
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json)
Hash identifier: 2z3BzxDTmhl+dRIcGyx4Z5OzIaZVXvD8ctfqGIw06aw=
Subject key identifier: A7:59:FA:AA:7D:51:BD:7A:7D:C2:96:8E:8A:DF:A8:E0:5D:92:47:3C
Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39
Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739
Certificate serial: 34DF969B1CA9FFE7124BC2567ADDD91B1263295B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
Manifest number: 013A
Signing time: Thu 05 Mar 2026 22:01:26 +0000
Manifest this update: Thu 05 Mar 2026 21:56:26 +0000
Manifest next update: Mon 09 Mar 2026 01:57:26 +0000
Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: OUogbruuCrpYRSP0KkYcJZLQUjG9B1mm7DQPBtbMAGU=)
2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=)
3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl
rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:df:96:9b:1c:a9:ff:e7:12:4b:c2:56:7a:dd:d9:1b:12:63:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739
Validity
Not Before: Mar 5 21:56:26 2026 GMT
Not After : Mar 9 01:57:26 2026 GMT
Subject: CN=A759FAAA7D51BD7A7DC2968E8ADFA8E05D92473C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:d6:88:63:ee:7c:72:5b:21:ff:6e:8b:2f:
b0:8d:29:6a:ba:38:e8:15:8a:ec:d2:14:df:44:26:
b5:f2:25:82:6a:38:35:89:4f:54:c6:63:9a:c6:57:
9f:ce:1c:14:87:30:99:90:01:4c:fd:e1:4a:cc:b8:
64:cb:3b:03:fe:d3:c9:1c:0d:3a:fc:bc:95:26:db:
2d:c6:83:5a:7e:dd:23:44:10:3c:79:31:23:dc:2c:
40:9c:ce:3e:9e:82:dc:20:60:fa:81:43:b0:26:aa:
15:5c:34:e4:f9:3c:80:0e:3b:dc:44:3b:a0:89:87:
f4:20:f4:a7:5a:1c:94:b6:9f:6d:0a:ab:08:cd:a3:
19:db:14:07:1a:47:ed:f2:0c:8f:a9:54:fa:2c:f2:
ce:28:6b:8e:72:85:6e:95:29:09:26:5d:ad:8b:65:
0f:14:04:c2:a2:ff:66:a9:20:9e:53:85:f6:6e:ff:
c1:b6:1f:8e:db:95:56:01:1a:1f:d3:63:c1:dc:8f:
f3:60:5f:2e:79:13:00:7e:8f:e4:e9:90:5a:86:ae:
d5:67:a4:7b:17:ad:9f:35:27:77:db:6e:07:aa:54:
d4:b1:70:5d:1d:79:23:0c:bc:39:66:96:25:42:43:
64:23:95:80:ba:58:3b:0c:39:d2:40:dd:bb:1f:f5:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:FA:AA:7D:51:BD:7A:7D:C2:96:8E:8A:DF:A8:E0:5D:92:47:3C
X509v3 Authority Key Identifier:
keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ce:ef:dc:16:3e:cc:9f:ef:64:3a:89:b8:da:f1:b4:de:64:
f4:12:16:41:38:aa:11:d0:e2:87:4d:74:be:28:75:7a:50:81:
5e:0e:e7:96:db:d5:4b:47:36:d5:27:66:9c:15:9d:53:d8:c7:
a3:fb:65:85:88:ff:fb:dc:f3:67:68:c9:e6:df:c8:c3:c8:23:
73:2f:75:64:d7:e1:99:34:6e:3d:5f:df:b3:0b:6f:c8:00:52:
1f:77:59:48:21:b9:0a:59:d2:fa:80:80:5f:f5:a0:a5:0b:df:
50:27:93:39:42:c7:29:ff:f3:52:2b:ed:f3:d5:e2:19:2a:cd:
c7:8c:9b:63:ba:c6:2d:5c:99:91:db:67:97:d2:33:7f:f3:78:
e9:8a:38:d8:aa:b5:24:75:7f:02:31:62:27:76:64:89:62:e9:
eb:34:22:23:59:e4:89:5d:6a:89:f5:89:7b:ca:05:77:05:7c:
2a:f3:4f:7c:45:7d:94:d0:5e:c6:46:4e:02:e5:1e:45:a2:06:
53:b0:8b:51:06:97:7b:f6:cb:b9:29:9f:38:0e:89:36:8a:3e:
8b:f3:5b:62:08:8f:f1:07:c2:4d:4f:d3:d9:0d:e4:e1:47:f6:
82:5f:c6:a1:12:9e:f2:5f:21:61:e9:73:fc:1c:e1:be:c4:1a:
76:8f:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:59:09 2026 by rpki-client