
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
File: F503463BC571123F80B94A358280E0D0F9750C09.mft (raw, json)
Hash identifier: dTejFj5KNIwS2ga/4iHym68TnZ6bpoR5P3prgnlK7CI=
Subject key identifier: 57:4D:54:13:52:D2:C8:CC:72:0E:0F:BE:BC:2C:F4:5B:10:DB:39:1E
Authority key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
Certificate issuer: /CN=F503463BC571123F80B94A358280E0D0F9750C09
Certificate serial: 3E0CDF45E2AD251ABA24D83906C53EA04CAF43B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
Manifest number: 03CE
Signing time: Sat 28 Feb 2026 11:00:58 +0000
Manifest this update: Sat 28 Feb 2026 10:55:58 +0000
Manifest next update: Tue 03 Mar 2026 15:03:58 +0000
Files and hashes: 1: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (hash: rHpcS9BPxTUFSR7EfbnI6b9Zl3Fn2nrUXMnehSuTapw=)
2: F503463BC571123F80B94A358280E0D0F9750C09.crl (hash: gZfqZcjoNMNlV4T1FS6uphiwG7JwZ2lEkfUcfBXMgZ0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl
rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0c:df:45:e2:ad:25:1a:ba:24:d8:39:06:c5:3e:a0:4c:af:43:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F503463BC571123F80B94A358280E0D0F9750C09
Validity
Not Before: Feb 28 10:55:58 2026 GMT
Not After : Mar 3 15:03:58 2026 GMT
Subject: CN=574D541352D2C8CC720E0FBEBC2CF45B10DB391E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:59:7f:51:c4:94:d0:6b:d7:89:ef:68:ac:
2f:4c:22:99:b8:d8:8f:d3:b8:0b:33:2b:a6:16:7b:
f6:fd:ec:aa:51:78:7e:cf:53:7d:00:70:4a:c8:6e:
01:db:57:a2:42:ca:7e:df:58:9a:66:fb:3d:35:30:
da:65:b5:ac:77:d7:19:59:e4:a5:50:bf:af:c1:d0:
53:56:7b:94:db:bb:2e:21:82:05:15:7a:cd:ee:d6:
27:44:45:cc:31:37:05:8d:fb:dd:84:3b:f9:29:a2:
53:36:2f:96:37:0b:37:f4:cc:bd:bf:f0:54:7f:ac:
74:c0:2b:c1:e1:f5:a0:93:f0:06:cf:83:0b:30:11:
7f:69:12:9c:9b:be:e7:38:f7:c6:2e:f1:18:9d:fd:
e8:56:e5:74:a5:b9:14:56:aa:64:10:3f:1f:08:33:
a9:94:9e:7d:cf:16:21:0a:98:07:e2:92:f4:b1:6a:
39:cf:ee:2a:48:41:b0:63:09:53:a5:60:9f:47:45:
74:cc:f6:8e:48:8e:90:8b:88:3b:65:a5:5b:13:13:
08:80:0a:20:42:63:55:8c:80:b6:be:9c:c3:fd:9d:
c9:89:31:c3:69:11:7b:dc:25:9f:46:f6:20:45:51:
0c:1a:72:63:9c:20:69:fa:78:10:04:08:35:95:8c:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:54:13:52:D2:C8:CC:72:0E:0F:BE:BC:2C:F4:5B:10:DB:39:1E
X509v3 Authority Key Identifier:
keyid:F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:27:e9:f3:30:67:41:f0:17:c6:51:4d:e1:11:c8:1b:db:
b4:88:a6:cd:f7:98:53:a4:8f:8f:91:07:ba:e9:47:11:d5:8d:
aa:e3:b4:86:bc:34:04:2e:45:4d:9c:99:d1:dd:83:65:ca:47:
3b:31:be:1e:87:a3:89:d4:6e:09:fe:a6:e1:74:fa:af:c3:1b:
59:62:3e:67:d7:cf:00:3e:1e:aa:14:ad:44:aa:3f:ec:8a:df:
3b:39:3b:68:da:76:90:01:a8:92:2a:5e:10:6b:99:11:aa:e2:
5e:b6:cb:d9:81:1f:9d:d0:cb:fd:32:0e:47:99:fc:a9:1c:28:
c5:74:71:7e:44:64:a0:48:f0:7a:f4:53:6e:59:33:87:e2:1a:
bd:3b:80:c2:9c:70:ec:2b:b6:45:fd:3e:f1:27:77:8b:61:1b:
8d:58:22:72:92:5d:7f:ac:e0:26:bc:29:0c:c3:df:e8:b4:83:
7f:75:96:d5:c6:39:b3:89:4c:d3:b3:81:e3:6c:50:36:c0:9c:
69:c2:f9:5c:57:be:79:b7:19:05:fe:d8:76:d9:65:29:27:c8:
6c:2c:67:f6:18:31:8b:88:66:bb:97:1c:20:b0:fb:7f:45:34:
e4:40:e7:2a:65:a2:30:be:d8:0b:5c:af:b3:42:26:dd:a2:c1:
34:ea:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:30 2026 by rpki-client