
$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json)
Hash identifier: YPR8nWh2o+FR/VtBnTLuRPKX6ZnYfXLFjFjYAv/9w+U=
Subject key identifier: DB:4B:96:C8:A5:E3:3A:FD:28:86:22:7A:10:20:6C:55:2D:D7:54:AD
Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Certificate serial: 547849FF1FECC817BD4156FFB729E58037D739DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
Manifest number: 0209
Signing time: Sat 28 Feb 2026 20:12:39 +0000
Manifest this update: Sat 28 Feb 2026 20:07:39 +0000
Manifest next update: Wed 04 Mar 2026 03:02:39 +0000
Files and hashes: 1: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=)
2: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: m+kGz2xzr9gYGrRpcutKpdjXoHb4t9xHQPjqma0PkiA=)
3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:78:49:ff:1f:ec:c8:17:bd:41:56:ff:b7:29:e5:80:37:d7:39:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Validity
Not Before: Feb 28 20:07:39 2026 GMT
Not After : Mar 4 03:02:39 2026 GMT
Subject: CN=DB4B96C8A5E33AFD2886227A10206C552DD754AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2d:fd:cd:7a:7a:bd:91:2d:21:b7:94:71:a7:
78:89:57:21:a1:5f:9d:50:40:c6:f1:22:e6:a4:04:
30:20:e3:5d:cc:d1:4b:fc:7a:eb:33:dd:0d:bd:c4:
be:83:3c:20:96:c9:32:58:5e:d3:43:7a:bc:7c:06:
29:62:ab:d5:60:63:92:66:a7:0a:ec:12:57:84:fe:
71:9e:80:3f:4c:65:4c:80:ac:4c:42:0a:49:4e:f1:
1b:89:ce:e2:b3:eb:a7:e9:7a:dd:d0:54:b0:f2:dd:
a0:7c:a7:53:cc:a8:be:b2:4f:8d:15:44:22:95:2e:
51:50:14:11:32:f3:18:59:8e:34:3e:ec:d7:77:aa:
a1:46:73:82:61:9a:a0:98:af:3c:ae:04:1e:b3:8d:
8b:f1:14:15:7e:f5:58:a9:3a:4d:90:c7:8b:9a:1f:
83:8c:c7:8c:74:d2:e6:a6:18:a9:56:50:9c:1e:cc:
d2:c7:f6:51:83:4d:9f:ba:a4:94:35:48:d8:bb:20:
bf:24:19:35:f4:6d:12:b6:40:e5:60:45:e1:98:c4:
7f:ef:31:f0:a6:73:10:c7:47:ff:5c:74:75:d5:c2:
93:9f:17:79:02:85:c2:c8:9b:8d:5e:b1:71:4a:56:
65:42:a5:d4:81:05:45:f1:09:2b:de:42:a8:e0:28:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4B:96:C8:A5:E3:3A:FD:28:86:22:7A:10:20:6C:55:2D:D7:54:AD
X509v3 Authority Key Identifier:
keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:de:12:1c:7b:6f:ac:9d:8a:f2:29:e2:25:97:9a:44:e5:fd:
d2:07:3e:62:f5:ac:31:1f:90:39:3c:94:27:43:cc:2c:f3:87:
a3:15:90:11:46:ab:ba:d6:73:0f:bc:27:59:26:e0:83:e9:f0:
2a:2b:a5:22:4f:9d:30:26:35:ba:65:79:ff:f4:03:0e:63:0f:
27:b4:20:ed:de:32:3c:e8:90:2f:b1:37:fc:1a:26:93:0a:02:
3d:b5:4d:96:51:8c:31:2e:79:ba:64:3c:66:84:61:ea:1f:d7:
45:b8:b0:ae:ac:94:6e:17:3d:2b:2f:3f:8b:2f:3b:69:39:9d:
cc:c0:4d:7b:4e:60:52:7e:d8:49:8e:e6:36:e3:ab:1b:bc:8e:
8a:64:78:40:7c:e3:bb:0f:9a:ca:89:18:c6:62:35:12:ad:7b:
2d:0c:5d:eb:f4:80:ce:14:05:d8:3f:e2:16:59:9c:c7:79:b1:
d5:2e:d0:7a:43:c2:a6:a3:1f:1f:93:aa:ae:eb:98:e4:8a:5e:
3d:a8:47:b7:5b:f8:93:72:ea:0b:7d:5d:3a:98:31:ec:74:52:
56:64:de:1e:4a:ce:78:97:1a:d9:7f:06:c7:7f:78:8a:58:c5:
7e:b0:1c:47:c1:54:4e:5e:f2:d9:7f:86:e2:15:aa:0f:f6:c9:
ee:aa:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:21 2026 by rpki-client