
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
File: FBA3638DA562505698B924E173281E46359B1617.mft (raw, json)
Hash identifier: /s2JnWGG7raYASMSqMn1cEiM0LBAxdqAd+rjXIFcGlk=
Subject key identifier: 82:D6:D0:F9:15:45:DE:AD:02:C9:E0:E0:00:9B:AC:87:E7:F4:E5:C3
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Certificate issuer: /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial: 2E0B4A73934898C144A775449CAE045BCF9D2F37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 02:20:34 +0000
Manifest this update: Wed 17 Jun 2026 02:15:34 +0000
Manifest next update: Thu 18 Jun 2026 04:22:34 +0000
Files and hashes: 1: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=)
2: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=)
3: FBA3638DA562505698B924E173281E46359B1617.crl (hash: 8jBWC1+H+HLuuGuVi0lv0yYMWiMSmuAQ7D1TJljTPFY=)
4: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0b:4a:73:93:48:98:c1:44:a7:75:44:9c:ae:04:5b:cf:9d:2f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
Validity
Not Before: Jun 17 02:15:34 2026 GMT
Not After : Jun 18 04:22:34 2026 GMT
Subject: CN=82D6D0F91545DEAD02C9E0E0009BAC87E7F4E5C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:08:72:fb:e3:72:66:5d:c8:2d:23:3a:3d:
d2:fb:0e:dc:4a:6e:c4:46:8d:ac:80:3c:fc:ab:33:
93:59:f2:62:99:aa:32:e0:dc:d3:ff:d5:e2:d2:43:
93:58:48:ea:a0:91:18:c2:23:6e:6b:2a:0a:6d:a6:
b2:60:b5:25:41:27:68:c1:16:ff:f5:ab:a4:62:fb:
7a:54:5d:dc:bc:87:7c:cf:4e:f1:36:da:db:a1:dd:
6c:8b:67:1b:62:a9:63:c3:b7:23:83:cd:ac:28:06:
85:ba:38:83:9f:c6:65:35:71:ed:ef:2d:bc:0b:5e:
7e:a1:6a:9a:72:5a:ef:f9:ce:97:24:3a:dc:c9:23:
6d:f1:54:98:8d:2e:e5:33:a6:67:39:08:d9:d8:88:
93:ea:45:51:26:72:55:ed:ab:15:cc:d2:ab:93:3d:
4f:03:b5:55:b5:65:4e:77:c6:34:40:68:df:5d:d6:
88:71:1a:c6:04:b0:b8:42:0a:6f:6a:3e:6c:19:da:
71:16:f3:a9:ac:5b:a1:0e:b6:35:a2:73:eb:ff:32:
c5:2e:29:1b:4c:a6:aa:56:7c:9f:7b:d5:bc:0a:c5:
63:b2:e9:8a:98:0f:1b:58:36:59:1a:fd:b7:b1:ea:
92:1e:6b:c6:03:8f:a9:5c:77:e8:c5:0e:d0:f8:d4:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:D0:F9:15:45:DE:AD:02:C9:E0:E0:00:9B:AC:87:E7:F4:E5:C3
X509v3 Authority Key Identifier:
keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:52:04:21:4d:0d:e6:85:5d:2b:5d:33:00:99:88:31:d6:f0:
3c:53:c5:9b:09:81:82:55:d2:d1:6a:31:94:9e:46:ad:be:dd:
70:d1:5e:19:82:46:e5:11:84:c8:53:cd:b5:04:d3:52:9c:d5:
46:7d:ca:54:f3:c4:34:19:04:b1:b5:a8:3a:c4:5e:af:b6:01:
96:a5:2a:81:c3:91:46:8b:3e:41:02:19:e6:0a:d5:24:26:a4:
ce:43:2f:b9:f1:2a:25:5f:08:98:02:f8:3e:a7:00:e2:43:28:
63:38:fd:b5:56:80:20:86:84:91:d6:f8:db:23:6b:d3:39:09:
39:1a:30:f9:77:8c:e9:1d:ef:f8:59:8d:15:94:df:7a:59:9c:
a7:e9:c7:59:5f:4b:b0:e4:6a:ea:e3:fc:2f:1f:cd:f7:02:97:
4a:de:e6:fd:c5:70:b3:ba:ae:bd:b7:c7:27:e9:4f:49:fc:c2:
a8:ea:de:44:75:da:00:55:a9:6f:75:0a:01:09:8f:cd:78:ef:
2e:18:33:fb:db:5c:05:f9:78:d6:ef:7b:5b:77:8e:ed:b4:a3:
13:a9:a9:fa:9f:04:1a:99:ca:1d:88:1e:9c:2b:4f:80:c0:96:
b7:9b:7f:ec:29:92:f7:1d:0b:83:00:d1:aa:23:33:ba:a9:d4:
8b:c1:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:16 2026 by rpki-client