
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
File: FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft (raw, json)
Hash identifier: cLOXnhJapu2t9XpqoH7m4akIn1Shz9J2AZm7adaqh4U=
Subject key identifier: A1:D2:03:D3:49:47:E9:37:2E:E8:6D:1D:48:FF:B5:32:5B:CC:52:DC
Authority key identifier: FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
Certificate issuer: /CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Certificate serial: 2717A25C78388A3095A7BA762EE86B357BD55009
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
Manifest number: 0106
Signing time: Sat 14 Nov 2026 23:43:51 +0000
Manifest this update: Sat 14 Nov 2026 23:38:51 +0000
Manifest next update: Mon 16 Nov 2026 02:16:51 +0000
Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: Bk2FFepc1a84p43gdWUgbEu+IiGvQM1k81yoYeK1npM=)
2: FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl (hash: JOg8GeICmW/aLZYN7uDaVaPD4Tc9NGj/E6mryWRgyGk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 02:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:17:a2:5c:78:38:8a:30:95:a7:ba:76:2e:e8:6b:35:7b:d5:50:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Validity
Not Before: Nov 14 23:38:51 2026 GMT
Not After : Nov 16 02:16:51 2026 GMT
Subject: CN=A1D203D34947E9372EE86D1D48FFB5325BCC52DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:a9:72:98:fe:d5:24:f8:33:d7:9d:22:91:
bd:7d:86:a7:da:35:9e:99:92:1e:a8:b3:9d:ac:86:
35:84:72:ff:2f:4d:7f:da:12:57:e5:6f:66:6f:66:
9e:29:b9:9e:79:82:4c:af:8d:09:40:eb:33:f3:1a:
cc:8b:d6:f5:d1:9b:58:08:ce:25:13:27:4c:af:7c:
43:0b:1a:36:c9:7d:ab:1d:63:16:8d:9d:09:84:78:
34:bd:9e:5a:73:c6:30:50:59:28:f3:d9:b4:6f:82:
a0:f8:b9:31:e8:3f:07:79:72:88:d0:b9:dc:5e:78:
bc:b6:56:2e:c4:f8:e5:e6:92:aa:75:25:5e:65:ed:
2e:3e:a4:dc:44:b6:39:b1:e4:49:7b:fe:85:9a:69:
ed:36:d9:70:64:f6:88:2f:42:c0:db:98:fb:64:b7:
4f:19:42:21:cb:5e:f7:6e:49:c8:58:94:4b:a2:c4:
9f:27:0e:f7:91:7c:c8:53:2a:98:5c:47:09:72:d8:
45:98:45:93:95:07:93:dc:68:f9:9e:98:b9:91:91:
4c:d8:aa:25:c3:3b:c3:82:e2:05:43:a7:55:ad:cc:
40:d6:11:01:75:56:99:3f:37:55:b7:b4:06:2d:d7:
ea:de:34:56:06:65:9d:3a:83:3b:3a:0e:c9:2f:1d:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:03:D3:49:47:E9:37:2E:E8:6D:1D:48:FF:B5:32:5B:CC:52:DC
X509v3 Authority Key Identifier:
keyid:FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fb:13:7c:8b:12:c7:68:3f:25:ee:0c:e5:e3:eb:5c:99:22:
