
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
File: FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft (raw, json)
Hash identifier: 8iIk1Q0rWDYLrOrnm+m2/9mePyb/BzGTfUoo5PVQNxw=
Subject key identifier: 23:EB:06:21:B9:B8:11:3F:F6:7D:E2:35:AC:AB:67:8B:11:60:8A:0C
Authority key identifier: FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
Certificate issuer: /CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Certificate serial: 768A1EADA1DD56E8D6F197D6CBD5B5E9DCCF68D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 07:25:40 +0000
Manifest this update: Sun 25 Oct 2026 07:20:40 +0000
Manifest next update: Mon 26 Oct 2026 08:53:40 +0000
Files and hashes: 1: FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl (hash: gLnexRRgos0zJmCbcCfaZMI3FBF8Z47HlDJTjgbDvU0=)
2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: Bk2FFepc1a84p43gdWUgbEu+IiGvQM1k81yoYeK1npM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 08:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8a:1e:ad:a1:dd:56:e8:d6:f1:97:d6:cb:d5:b5:e9:dc:cf:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEC4D1378AEC5E610311B761CBE2874CA92D0538
Validity
Not Before: Oct 25 07:20:40 2026 GMT
Not After : Oct 26 08:53:40 2026 GMT
Subject: CN=23EB0621B9B8113FF67DE235ACAB678B11608A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:69:7d:c5:61:0b:4d:e9:41:bc:e5:a7:1a:
dc:25:c7:13:dd:ec:0d:00:55:8a:7a:53:ff:dc:25:
4c:70:5a:4e:6f:10:14:a2:c4:fa:b5:c4:b6:98:81:
7f:3f:6f:6f:93:15:ee:7c:7a:ac:5e:f7:6b:a3:db:
8e:37:a0:bd:c3:87:43:ef:6e:ce:e6:83:a3:45:d3:
07:51:95:45:38:50:50:10:7f:8d:e9:a3:69:4c:8f:
06:92:fd:b6:df:4b:7b:d9:6a:67:58:c9:ae:d8:31:
93:de:45:6b:ed:24:c1:9f:8d:69:2e:e4:51:45:62:
06:cc:87:27:53:09:5a:5d:c2:83:5b:3f:1a:fc:d1:
55:d0:cd:32:d5:8f:64:2a:5d:c8:c8:d0:e4:aa:01:
61:d5:01:88:83:17:bf:45:c0:0d:c2:21:47:73:bf:
2f:c4:cd:f9:74:e2:c9:a7:84:59:14:11:0b:92:1e:
59:30:fd:4b:3a:62:04:87:43:c2:67:63:27:ab:a8:
98:a2:43:fe:4e:2e:3b:8c:5c:f8:d1:eb:c1:18:d7:
cc:30:58:43:a1:88:96:43:c1:d6:56:bf:e9:27:68:
b9:6c:43:d4:8a:9f:72:93:b0:3c:c7:b2:9e:ec:a4:
69:df:0b:21:b2:5a:91:e7:2e:fa:15:65:12:3d:cd:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:06:21:B9:B8:11:3F:F6:7D:E2:35:AC:AB:67:8B:11:60:8A:0C
X509v3 Authority Key Identifier:
keyid:FE:C4:D1:37:8A:EC:5E:61:03:11:B7:61:CB:E2:87:4C:A9:2D:05:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEC4D1378AEC5E610311B761CBE2874CA92D0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/FEC4D1378AEC5E610311B761CBE2874CA92D0538.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:73:f4:69:ac:27:39:f3:fd:ad:e7:5e:23:94:0c:8b:fa:
