
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json)
Hash identifier: Ct4i78AvM/lO8O6E86wma0Pv3QiNMpTJylbqR4CEUcE=
Subject key identifier: 22:E1:6F:D9:66:0A:A7:80:C7:14:79:CF:E9:A6:20:9D:AB:48:E0:AB
Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143
Certificate serial: 595565B46013CCD7C998838B9BF1F873FA830A7A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
Manifest number: 0112
Signing time: Sun 01 Mar 2026 20:51:13 +0000
Manifest this update: Sun 01 Mar 2026 20:46:13 +0000
Manifest next update: Thu 05 Mar 2026 04:30:13 +0000
Files and hashes: 1: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: QeXlEZq47AtBKAR952zgZJXpk6fYnR/CicN3i2dSucs=)
2: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=)
3: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=)
4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:55:65:b4:60:13:cc:d7:c9:98:83:8b:9b:f1:f8:73:fa:83:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143
Validity
Not Before: Mar 1 20:46:13 2026 GMT
Not After : Mar 5 04:30:13 2026 GMT
Subject: CN=22E16FD9660AA780C71479CFE9A6209DAB48E0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:89:d8:fd:79:14:c6:4d:7e:7f:33:73:1b:
3d:b8:ee:eb:d6:da:45:41:97:a2:50:9c:96:69:3d:
81:d0:cd:ba:42:61:9a:21:d0:e4:bb:35:b1:5c:84:
83:90:36:1c:3e:1e:ca:2e:5e:8b:c3:e2:9d:a7:c4:
e5:63:9c:0b:f0:3f:19:aa:88:05:3d:6e:f9:7a:40:
23:52:b0:de:a6:d1:05:47:6d:ac:71:56:f7:cc:84:
83:ef:17:53:67:48:1c:32:0a:50:2b:8f:af:5e:5d:
21:14:e4:15:d7:17:8a:e9:9a:9e:57:be:36:b3:34:
61:2d:e7:87:0f:2b:ac:78:d7:5c:99:b2:66:67:0d:
ce:15:5f:9e:b7:97:a7:3b:50:f9:8b:12:ed:07:af:
55:79:ef:17:04:92:4e:5e:a6:3e:16:87:11:dd:76:
90:dc:da:3d:94:d9:f5:43:24:a0:06:1a:33:6b:86:
95:3f:52:c9:fc:dc:1b:8a:93:f5:d2:ab:68:b2:da:
c1:b8:0b:c9:9f:a3:d0:64:82:ae:19:62:ca:42:d6:
4f:d5:b9:37:8d:bd:07:56:71:2f:d3:fa:39:5a:a4:
75:b9:6e:37:8c:c6:63:fa:1e:83:06:02:32:6d:cf:
ef:c6:fc:9a:33:05:52:87:9a:65:c5:78:20:e8:99:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:6F:D9:66:0A:A7:80:C7:14:79:CF:E9:A6:20:9D:AB:48:E0:AB
X509v3 Authority Key Identifier:
keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cf:37:9a:1f:c3:c2:30:26:60:43:78:89:e6:40:fd:98:54:
6f:89:af:e3:19:2c:10:0a:22:6e:60:12:0e:47:88:d9:f1:c9:
ec:67:0b:d9:95:77:db:be:19:91:0c:d3:54:dd:eb:65:4c:dd:
27:e1:6c:c2:2e:a6:bc:d0:e8:5e:ac:58:2a:c1:51:7e:61:51:
b2:d2:ba:76:66:42:c9:71:e6:ad:d6:c6:08:b0:92:f9:da:6a:
bc:8d:35:da:c2:26:80:8d:2e:33:a7:07:ca:56:5d:f3:f4:5d:
68:f8:66:e1:dd:43:02:a6:90:9e:d4:89:60:22:57:d9:60:82:
fd:52:82:4e:c4:d5:a6:23:bd:0b:ce:60:61:f9:c2:fd:38:94:
aa:17:00:7d:50:2f:e8:66:3c:d0:0c:63:6f:e6:ac:1b:22:7a:
17:20:f6:ce:97:43:62:e8:1c:5c:f9:4c:64:a0:9f:62:67:ad:
e5:68:e6:0b:27:24:f3:6c:4d:c5:ee:99:34:0f:1a:87:c6:22:
41:6d:df:f2:68:1c:fe:32:2c:23:0d:bc:e1:84:4c:42:d0:01:
10:b5:f5:1c:3b:b0:ef:ed:0a:11:91:62:1a:80:dc:0c:47:e3:
b1:39:7a:31:cc:0b:e5:b0:c5:ea:81:03:52:54:33:7a:52:16:
10:71:61:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWVVltGATzNfJmIOLm/H4c/qDCnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0
MzMxOTE0MzAeFw0yNjAzMDEyMDQ2MTNaFw0yNjAzMDUwNDMwMTNaMDMxMTAvBgNV
BAMTKDIyRTE2RkQ5NjYwQUE3ODBDNzE0NzlDRkU5QTYyMDlEQUI0OEUwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsR4nY/XkUxk1+fzNzGz247uvW
2kVBl6JQnJZpPYHQzbpCYZoh0OS7NbFchIOQNhw+HsouXovD4p2nxOVjnAvwPxmq
iAU9bvl6QCNSsN6m0QVHbaxxVvfMhIPvF1NnSBwyClArj69eXSEU5BXXF4rpmp5X
vjazNGEt54cPK6x411yZsmZnDc4VX563l6c7UPmLEu0Hr1V57xcEkk5epj4WhxHd
dpDc2j2U2fVDJKAGGjNrhpU/Usn83BuKk/XSq2iy2sG4C8mfo9Bkgq4ZYspC1k/V
uTeNvQdWcS/T+jlapHW5bjeMxmP6HoMGAjJtz+/G/JozBVKHmmXFeCDomd9tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIuFv2WYKp4DHFHnP6aYgnatI4KswHwYDVR0j
BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD
MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx
OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4
MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy
Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACvPN5ofw8IwJmBDeInmQP2YVG+Jr+MZLBAK
Im5gEg5HiNnxyexnC9mVd9u+GZEM01Td62VM3SfhbMIuprzQ6F6sWCrBUX5hUbLS
unZmQslx5q3WxgiwkvnaaryNNdrCJoCNLjOnB8pWXfP0XWj4ZuHdQwKmkJ7UiWAi
V9lggv1Sgk7E1aYjvQvOYGH5wv04lKoXAH1QL+hmPNAMY2/mrBsiehcg9s6XQ2Lo
HFz5TGSgn2JnreVo5gsnJPNsTcXumTQPGofGIkFt3/JoHP4yLCMNvOGETELQARC1
9Rw7sO/tChGRYhqA3AxH47E5ejHMC+WwxeqBA1JUM3pSFhBxYVc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:20 2026 by rpki-client