
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier: viTSpLDhVpP3K2+U+b3tark95wFi+Y35BqkHutLUTD8=
Subject key identifier: 5B:1E:0A:93:CD:8D:CB:C3:04:89:8D:8D:2B:93:F6:E0:63:68:C9:09
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial: 4A6DA01F8F6E8A6A15D5E862B8E29287376F6700
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number: 02F0
Signing time: Fri 17 Apr 2026 14:33:31 +0000
Manifest this update: Fri 17 Apr 2026 14:28:31 +0000
Manifest next update: Mon 20 Apr 2026 21:45:31 +0000
Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=)
2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: N9uASdhYx4Qt4k5GxHFEEyDmcMWER4fh2XjeVaRX6Mg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 21:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6d:a0:1f:8f:6e:8a:6a:15:d5:e8:62:b8:e2:92:87:37:6f:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Validity
Not Before: Apr 17 14:28:31 2026 GMT
Not After : Apr 20 21:45:31 2026 GMT
Subject: CN=5B1E0A93CD8DCBC304898D8D2B93F6E06368C909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:c9:1c:6f:b7:38:70:68:a4:74:10:6e:d0:
36:48:da:3d:a4:1a:35:b4:c0:bd:c0:ff:2d:2e:85:
50:a7:34:31:c8:aa:c1:cf:59:1c:b0:14:a9:29:98:
2e:d1:5c:ef:81:d6:5e:3c:59:9e:c3:1b:ae:61:84:
9e:d0:b5:b9:60:fc:53:7b:cf:7d:4c:58:87:b3:1f:
ce:01:68:35:9b:e2:99:c1:ab:80:7e:38:a3:03:6d:
a5:49:27:ba:a7:b9:e9:54:8c:2d:d4:a8:f0:cd:98:
9d:f1:43:27:cb:93:77:5a:06:e1:56:c3:83:bb:1f:
aa:c4:87:c8:b4:3e:4c:68:41:42:32:f3:ed:ef:1f:
0c:a2:a8:05:d2:58:db:28:92:cd:d3:ef:f8:65:13:
94:11:c3:06:bb:79:f2:63:12:a1:f0:d5:73:2b:c6:
1b:06:f0:82:9c:bb:29:68:44:e5:f3:3c:a0:08:b2:
4b:97:d7:00:82:86:80:4b:68:d8:a9:c1:1d:09:44:
ab:59:37:e1:4a:b8:84:64:be:0d:be:01:2e:6d:20:
82:e3:ee:74:9c:8b:12:31:85:6e:38:4f:03:09:8b:
0e:7f:07:cc:57:bc:45:9d:54:cc:86:89:73:e4:a1:
4b:e8:0d:a1:f7:f6:08:fe:f5:40:02:39:19:9a:09:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:0A:93:CD:8D:CB:C3:04:89:8D:8D:2B:93:F6:E0:63:68:C9:09
X509v3 Authority Key Identifier:
keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:7d:44:7f:58:bb:74:d4:a6:21:b8:9d:c9:fd:b7:24:84:
71:7d:b4:ac:64:80:68:ad:99:d1:69:1a:a4:ac:a1:4f:f5:dc:
84:3d:bf:e9:d4:24:c7:4e:94:2c:fb:2e:ee:64:c9:7d:cd:45:
a9:45:52:8a:62:64:a3:5a:4c:18:50:e9:ae:40:67:a4:aa:a4:
d9:aa:ba:70:05:21:53:06:f2:f8:f4:76:8c:ec:66:ed:74:fc:
48:fc:86:29:ab:d0:80:70:30:a5:68:cc:70:df:0c:d4:07:bf:
e0:9e:d3:f2:e3:19:0e:ff:58:e8:4d:7b:44:38:b0:90:11:ce:
30:06:f8:9b:06:38:53:a5:c7:02:8e:bc:19:d0:5b:8d:b7:75:
27:36:51:5d:c4:94:22:a9:b0:ad:c5:2c:9e:7b:3f:b0:10:b1:
77:65:75:08:cc:7f:d1:91:0e:58:d9:3a:f6:a7:3c:b4:b2:52:
18:c2:6d:93:30:5c:29:c0:f3:24:6e:17:df:63:db:e4:9c:b1:
8e:e6:11:1c:56:33:c3:b2:c3:bb:dc:dd:5a:93:b0:84:b9:9d:
83:4e:e9:d6:c7:2d:79:0c:0e:52:79:e1:24:f1:22:ba:41:71:
14:72:6b:57:0b:70:a4:ab:e5:fa:c5:62:16:90:59:bb:37:cd:
3d:c2:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:57:49 2026 by rpki-client