
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
File: FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft (raw, json)
Hash identifier: HFNxx7RpFm6QO1bpJNDU8xy0AHtSp3qEKQbBM6AT9Qc=
Subject key identifier: 0F:92:D2:31:33:9F:30:0D:98:5A:91:20:7C:D1:AF:00:0C:43:F0:23
Authority key identifier: FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B
Certificate issuer: /CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B
Certificate serial: 01F907D6531A9C83EA5C772E1183F783684ACD16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 05:35:24 +0000
Manifest this update: Thu 17 Sep 2026 05:30:24 +0000
Manifest next update: Fri 18 Sep 2026 06:48:24 +0000
Files and hashes: 1: FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl (hash: 9sK8f8XTUwwPEMBLZNSbhTCNRBoic3Kw7Kwd/1ewa1Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl
rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f9:07:d6:53:1a:9c:83:ea:5c:77:2e:11:83:f7:83:68:4a:cd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B
Validity
Not Before: Sep 17 05:30:24 2026 GMT
Not After : Sep 18 06:48:24 2026 GMT
Subject: CN=0F92D231339F300D985A91207CD1AF000C43F023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:68:c5:df:da:b4:3e:4a:98:90:d8:07:0a:
cb:b5:95:28:99:f3:f6:08:1f:3a:8f:84:b8:15:ca:
ab:b5:e3:3e:fa:e9:28:a0:29:75:13:df:9c:19:00:
4d:2c:c2:76:e6:0c:63:ae:40:1c:36:0c:03:0d:dd:
31:82:5c:56:c1:53:12:39:ca:40:46:19:4a:44:04:
1b:5d:dd:07:84:26:66:ea:12:fd:b7:e9:29:ff:ab:
1a:3a:90:95:34:2e:95:bd:0b:0a:33:31:ab:75:0a:
3c:2c:d8:72:c0:c4:30:00:64:01:97:46:3d:59:fb:
f4:02:5a:51:69:e0:f1:08:b4:ee:e6:6d:74:21:b9:
2b:b2:29:a2:b2:c7:3b:00:fe:9a:ce:41:f6:73:6f:
a8:81:56:3e:9a:32:a9:d9:c1:f0:01:4d:7b:9c:d9:
25:06:2d:cb:1c:8b:ae:e2:82:03:ac:b9:73:2f:c4:
93:4f:85:c4:6b:b2:96:aa:47:67:82:ba:d2:8f:95:
34:fa:4b:05:48:19:c1:83:a6:ab:1a:0b:2e:85:cc:
a8:9f:64:f5:30:60:37:9b:4d:21:fe:6d:49:96:15:
b6:90:73:8f:7d:59:43:38:2a:7a:7d:33:33:ca:27:
36:1c:8b:fb:41:06:6f:d9:75:7d:ae:53:4b:99:21:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:D2:31:33:9F:30:0D:98:5A:91:20:7C:D1:AF:00:0C:43:F0:23
X509v3 Authority Key Identifier:
keyid:FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:fd:42:cc:6a:e7:f1:80:80:b2:77:8f:54:fe:51:94:2b:
9d:3d:22:c4:08:45:30:6e:45:09:81:f4:d9:b8:40:83:05:a8:
49:78:f4:36:a7:c4:aa:6e:e2:9b:fb:e1:8a:b9:a3:b3:dc:1f:
fb:1e:09:12:ca:05:d4:42:7e:cc:f9:35:73:92:42:86:b4:a2:
43:d4:9d:fe:02:b2:f4:0c:e1:bf:81:27:13:3b:5a:c0:64:54:
ce:d8:a9:ce:86:c0:64:22:ca:ad:e8:a2:a1:2e:8e:19:a5:1c:
ea:1b:59:56:a0:66:8c:ab:1a:86:3b:fb:4f:0a:fe:61:3d:21:
05:e8:5a:1e:7d:04:a3:c9:44:28:d4:2d:40:78:9a:b1:0c:8a:
02:a7:ac:e4:d1:6d:6b:cf:e7:e7:b8:7a:77:a7:33:8a:4a:4d:
e9:03:a1:84:fe:42:84:0f:02:6b:50:f0:d8:f9:4b:c2:14:c9:
1b:e0:07:d4:8c:81:3d:eb:37:a7:eb:88:2f:e1:00:ba:51:7c:
f0:a8:b2:91:e6:1e:f9:1f:55:40:a5:e7:d5:41:72:89:eb:3b:
a3:31:93:90:47:9d:07:8f:4f:68:ac:73:43:0e:fb:23:9a:22:
72:9c:5c:4f:df:4b:12:98:7f:7d:ee:47:61:77:dd:70:72:95:
69:6f:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:20:56 2026 by rpki-client