
$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json)
Hash identifier: QFmbkZd9c2BsSZIRVMFzF8hFsNAfmVvICNz2kidtIjw=
Subject key identifier: 19:5E:8F:18:A3:A2:70:F5:F2:7B:C5:FE:56:8D:78:38:ED:78:1E:24
Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
Certificate serial: 0C727C35C4AFA6F36B7B57D4EEB1CBEF00F604A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
Manifest number: 0116
Signing time: Fri 17 Apr 2026 14:12:27 +0000
Manifest this update: Fri 17 Apr 2026 14:07:27 +0000
Manifest next update: Mon 20 Apr 2026 19:20:27 +0000
Files and hashes: 1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=)
2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: PF0z0s+C/vqSfOFot3uRXQyCPU5inIDJpyeSC6+I25M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl
rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:72:7c:35:c4:af:a6:f3:6b:7b:57:d4:ee:b1:cb:ef:00:f6:04:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
Validity
Not Before: Apr 17 14:07:27 2026 GMT
Not After : Apr 20 19:20:27 2026 GMT
Subject: CN=195E8F18A3A270F5F27BC5FE568D7838ED781E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:05:26:d0:72:29:a8:67:22:99:75:be:59:
c3:33:8a:88:01:12:f6:c9:d4:74:93:16:63:72:b4:
2d:55:84:b4:7a:14:2c:1c:de:e6:70:d5:05:08:9a:
f0:e8:cf:68:df:01:a7:d0:e6:3b:aa:87:af:b6:51:
97:43:d5:d3:7f:c7:43:4a:1a:86:6d:ee:df:cd:7c:
14:da:2a:08:7e:25:f7:0b:d0:fe:d5:38:d2:18:7d:
10:4c:3a:d7:b8:52:9c:74:ac:8e:87:de:ba:31:1b:
57:df:4f:10:14:69:0e:08:bb:61:11:87:2b:21:bf:
a6:02:ad:08:0f:c3:89:e5:c2:39:0d:7c:35:fc:46:
e5:fa:00:5d:02:3a:8b:44:2e:d3:31:9e:3a:37:d6:
b2:52:0c:70:be:71:b7:27:d1:2a:72:d5:a1:c9:2c:
47:e7:fb:2d:c1:25:f0:6f:75:49:77:45:76:e3:1c:
f3:50:56:12:c2:0f:8e:2e:44:20:08:e4:47:56:88:
cd:a8:e8:7c:9e:15:44:c4:de:cf:98:59:08:57:99:
ce:90:2e:d5:95:98:d4:e3:fb:3a:ff:db:fd:79:26:
aa:93:d1:ad:8d:fd:be:4a:96:a2:6a:0f:57:4f:6b:
2d:a7:40:de:0e:d2:0b:cd:18:a2:18:87:18:97:16:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:8F:18:A3:A2:70:F5:F2:7B:C5:FE:56:8D:78:38:ED:78:1E:24
X509v3 Authority Key Identifier:
keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:e8:a9:6b:1d:6c:0a:08:d4:54:02:ea:80:97:e1:03:dd:
b3:da:d8:43:89:b8:80:b2:8c:e4:ac:bf:e2:bf:4c:d4:9d:95:
ad:51:43:f2:91:3c:6a:20:c3:6d:23:15:c5:b5:92:d5:8f:98:
15:66:9e:46:be:d0:7f:20:68:69:da:96:62:3c:b8:03:d5:11:
cf:6f:91:41:b4:d3:d6:81:02:d9:9f:b4:ed:de:6d:7b:6a:cf:
11:27:47:71:11:e6:93:02:b0:34:0c:fc:ad:65:d7:72:9b:bd:
a8:5a:28:f7:d1:3f:ff:3f:ea:2c:9b:98:aa:05:ed:73:22:27:
2e:59:73:f3:e3:2a:9e:e2:84:30:43:bc:01:0d:a5:65:db:37:
cd:ec:78:b9:e9:49:7c:43:d6:4e:8a:16:02:b9:9f:c6:da:4f:
b6:85:07:5b:45:7c:31:cd:d7:3e:0c:9a:cc:6d:bf:48:41:53:
54:6d:f2:d6:44:9c:79:0c:1e:6f:a3:b5:06:7a:3e:c3:8d:b1:
31:45:b8:fd:32:3d:22:aa:ec:5c:2e:44:6a:fa:c5:74:e1:2e:
25:13:32:c1:b6:c7:09:c3:d7:2b:36:03:3e:72:8f:63:66:5a:
86:fa:2a:d9:93:e7:91:13:de:e3:be:ee:44:92:bb:c6:80:2d:
e1:27:d5:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDHJ8NcSvpvNre1fU7rHL7wD2BKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG
MDlGOEY4ODAeFw0yNjA0MTcxNDA3MjdaFw0yNjA0MjAxOTIwMjdaMDMxMTAvBgNV
BAMTKDE5NUU4RjE4QTNBMjcwRjVGMjdCQzVGRTU2OEQ3ODM4RUQ3ODFFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdAUm0HIpqGcimXW+WcMziogB
EvbJ1HSTFmNytC1VhLR6FCwc3uZw1QUImvDoz2jfAafQ5juqh6+2UZdD1dN/x0NK
GoZt7t/NfBTaKgh+JfcL0P7VONIYfRBMOte4Upx0rI6H3roxG1ffTxAUaQ4Iu2ER
hyshv6YCrQgPw4nlwjkNfDX8RuX6AF0COotELtMxnjo31rJSDHC+cbcn0Spy1aHJ
LEfn+y3BJfBvdUl3RXbjHPNQVhLCD44uRCAI5EdWiM2o6HyeFUTE3s+YWQhXmc6Q
LtWVmNTj+zr/2/15JqqT0a2N/b5KlqJqD1dPay2nQN4O0gvNGKIYhxiXFjDrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGV6PGKOicPXye8X+Vo14OO14HiQwHwYDVR0j
BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz
REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG
OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky
MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF
MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABdv6KlrHWwKCNRUAuqAl+ED3bPa2EOJuICy
jOSsv+K/TNSdla1RQ/KRPGogw20jFcW1ktWPmBVmnka+0H8gaGnalmI8uAPVEc9v
kUG009aBAtmftO3ebXtqzxEnR3ER5pMCsDQM/K1l13KbvahaKPfRP/8/6iybmKoF
7XMiJy5Zc/PjKp7ihDBDvAENpWXbN83seLnpSXxD1k6KFgK5n8baT7aFB1tFfDHN
1z4Mmsxtv0hBU1Rt8tZEnHkMHm+jtQZ6PsONsTFFuP0yPSKq7FwuRGr6xXThLiUT
MsG2xwnD1ys2Az5yj2NmWob6KtmT55ET3uO+7kSSu8aALeEn1WY=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:40 2026 by rpki-client