
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
File: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft (raw, json)
Hash identifier: QFwi0F4uj9kBPyLL1wg1E9NQ06JceB4IDhYFVTl1/kw=
Subject key identifier: 52:B6:B6:7B:49:F0:3D:51:86:A1:58:3C:CE:4A:06:E2:4C:59:89:8E
Authority key identifier: FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
Certificate issuer: /CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Certificate serial: 14A83901AAA74576D004E1202849688FCB250089
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 02:24:25 +0000
Manifest this update: Mon 21 Sep 2026 02:19:25 +0000
Manifest next update: Tue 22 Sep 2026 03:53:25 +0000
Files and hashes: 1: 3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (hash: 68j/2R3Ewk4p7TN+xLCiDv2//M/vL0ynXYOYWgxaiD4=)
2: FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl (hash: dO8R9lt4qHLcz57Syx9JaUdhVjAeTlrUK6GyEm2J4kM=)
3: 3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (hash: mr+ohZ4gsNxXowfdM8XgtzD25meDndV+/hmBLAjXpzo=)
4: 3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (hash: 3NdyDC+1ZO5sttCVKzm0UcFCITwWVerR5FdVYXY26PA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a8:39:01:aa:a7:45:76:d0:04:e1:20:28:49:68:8f:cb:25:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE
Validity
Not Before: Sep 21 02:19:25 2026 GMT
Not After : Sep 22 03:53:25 2026 GMT
Subject: CN=52B6B67B49F03D5186A1583CCE4A06E24C59898E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:20:63:54:24:65:ad:3c:e8:eb:b6:72:57:
d8:a1:9d:a7:2b:09:34:b0:43:49:18:e7:d9:4b:9e:
47:b1:ef:ae:66:1f:bc:d4:0d:e0:d9:fb:79:8f:4a:
56:4e:6a:18:0f:2a:61:96:f7:da:52:02:bd:28:8a:
e7:67:c8:42:61:c4:03:56:7a:6e:14:f1:f3:38:c8:
e9:5e:32:6b:1a:c3:b0:e4:b2:b3:96:2b:46:e9:0a:
48:e7:a2:01:69:77:29:2f:e0:08:fb:8e:64:8c:b3:
28:4b:37:74:9d:6b:2b:b4:75:e2:c3:57:87:c0:43:
a7:e3:1e:d3:94:34:b4:c4:58:08:32:68:07:dd:5a:
d1:8f:42:3b:69:4f:72:e5:ad:d3:28:89:79:6c:9a:
5e:32:25:fb:6b:e3:c8:74:16:b9:ef:aa:a6:41:12:
04:31:85:a6:ae:a3:18:c7:fd:17:33:88:c9:df:cb:
58:24:05:06:22:ca:0d:a3:59:97:3a:76:d6:4b:27:
de:84:68:bc:15:97:21:e9:7c:e6:20:01:f1:39:be:
b7:00:e7:ab:f3:85:f0:8a:d9:c7:38:f1:bf:42:0e:
a9:41:1d:6b:ca:62:00:73:c3:49:5d:46:51:0c:77:
63:9c:96:05:db:61:3d:65:e9:f6:f5:00:a0:97:63:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:B6:7B:49:F0:3D:51:86:A1:58:3C:CE:4A:06:E2:4C:59:89:8E
X509v3 Authority Key Identifier:
keyid:FB:E1:D9:62:CD:F5:0A:E4:C8:8D:ED:09:7C:4F:D5:C4:0E:D1:DA:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/FBE1D962CDF50AE4C88DED097C4FD5C40ED1DAAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c7:23:73:d8:4a:9d:67:2f:1f:9d:53:5a:96:e1:6d:74:06:
9f:bb:a9:f6:1a:29:8b:65:11:6a:a0:15:19:57:b5:b5:66:5f:
3b:a5:68:c0:f6:e3:52:7b:54:5f:5c:85:60:27:6a:6c:ec:39:
91:03:1f:f0:d6:c9:bd:27:9e:95:27:03:61:1b:1d:44:ce:a7:
86:28:f8:ac:f5:90:f2:2f:9e:24:d2:28:fc:0f:f4:a5:57:a8:
d6:78:e3:ef:55:24:61:43:53:95:4d:35:ca:54:68:29:71:a7:
63:b8:5e:5f:36:02:77:c5:d2:61:0c:fe:53:91:a7:19:94:76:
85:42:d6:cc:48:02:aa:0f:4a:bb:43:9a:b1:ab:18:c1:ab:2d:
b2:17:71:9c:10:f2:ee:98:f9:f5:57:42:e2:55:b3:d2:3b:a8:
e7:c5:a4:5b:03:e4:e1:c2:19:ac:40:23:0d:41:26:a8:44:8b:
2b:87:23:72:32:44:55:de:3c:58:69:79:5d:48:0a:e6:2a:f4:
73:d9:cc:1f:f6:49:ea:66:f3:94:22:82:aa:b0:98:da:3a:9a:
99:b5:66:e2:24:cc:d7:c5:b4:79:85:96:47:cb:82:f4:db:3c:
0e:c0:5d:0b:d3:66:bf:ac:db:70:86:8b:cd:ed:04:ec:59:44:
9e:0f:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:06 2026 by rpki-client