
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
File: FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft (raw, json)
Hash identifier: vcrwAaX5n4G9qXwGSgroxNO49itiMoS6aOsaeO6kuoE=
Subject key identifier: 99:A6:11:A6:28:42:5A:7F:78:70:33:5F:AD:C6:5E:D0:75:16:85:7C
Authority key identifier: FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
Certificate issuer: /CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Certificate serial: 656CE52C3634AF52F473A5529B6CF7EDEDF80E06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 18:40:39 +0000
Manifest this update: Wed 02 Sep 2026 18:35:38 +0000
Manifest next update: Thu 03 Sep 2026 21:09:38 +0000
Files and hashes: 1: FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl (hash: FaatOXDJzRQlcFtTgtEYRzJ31c0Zq8kxdD43mQlg0VE=)
2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: Bk2FFepc1a84p43gdWUgbEu+IiGvQM1k81yoYeK1npM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6c:e5:2c:36:34:af:52:f4:73:a5:52:9b:6c:f7:ed:ed:f8:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Validity
Not Before: Sep 2 18:35:38 2026 GMT
Not After : Sep 3 21:09:38 2026 GMT
Subject: CN=99A611A628425A7F7870335FADC65ED07516857C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:93:c0:b0:87:f6:96:43:7a:e1:b3:cf:5b:
24:80:bc:95:17:28:f8:04:03:23:cb:4a:1f:80:04:
06:82:5c:f9:6a:74:45:a0:ef:5c:94:9f:58:41:ef:
a3:c9:f4:48:24:24:a7:a1:0e:85:a3:25:bd:35:38:
3d:85:5f:94:31:a2:2f:88:42:47:f8:03:8d:ae:6e:
7f:88:28:15:b8:29:35:e2:32:5b:7c:09:ab:d5:89:
96:dd:e7:68:d5:23:bd:7f:65:ee:3a:51:94:20:a8:
71:a6:f0:b1:95:47:47:c7:60:58:2d:6e:c2:d6:be:
9c:21:54:a9:34:47:da:c0:7d:b1:aa:d9:b6:82:a9:
85:08:fa:e1:61:1e:e8:dc:4e:6c:93:5b:5f:56:a7:
3c:bd:73:2a:2c:f7:0d:25:60:fc:d4:eb:17:87:36:
e5:28:a2:d2:32:5e:6e:15:54:6b:5c:ef:b3:f6:1a:
1d:dd:33:cf:b1:7f:d4:47:e3:e2:f1:ff:16:c8:2f:
5f:ac:19:09:c0:2b:9d:92:d5:44:91:4f:7e:4a:67:
b3:ab:7b:cb:8b:2d:ad:ea:77:23:6a:93:f6:00:34:
70:ef:f0:aa:be:8d:68:32:54:2c:ed:a9:30:8b:61:
61:49:a0:5b:dd:f4:de:e4:68:e7:2b:c3:23:af:54:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:11:A6:28:42:5A:7F:78:70:33:5F:AD:C6:5E:D0:75:16:85:7C
X509v3 Authority Key Identifier:
keyid:FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:85:81:b0:5a:3a:cb:22:dd:21:e0:69:69:ff:e0:93:68:
d3:4b:50:d7:b6:8e:4b:b8:f7:a5:34:7e:d3:e9:6b:f6:73:c0:
30:62:99:53:11:0a:b4:bf:6b:b9:86:58:79:fe:ef:d0:3b:eb:
68:f1:eb:ad:5a:4a:a4:b2:62:a4:c7:4b:38:4f:27:c1:9c:15:
2e:61:2c:44:ed:f5:b8:bd:21:84:a0:34:fb:3a:fb:06:de:82:
45:1b:d3:71:4c:3e:fb:04:c1:ca:e7:38:08:8c:3c:26:f3:b9:
9a:28:3a:2c:ab:80:a1:7b:92:16:a3:65:a2:d1:04:d8:35:79:
f0:bf:05:60:e5:3b:c6:4e:2f:6d:f9:d3:2d:65:ef:2b:ec:ae:
25:67:84:08:bf:56:f0:d2:41:e7:c5:07:3e:6b:e4:20:82:8f:
b8:c1:c3:00:81:d8:cb:2e:e1:65:39:e6:ac:81:76:2f:fb:88:
c0:aa:86:6f:46:34:e5:9d:21:b3:38:a4:d6:5b:62:09:3d:7e:
7a:b1:a4:f5:6d:b4:76:33:49:80:a7:ff:32:17:7b:ca:3c:3e:
49:a8:80:de:75:ac:b2:e0:3a:37:a0:a3:fa:73:d8:b5:c3:29:
fe:a9:f5:9f:fc:28:e5:b6:3d:f9:8d:a2:3b:2b:bc:93:75:12:
d0:b8:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:59:55 2026 by rpki-client