20:c1:c7:af:91:
e4:1c:c1:35:37:29:aa:8a:11:a5:63:5d:6d:a3:37:d7:63:04:
9a:66:f7:80:ac:02:08:ac:c9:df:eb:ef:4c:8e:c1:01:b5:9f:
25:a4:67:8d:9e:e1:28:e2:94:e5:32:5b:5b:1e:eb:08:94:89:
b7:46:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:09 2026 by rpki-client