
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json)
Hash identifier: UKGIWQKTDw2COgRHo1FhG7VYgZFeQCkAgnQqLNjwXlA=
Subject key identifier: 1B:67:F6:C4:53:33:AF:47:77:CC:D6:08:43:6F:30:E5:F4:EB:98:A7
Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Certificate serial: 0610CD755AB7DFCD15B216BEB74F9512FF6F6178
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
Manifest number: 0542
Signing time: Fri 20 Mar 2026 00:52:02 +0000
Manifest this update: Fri 20 Mar 2026 00:47:02 +0000
Manifest next update: Mon 23 Mar 2026 01:05:02 +0000
Files and hashes: 1: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=)
2: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: Y3Vbzb9sZuAeVZwyf4456/OicMzyjcPOXY2hDfezfrw=)
3: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 01:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:10:cd:75:5a:b7:df:cd:15:b2:16:be:b7:4f:95:12:ff:6f:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38
Validity
Not Before: Mar 20 00:47:02 2026 GMT
Not After : Mar 23 01:05:02 2026 GMT
Subject: CN=1B67F6C45333AF4777CCD608436F30E5F4EB98A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:92:a5:b8:ca:7c:fa:55:c1:5a:dd:04:c1:
68:da:95:63:7e:0f:75:30:b1:5e:20:6b:65:e9:e2:
c0:bb:fe:8b:a5:87:df:e8:00:b4:91:d1:95:61:7b:
3e:35:08:23:80:8e:ab:5e:74:bf:26:44:d0:88:96:
71:63:a2:8a:7b:2b:9c:22:3a:19:ab:6e:17:d7:99:
39:8a:f3:b1:16:aa:d5:fd:39:e4:a7:22:60:0a:15:
25:02:20:6f:76:2d:37:f7:58:7d:8c:eb:9c:ab:98:
f0:2b:a8:e4:fb:6d:bc:f6:6f:0d:29:99:f3:07:73:
24:e3:bc:ad:0a:9a:35:a6:6d:15:c9:a5:5c:88:f9:
85:f9:bc:32:82:8e:a2:52:ab:77:ea:33:a6:71:15:
99:26:36:76:9a:fe:1c:4e:7b:eb:11:fb:d7:97:f9:
0a:85:6a:a7:6c:4b:dd:c4:79:63:be:ab:19:c0:c1:
e9:d1:48:78:42:70:84:a3:73:e9:45:9a:97:14:1b:
c3:92:71:0e:83:da:6e:de:ef:f2:2f:30:72:9a:f9:
66:36:e6:95:4e:f0:b1:9c:ad:e8:44:b9:78:a1:fa:
50:52:69:0f:73:51:a8:04:26:2e:01:9f:b7:55:36:
db:c5:1d:a5:16:73:6e:e1:d6:8b:2c:5e:be:05:77:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:F6:C4:53:33:AF:47:77:CC:D6:08:43:6F:30:E5:F4:EB:98:A7
X509v3 Authority Key Identifier:
keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:7a:78:03:ad:8d:3a:92:1e:1e:7c:a6:7c:d9:00:34:a3:
db:4c:ab:41:43:0b:b5:1b:23:14:42:c0:f6:b6:79:08:20:05:
2d:3a:ca:2a:92:88:53:63:91:ba:4c:d8:92:84:4f:21:6b:d1:
5c:7d:66:82:1f:61:31:f3:02:9d:8a:fe:e3:8d:4f:7d:a2:20:
cc:ef:95:f6:69:a6:f0:f4:a8:11:0e:ac:ed:f3:df:22:54:fc:
e1:30:cd:c6:15:0a:82:d1:4f:4b:ff:c9:c8:c5:10:24:7d:da:
bd:a0:43:fb:9d:1d:5d:b3:ac:a2:58:e0:fc:e6:b9:66:f9:e6:
ab:a6:bb:23:72:d4:bb:bd:fd:6f:19:2d:47:13:9f:2d:a8:d3:
bd:86:9a:15:fd:fc:50:5a:3f:91:38:77:bd:a3:76:79:cb:39:
5c:c0:fc:e0:fe:23:56:ca:a8:0e:54:26:d1:ff:6b:e4:ae:02:
b7:dd:32:bb:1a:d2:c9:32:46:0e:cf:da:c9:d7:ec:28:86:c6:
fb:29:4d:bc:a6:7e:fc:1f:14:b1:24:fa:8c:dc:2d:39:3e:9a:
78:06:e7:ad:34:5b:3d:1c:8b:72:af:bd:ea:0d:de:66:5c:9e:
7d:bb:97:58:b4:95:d7:59:7d:21:67:7f:01:33:a8:60:5d:22:
57:84:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 01:01:24 2026 by rpki-client