
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json)
Hash identifier: 5+sOHgsIzUy5Ry97sOct7XIPXOgRCyOL8RPBKeCpOuw=
Subject key identifier: 39:FE:17:3A:D2:B2:AC:F7:98:53:63:67:C5:7E:33:3E:26:7E:59:99
Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39
Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739
Certificate serial: 4AEFB39B1FA9CBD9089D52961D6E157CB4902C05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
Manifest number: 014F
Signing time: Sun 19 Apr 2026 21:31:29 +0000
Manifest this update: Sun 19 Apr 2026 21:26:29 +0000
Manifest next update: Thu 23 Apr 2026 05:52:29 +0000
Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: tiCyjgWfu9Tgfkv9fX60QsJJ8Q+av/+5soJomWGV4FE=)
2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: OOjJfYQzXEKhK2PsvdUi53OrQVdbEHySPQl3Ehl0Q8g=)
3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: 9A66PZraqcmsbI8344W/oWr1IDY31DvKsi1wtNyTQV4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl
rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 05:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ef:b3:9b:1f:a9:cb:d9:08:9d:52:96:1d:6e:15:7c:b4:90:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739
Validity
Not Before: Apr 19 21:26:29 2026 GMT
Not After : Apr 23 05:52:29 2026 GMT
Subject: CN=39FE173AD2B2ACF798536367C57E333E267E5999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:5c:b7:4f:72:f7:2c:c4:8f:02:9b:3a:73:
5e:38:72:81:79:6a:a3:61:1a:3a:fc:6d:60:67:3b:
e1:79:59:9f:f5:e0:b1:99:93:99:20:68:46:f5:45:
3d:0f:86:d1:11:1d:0d:1c:24:b9:8d:db:77:2a:de:
95:ff:5b:00:bd:1e:f5:c9:e1:8a:39:e6:8c:49:ea:
c9:4e:c0:85:6b:95:13:cb:89:1e:74:9a:46:57:d3:
9d:df:e1:fa:a8:1a:23:be:28:0b:5c:c3:d7:1f:83:
fc:e4:d8:b7:9c:0a:e3:4a:79:d6:56:00:2f:41:3a:
45:1a:f9:8c:10:ef:30:71:dc:8d:40:2f:62:16:35:
49:cd:b1:23:06:08:98:a4:cc:9d:90:d1:a2:08:fd:
38:7b:6a:74:5b:fe:33:be:7a:48:93:f1:68:17:75:
32:f2:83:d4:ea:71:c6:bd:71:13:a6:fc:ef:89:2e:
90:55:1f:67:67:09:b4:d1:df:74:69:f2:51:56:37:
9f:8e:a1:88:8e:9d:7c:cc:e6:9f:d0:2b:16:9f:a3:
a7:23:db:d1:07:50:10:54:a4:e7:7e:26:1d:fc:91:
24:b1:36:14:7d:30:db:40:07:e7:4a:88:5a:22:ea:
3d:41:19:0e:a0:46:a7:66:0c:77:47:b2:8b:f1:09:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:17:3A:D2:B2:AC:F7:98:53:63:67:C5:7E:33:3E:26:7E:59:99
X509v3 Authority Key Identifier:
keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f6:28:fd:94:f5:2c:d0:94:9b:34:8e:a8:f0:81:e9:ff:f4:
3e:fb:f1:ce:2c:46:84:99:01:54:a3:17:91:a3:47:06:7f:23:
4d:07:aa:99:3d:6d:9b:79:e6:65:67:6f:6f:fd:a1:68:81:1a:
af:b8:43:6f:a8:9f:0b:5c:f9:6a:9f:cf:6c:b8:af:f0:00:f8:
5e:db:43:33:cf:e1:22:54:87:a3:89:f0:6e:68:52:3a:48:b6:
fa:f2:42:42:6b:e8:dd:c1:c6:bd:4f:3c:2e:91:41:18:4a:fb:
41:49:e8:9a:25:df:a2:ee:75:cc:32:7d:4d:bb:7f:6b:7e:3a:
96:96:ad:c0:a7:f4:50:ae:23:30:f0:37:80:1d:cc:6a:a1:69:
c0:0b:91:a4:36:53:73:16:e1:cc:a5:50:56:6a:69:6f:64:ae:
1e:a6:a5:7c:9f:1c:75:e2:06:bb:a2:bb:0d:e4:4d:0d:13:18:
5b:b2:61:fe:2b:95:88:6b:e0:9f:e2:1d:53:f0:92:46:e8:f8:
82:4f:dd:90:db:97:63:81:54:a3:49:4d:05:2d:41:90:00:34:
ed:38:85:90:8d:43:c6:e6:a2:a3:e4:8a:e8:9d:06:41:a6:27:
0f:f7:0e:26:a2:ac:db:6f:69:a2:68:1a:7c:a0:cc:c7:d8:4c:
5f:58:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:52:17 2026 by rpki-client