48:62:72:76:c1:98:66:b8:c9:88:f2:ce:6c:19:b7:da:6b:5e:
cc:ea:3e:a4:fe:c2:47:b8:4b:57:f4:c6:7f:8c:a7:71:7a:f9:
ef:a4:f9:06:1a:9d:18:dc:7a:cd:2c:5d:a5:d4:8e:37:f9:5b:
6f:c3:a3:7f:bf:18:58:bb:90:8f:c4:4a:23:64:72:05:e7:e1:
18:1c:32:49:1c:82:fb:4d:8f:a2:47:f4:0c:c4:c1:f4:27:b8:
63:5e:c0:9c:e6:cc:b8:05:6e:89:b0:a5:a0:40:b5:e3:2f:da:
9e:cb:fa:1c:8f:bc:88:89:97:8b:70:a8:68:0d:66:86:17:93:
6c:b4:7d:20:cb:e2:06:fc:53:28:54:f6:ac:34:b8:9f:18:93:
b6:2e:6d:db:e1:14:83:69:fc:c3:98:dd:e7:e0:76:bc:3e:9e:
1e:63:f4:39:ce:56:af:f5:23:c2:02:84:db:a4:12:8d:f7:fa:
c7:1e:e6:dd:cd:85:1a:fa:80:cf:e6:50:ff:82:85:57:1f:a1:
48:c5:72:d4:4d:63:54:28:85:11:7f:d7:41:13:d4:98:f7:cb:
a6:86:78:e8:3a:38:37:e8:cc:d7:ef:df:2c:0a:21:42:5a:07:
23:b1:6e:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdooeraHdVujW8ZfWy9W16dzPaNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVDNEQxMzc4QUVDNUU2MTAzMTFCNzYxQ0JFMjg3NENB
OTJEMDUzODAeFw0yNjEwMjUwNzIwNDBaFw0yNjEwMjYwODUzNDBaMDMxMTAvBgNV
BAMTKDIzRUIwNjIxQjlCODExM0ZGNjdERTIzNUFDQUI2NzhCMTE2MDhBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErGl9xWELTelBvOWnGtwlxxPd
7A0AVYp6U//cJUxwWk5vEBSixPq1xLaYgX8/b2+TFe58eqxe92uj2443oL3Dh0Pv
bs7mg6NF0wdRlUU4UFAQf43po2lMjwaS/bbfS3vZamdYya7YMZPeRWvtJMGfjWku
5FFFYgbMhydTCVpdwoNbPxr80VXQzTLVj2QqXcjI0OSqAWHVAYiDF79FwA3CIUdz
vy/Ezfl04smnhFkUEQuSHlkw/Us6YgSHQ8JnYyerqJiiQ/5OLjuMXPjR68EY18ww
WEOhiJZDwdZWv+knaLlsQ9SKn3KTsDzHsp7spGnfCyGyWpHnLvoVZRI9zW5pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUI+sGIbm4ET/2feI1rKtnixFgigwwHwYDVR0j
BBgwFoAU/sTRN4rsXmEDEbdhy+KHTKktBTgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDZlNDdjNmQtZTYyNC00NzdjLWFlMTgtZDMyZjIyYzk2MjA0LzAvRkVDNEQxMzc4
QUVDNUU2MTAzMTFCNzYxQ0JFMjg3NENBOTJEMDUzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GRUM0RDEzNzhBRUM1RTYxMDMxMUI3NjFDQkUyODc0Q0E5MkQw
NTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl
MTgtZDMyZjIyYzk2MjA0LzAvRkVDNEQxMzc4QUVDNUU2MTAzMTFCNzYxQ0JFMjg3
NENBOTJEMDUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJRTc/RprCc58/2t514jlAyL+khicnbBmGa4
yYjyzmwZt9prXszqPqT+wke4S1f0xn+Mp3F6+e+k+QYanRjces0sXaXUjjf5W2/D
o3+/GFi7kI/ESiNkcgXn4RgcMkkcgvtNj6JH9AzEwfQnuGNewJzmzLgFbomwpaBA
teMv2p7L+hyPvIiJl4twqGgNZoYXk2y0fSDL4gb8UyhU9qw0uJ8Yk7YubdvhFINp
/MOY3efgdrw+nh5j9DnOVq/1I8IChNukEo33+sce5t3NhRr6gM/mUP+ChVcfoUjF
ctRNY1QohRF/10ET1Jj3y6aGeOg6ODfozNfv3ywKIUJaByOxblw=
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:42:44 2026 by rpki-client