2a:75:52:5b:dc:b7:28:d0:c1:66:b8:07:1c:44:91:c5:74:3f:
81:a5:12:6c:6c:a9:b6:2e:6c:65:3c:2b:40:2e:5e:c4:c0:d1:
61:18:4e:1b:a5:cc:4c:9f:fe:b0:73:29:80:c9:15:18:7e:4e:
7f:aa:a8:82:1e:d4:ac:89:27:8e:4d:72:de:61:e1:43:59:96:
2e:4c:f0:99:7f:9e:19:85:85:58:82:7c:9c:6c:64:87:e0:f7:
2f:aa:02:ad:d9:cf:28:ca:ee:c5:13:a8:3d:f0:cf:81:4e:da:
70:28:1d:fe:39:76:b4:d9:f0:e9:16:fd:bc:68:8d:05:a2:d2:
88:57:46:06:77:f0:a6:cb:0e:2a:7e:61:02:9a:e3:d0:58:a8:
1c:7b:cf:e5:03:bb:97:ac:2d:7c:4f:52:e2:a4:6b:59:bd:00:
5c:24:d0:c5:fa:1c:23:1a:d0:4f:0e:bb:5d:e4:ca:d8:d8:9e:
a9:d0:18:a4:77:e8:37:08:bb:bf:4f:da:e5:b4:1e:9c:22:91:
e8:81:63:50:8d:b8:a2:73:61:77:2d:e1:c8:38:cb:52:5f:42:
34:70:26:bd:b3:10:66:a0:6a:64:f0:50:cd:66:23:ca:c4:86:
d2:99:a3:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJxeiXHg4ijCVp7p2LuhrNXvVUAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVDNEQxMzc4QUVDNUU2MTAzMTFCNzYxQ0JFMjg3NENB
OTJEMDUzODAeFw0yNjExMTQyMzM4NTFaFw0yNjExMTYwMjE2NTFaMDMxMTAvBgNV
BAMTKEExRDIwM0QzNDk0N0U5MzcyRUU4NkQxRDQ4RkZCNTMyNUJDQzUyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLVqlymP7VJPgz150ikb19hqfa
NZ6Zkh6os52shjWEcv8vTX/aElflb2ZvZp4puZ55gkyvjQlA6zPzGsyL1vXRm1gI
ziUTJ0yvfEMLGjbJfasdYxaNnQmEeDS9nlpzxjBQWSjz2bRvgqD4uTHoPwd5cojQ
udxeeLy2Vi7E+OXmkqp1JV5l7S4+pNxEtjmx5El7/oWaae022XBk9ogvQsDbmPtk
t08ZQiHLXvduSchYlEuixJ8nDveRfMhTKphcRwly2EWYRZOVB5PcaPmemLmRkUzY
qiXDO8OC4gVDp1WtzEDWEQF1Vpk/N1W3tAYt1+reNFYGZZ06gzs6DskvHSJlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUodID00lH6Tcu6G0dSP+1MlvMUtwwHwYDVR0j
BBgwFoAU/sTRN4rsXmEDEbdhy+KHTKktBTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDZlNDdjNmQtZTYyNC00NzdjLWFlMTgtZDMyZjIyYzk2MjA0LzAvRkVDNEQxMzc4
QUVDNUU2MTAzMTFCNzYxQ0JFMjg3NENBOTJEMDUzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRUM0RDEzNzhBRUM1RTYxMDMxMUI3NjFDQkUyODc0Q0E5MkQw
NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl
MTgtZDMyZjIyYzk2MjA0LzAvRkVDNEQxMzc4QUVDNUU2MTAzMTFCNzYxQ0JFMjg3
NENBOTJEMDUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALr7E3yLEsdoPyXuDOXj61yZIip1UlvctyjQ
wWa4BxxEkcV0P4GlEmxsqbYubGU8K0AuXsTA0WEYThulzEyf/rBzKYDJFRh+Tn+q
qIIe1KyJJ45Nct5h4UNZli5M8Jl/nhmFhViCfJxsZIfg9y+qAq3ZzyjK7sUTqD3w
z4FO2nAoHf45drTZ8OkW/bxojQWi0ohXRgZ38KbLDip+YQKa49BYqBx7z+UDu5es
LXxPUuKka1m9AFwk0MX6HCMa0E8Ou13kytjYnqnQGKR36DcIu79P2uW0HpwikeiB
Y1CNuKJzYXct4cg4y1JfQjRwJr2zEGagamTwUM1mI8rEhtKZo0k=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:02:12 2026 by rpki-client