
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json)
Hash identifier: zRrOn2cRS7ba2bpxuD+5/Max4kQvXThdJ/WTL4T3THg=
Subject key identifier: 2F:BA:0E:99:AB:95:6B:EE:16:8E:4F:8E:DC:8C:83:59:BC:76:3D:B6
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial: 68365806D52A9EE019993EA37EEBCD8A8188BE0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
Manifest number: 0254
Signing time: Sun 01 Mar 2026 03:42:19 +0000
Manifest this update: Sun 01 Mar 2026 03:37:19 +0000
Manifest next update: Wed 04 Mar 2026 10:59:19 +0000
Files and hashes: 1: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: QmHiu532QPD7y0HYorqy4wT6z5QRJAtyTljZHvtWYWk=)
2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:36:58:06:d5:2a:9e:e0:19:99:3e:a3:7e:eb:cd:8a:81:88:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Validity
Not Before: Mar 1 03:37:19 2026 GMT
Not After : Mar 4 10:59:19 2026 GMT
Subject: CN=2FBA0E99AB956BEE168E4F8EDC8C8359BC763DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:d0:b8:43:5a:06:84:4f:91:0b:02:50:d4:
d9:c5:8e:c4:da:6a:13:df:e5:e5:c2:26:e5:c7:8e:
2c:5c:d5:bc:98:a6:31:34:d8:75:74:65:ff:43:ac:
ab:5b:62:9f:38:08:6c:af:1b:e1:46:20:5f:71:42:
24:e5:21:c3:be:ef:13:fb:79:67:2b:76:e9:bc:5c:
47:af:47:14:74:87:d5:64:4a:74:8b:28:67:fa:1a:
61:4f:dc:54:90:d5:f8:73:b9:20:fa:5e:d6:c8:1c:
8b:1e:d7:4a:d3:7b:43:37:86:9f:02:22:a2:99:d7:
6c:ff:d6:e0:e3:4e:11:64:36:ac:38:93:59:de:55:
96:13:53:ba:8b:19:9f:f5:ac:2e:9b:fa:84:1c:cc:
e5:fc:ff:39:dd:2b:29:e6:30:09:aa:05:73:4c:c7:
50:ac:50:d9:35:17:48:b8:7c:b1:ea:4b:6c:e1:0b:
37:b2:14:1f:14:a0:e3:eb:78:73:8f:ba:a3:cc:3d:
ab:97:7b:60:d0:81:cf:8b:65:07:ac:7c:e2:4b:17:
53:a5:4f:96:c5:83:ae:eb:4d:80:02:8a:a5:45:67:
5d:47:7f:19:4a:23:a7:c9:8e:a0:32:62:b1:17:86:
be:e5:07:f2:c7:18:9f:63:3b:e8:e3:21:e2:ff:3c:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BA:0E:99:AB:95:6B:EE:16:8E:4F:8E:DC:8C:83:59:BC:76:3D:B6
X509v3 Authority Key Identifier:
keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:6d:64:ed:03:5a:3c:0d:49:2d:53:10:71:db:5a:64:df:
06:b6:fc:a6:33:04:cb:52:be:0c:8c:da:f1:c3:a8:aa:09:3c:
b8:bf:0f:c9:61:67:3b:a3:50:8c:85:42:1d:b0:83:4f:1a:51:
5b:26:11:0d:b9:3a:f5:2f:9f:f9:29:9f:65:48:88:4f:32:5d:
d4:2f:3f:8d:25:79:12:26:47:06:3a:03:05:90:c7:4b:86:ae:
9b:b4:2d:0c:58:92:13:c3:31:a7:de:4b:ec:23:93:88:ff:a7:
38:01:7b:0b:a1:ad:8d:ba:b6:5d:ee:fb:4d:ab:f9:9a:30:ce:
bf:d3:83:4e:d6:c6:0d:49:7d:fa:ef:ab:50:2f:92:12:38:d3:
0d:cf:3b:91:b8:83:48:92:f6:a5:1f:eb:f9:65:17:46:d7:ac:
7f:40:0e:35:f5:1a:da:df:5d:f0:ed:4d:61:3d:45:c4:14:cb:
cc:ed:ae:47:2f:d7:c3:c1:59:14:38:06:05:75:e4:4b:10:09:
4b:15:3f:c8:75:ba:4d:77:21:3e:60:aa:4f:3a:ad:0f:8e:48:
82:be:81:d9:c5:3e:6f:d2:dd:ed:b6:5c:69:3f:04:c7:11:b9:
35:38:1c:74:25:c4:0f:7e:71:e8:67:d6:7e:17:2b:0d:2f:7a:
31:eb:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:50 2026 by rpki-client