
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft (raw, json)
Hash identifier: E/4fYLyV2ZfziezlzVXZI/Hpv1Binc1L0kCJjFGFnn8=
Subject key identifier: 89:E1:19:77:6C:85:0A:AA:B3:EB:B6:BF:9B:59:F2:C6:DE:0D:D2:3A
Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A
Certificate issuer: /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
Certificate serial: 028FA19980840647E7FD8DE5FE5B927C1C03BF78
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
Manifest number: 01CB
Signing time: Tue 04 Nov 2025 23:01:06 +0000
Manifest this update: Tue 04 Nov 2025 22:56:06 +0000
Manifest next update: Sat 08 Nov 2025 06:06:06 +0000
Files and hashes: 1: 3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (hash: mJt5h2NejSfGkXob7zn1cD1yVfgovr1Egj0ZRpFgzw8=)
2: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl (hash: 725PI+iybzckx63aI0DgKccvPx10mY+I/wX3oZHDsPs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl
rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 06:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8f:a1:99:80:84:06:47:e7:fd:8d:e5:fe:5b:92:7c:1c:03:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
Validity
Not Before: Nov 4 22:56:06 2025 GMT
Not After : Nov 8 06:06:06 2025 GMT
Subject: CN=89E119776C850AAAB3EBB6BF9B59F2C6DE0DD23A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:fa:de:2a:51:c7:68:0f:a7:89:3d:3b:b6:
c6:8a:4e:ba:28:75:55:12:bf:9c:f7:19:9b:d1:7a:
9e:79:b3:d6:4d:62:93:3f:c8:3a:b1:c2:27:e7:f4:
11:99:32:c0:bc:8b:9d:a3:cb:8b:07:1f:9d:16:ce:
7e:91:68:27:17:77:46:ee:16:c7:57:bc:e2:0f:30:
93:95:6b:19:69:23:62:b9:eb:e4:58:cd:17:2b:b6:
83:44:2a:ed:03:cc:6e:9d:dd:f8:e7:ea:ab:e1:be:
fe:61:61:f0:f3:05:f1:41:26:dc:b2:b7:f7:31:73:
81:b6:ae:28:70:98:85:09:ad:bd:e9:ed:89:d8:45:
3f:97:c6:55:31:27:ea:2f:bc:a5:f8:25:dc:e0:b3:
56:54:21:a5:b5:28:6e:e8:28:66:17:56:34:e4:a8:
86:f9:e1:71:3f:d1:60:0b:6c:c3:a3:75:be:e8:6b:
68:08:e7:04:68:58:3a:16:ce:0a:3e:55:9a:42:22:
7b:0d:ba:4e:fe:26:24:67:75:6b:28:50:62:38:74:
77:4a:f2:20:21:2b:08:9e:94:f3:19:c9:31:13:b2:
8b:1f:0f:70:46:38:81:8b:c6:99:06:30:55:1c:3f:
95:8f:8f:d6:0c:77:ee:d7:71:8c:93:1a:94:77:75:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:19:77:6C:85:0A:AA:B3:EB:B6:BF:9B:59:F2:C6:DE:0D:D2:3A
X509v3 Authority Key Identifier:
keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e4:58:ae:c8:46:1a:e7:7b:7c:00:8f:39:10:f1:d6:60:07:
e7:68:75:31:f9:92:9b:74:6b:04:8c:4e:80:af:0a:8b:5e:d8:
24:10:50:38:ea:93:2d:26:da:d4:0b:c7:08:04:7e:c2:ed:2d:
02:cc:85:3f:3c:55:99:50:70:c4:b4:2f:7a:39:94:00:37:62:
3e:52:fb:96:97:75:9f:bc:07:71:53:35:77:c2:4e:d3:19:65:
08:90:58:d0:a9:97:36:28:68:fb:6c:15:16:bf:c7:f8:f0:7e:
26:94:f5:27:0c:a3:d1:a2:64:64:b4:88:9e:62:0d:f2:b4:bf:
2f:34:bb:bb:d4:98:60:62:94:44:0d:22:4a:b4:e1:c2:9a:32:
84:b8:c8:5a:e9:70:53:ab:71:d2:16:04:2a:c7:bf:0c:b8:10:
31:bb:c7:a7:9c:77:77:21:65:05:c5:57:31:56:f8:e3:6a:c0:
6f:c7:5a:d4:3f:b5:ef:4e:1b:11:8d:72:9d:2b:93:17:d2:d2:
12:bc:4e:67:f8:2d:c4:1d:86:3d:b8:c7:8a:16:6b:3b:83:0c:
68:f1:a2:08:3b:3b:70:75:cd:b4:30:4f:8a:66:c8:6a:95:24:
8b:77:c4:f5:28:07:2f:0b:7d:d5:e7:01:c3:93:e5:f6:1a:1a:
76:e8:28:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAo+hmYCEBkfn/Y3l/luSfBwDv3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThB
ODE4NzkyQTAeFw0yNTExMDQyMjU2MDZaFw0yNTExMDgwNjA2MDZaMDMxMTAvBgNV
BAMTKDg5RTExOTc3NkM4NTBBQUFCM0VCQjZCRjlCNTlGMkM2REUwREQyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7/reKlHHaA+niT07tsaKTroo
dVUSv5z3GZvRep55s9ZNYpM/yDqxwifn9BGZMsC8i52jy4sHH50Wzn6RaCcXd0bu
FsdXvOIPMJOVaxlpI2K56+RYzRcrtoNEKu0DzG6d3fjn6qvhvv5hYfDzBfFBJtyy
t/cxc4G2rihwmIUJrb3p7YnYRT+XxlUxJ+ovvKX4Jdzgs1ZUIaW1KG7oKGYXVjTk
qIb54XE/0WALbMOjdb7oa2gI5wRoWDoWzgo+VZpCInsNuk7+JiRndWsoUGI4dHdK
8iAhKwielPMZyTETsosfD3BGOIGLxpkGMFUcP5WPj9YMd+7XcYyTGpR3dStNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUieEZd2yFCqqz67a/m1nyxt4N0jowHwYDVR0j
BBgwFoAU/ear7huVL034XWMqiSP+WKgYeSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Mjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMC9GREU2QUJFRTFC
OTUyRjRERjg1RDYzMkE4OTIzRkU1OEE4MTg3OTJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZFNThBODE4
NzkyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3NDRkZGUtN2MxZi00Y2JhLTkz
YzAtOWYwNjY5ZWVlZDkyLzAvRkRFNkFCRUUxQjk1MkY0REY4NUQ2MzJBODkyM0ZF
NThBODE4NzkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFPkWK7IRhrne3wAjzkQ8dZgB+dodTH5kpt0
awSMToCvCote2CQQUDjqky0m2tQLxwgEfsLtLQLMhT88VZlQcMS0L3o5lAA3Yj5S
+5aXdZ+8B3FTNXfCTtMZZQiQWNCplzYoaPtsFRa/x/jwfiaU9ScMo9GiZGS0iJ5i
DfK0vy80u7vUmGBilEQNIkq04cKaMoS4yFrpcFOrcdIWBCrHvwy4EDG7x6ecd3ch
ZQXFVzFW+ONqwG/HWtQ/te9OGxGNcp0rkxfS0hK8Tmf4LcQdhj24x4oWazuDDGjx
ogg7O3B1zbQwT4pmyGqVJIt3xPUoBy8LfdXnAcOT5fYaGnboKBs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:21 2025 by rpki-client