
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
File: FBA3638DA562505698B924E173281E46359B1617.mft (raw, json)
Hash identifier: 3NPsamde+vNWn7UBavy+FAlW4v6Gtpm2ZZ5uVFenD4Q=
Subject key identifier: 5B:0E:87:F8:AE:F1:8C:48:4E:12:30:1C:64:77:2B:9B:2C:EC:86:DD
Authority key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
Certificate issuer: /CN=FBA3638DA562505698B924E173281E46359B1617
Certificate serial: 5781C6C33D5F0302A1F76E3C4B27F1DE68C2B797
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 01:40:37 +0000
Manifest this update: Thu 17 Sep 2026 01:35:37 +0000
Manifest next update: Fri 18 Sep 2026 04:46:37 +0000
Files and hashes: 1: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: tNCHVLpKWfY3fZ8ZfZRRYmaRD6tD5GGqANd/n3olcLk=)
2: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: 5FPAtwhecwsubL80r6cuw6LZHftwyRq85ZxJM6Kqd/0=)
3: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: aWv2LNdALgBBdR5J3vxMwq5LFZy/FvWsDrFbKxxFcx4=)
4: FBA3638DA562505698B924E173281E46359B1617.crl (hash: QEAU5dzguxhlQUEnlh9p3ejk1TUQi7l2DFRA6QU606Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:81:c6:c3:3d:5f:03:02:a1:f7:6e:3c:4b:27:f1:de:68:c2:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBA3638DA562505698B924E173281E46359B1617
Validity
Not Before: Sep 17 01:35:37 2026 GMT
Not After : Sep 18 04:46:37 2026 GMT
Subject: CN=5B0E87F8AEF18C484E12301C64772B9B2CEC86DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:e3:de:1e:f5:54:e7:d1:46:38:ca:45:44:
a2:5b:a9:d2:10:26:ee:6a:5d:fe:ce:a1:fb:de:b3:
81:98:c3:65:ca:10:7e:79:a8:dd:e4:8e:67:95:26:
22:b6:f2:df:32:77:c3:1e:7f:a9:38:ba:d8:62:a3:
b8:d6:2c:09:bb:dd:e3:d0:92:cf:a1:d7:ef:40:ef:
47:93:aa:8c:61:a0:b7:96:b8:04:64:72:b4:88:0a:
30:c3:c8:ba:6c:17:45:43:f1:3c:74:f3:30:28:5f:
d0:32:f8:d8:d3:e3:a9:12:d8:bc:fb:26:a8:89:7e:
ea:fd:b0:e0:36:3c:fe:70:bc:b5:70:2a:d8:98:c5:
ad:f6:f9:b3:84:55:53:24:26:48:b1:37:f3:66:22:
58:47:a3:cb:70:12:60:63:1a:7a:c4:39:f9:55:83:
0e:f8:ad:f3:23:36:c2:0c:76:c3:54:f8:a7:a1:a1:
0d:b5:82:99:6e:b9:8b:be:b4:69:d2:60:99:36:8a:
a8:34:d6:c8:1e:70:f7:c7:5e:00:2e:b3:a3:85:9a:
b6:8e:78:22:c7:0e:68:ca:dc:7c:d3:96:fd:ac:97:
cc:41:39:17:bd:56:38:ad:09:82:75:01:02:a3:02:
18:75:50:97:a8:51:5f:48:27:cd:4b:d8:4d:e6:d3:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:87:F8:AE:F1:8C:48:4E:12:30:1C:64:77:2B:9B:2C:EC:86:DD
X509v3 Authority Key Identifier:
keyid:FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:53:5b:38:d8:58:fd:88:f7:56:8b:55:f2:77:ac:91:9a:8c:
11:d4:5e:8b:ef:a1:45:46:11:bc:41:59:40:0c:66:8b:a9:09:
22:8d:04:ca:a9:82:df:f5:ba:29:70:09:25:f6:c4:db:cd:92:
44:14:f3:79:36:ad:3e:e3:fe:be:66:7f:cf:c0:0a:e1:9e:26:
cf:d7:ec:35:15:c9:ab:a4:34:4b:f5:bc:cf:af:03:d6:a8:c1:
3a:8d:bf:de:29:62:ed:1f:da:1d:c9:97:29:d5:a0:3b:70:ed:
07:09:dc:e5:68:29:ca:70:fd:1e:46:05:cd:4a:fe:9e:2f:10:
29:c4:76:ae:64:77:ac:0c:55:83:cf:d3:94:c9:4f:36:f9:aa:
ba:86:49:3f:bc:ce:90:4b:33:c0:68:29:05:62:c1:aa:24:2c:
de:e8:7d:97:16:75:62:04:c8:70:0b:45:21:ca:20:d5:69:5b:
7d:2c:09:93:6a:ba:2b:d9:b0:4e:e1:23:cd:2a:51:e9:1f:0a:
8d:59:f4:bb:79:9e:78:d3:0b:cb:c4:00:cf:87:eb:5e:29:d0:
4b:7e:1f:03:15:49:6f:f9:04:c6:82:bd:8c:80:6b:2f:64:13:
a7:9d:1f:5f:85:bc:b4:51:89:9e:7a:84:0f:a4:6c:d5:aa:c5:
01:9a:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:37:23 2026 by rpki-client