
$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json)
Hash identifier: p1ZblUw0jFpl2eByPiDAO+mFuDDEMZ6Eg0DJTxeRnFY=
Subject key identifier: D1:B8:06:1E:09:5B:3A:BC:89:E1:06:B5:31:C9:08:D3:99:B9:CE:A5
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial: 4944EA25C0FE3EB86E0C433548A648D0599710D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
Manifest number: 0556
Signing time: Fri 27 Feb 2026 19:02:13 +0000
Manifest this update: Fri 27 Feb 2026 18:57:13 +0000
Manifest next update: Tue 03 Mar 2026 01:16:13 +0000
Files and hashes: 1: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: WLGAN+Rjb3mtFy9j2t0FJRq3/qenK3p06CzMDkyY75Y=)
2: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=)
3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=)
4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: dRB55JYcxTP49hg2S8nIf2yM2uVgyTw1DYrL5yjNS5w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 01:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:44:ea:25:c0:fe:3e:b8:6e:0c:43:35:48:a6:48:d0:59:97:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Validity
Not Before: Feb 27 18:57:13 2026 GMT
Not After : Mar 3 01:16:13 2026 GMT
Subject: CN=D1B8061E095B3ABC89E106B531C908D399B9CEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:9f:27:df:ca:03:17:f9:1f:b0:cd:43:c6:
24:58:53:e5:8d:bb:c5:91:7f:70:9f:8c:99:9b:89:
a6:50:d0:07:3c:c4:e1:3f:d3:d2:6d:94:1a:fe:32:
8e:df:b8:6f:a0:3d:0b:65:be:f9:2a:2d:ef:4f:99:
4c:1d:22:b3:50:4d:a1:cc:e8:77:1f:e6:a5:f2:82:
1d:c3:7e:f1:47:8c:14:91:91:b9:5d:5e:e2:9a:ef:
ec:b7:aa:d0:e1:46:ca:aa:2b:2b:9e:0f:e7:8e:d7:
61:96:41:fa:26:75:73:6e:93:71:a9:9b:56:3f:3e:
93:03:e4:cc:a8:5d:23:97:9f:8f:c4:be:71:2b:d0:
2e:8e:19:13:e6:17:87:8e:6e:53:f7:46:e3:b2:51:
90:e6:e7:e0:51:32:6f:34:95:81:42:b6:57:ad:ce:
9d:f0:0e:b2:1a:42:81:a1:84:c3:c3:33:e7:67:39:
b6:9c:4a:a2:07:1f:6c:ae:46:8a:27:28:3c:62:da:
4b:03:a0:6d:7b:a9:65:74:52:d0:d5:03:11:47:c7:
65:46:a2:bd:b2:fa:0e:4a:59:82:32:c6:f9:bc:18:
d2:86:2a:1d:8e:36:f2:c2:e1:92:84:98:c0:5a:e6:
10:97:55:e6:30:ae:50:49:69:ae:7c:7b:72:61:bc:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:06:1E:09:5B:3A:BC:89:E1:06:B5:31:C9:08:D3:99:B9:CE:A5
X509v3 Authority Key Identifier:
keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:44:b2:57:5c:7c:53:f5:cc:36:ba:09:1b:df:5e:4d:1a:bd:
c0:9f:0a:2b:81:26:5c:1a:cf:35:ef:81:29:b7:b3:00:2a:c7:
0a:d1:29:28:ea:0f:fb:87:2c:dc:ef:5e:28:e8:92:fb:10:6e:
51:0e:56:30:49:be:c1:54:7a:3a:8f:e9:cb:6b:ba:df:6d:12:
a5:57:af:24:3a:d2:59:ff:54:1d:b5:e2:69:de:2a:c3:dc:bb:
61:4c:28:3d:bd:0d:d2:a4:df:52:e9:b6:cc:68:eb:4c:69:e2:
56:bc:b4:c1:76:17:96:f5:9a:af:7d:ce:8e:7d:5d:db:3a:fd:
0d:96:7d:53:63:02:eb:b8:32:72:c7:93:ed:de:74:19:df:5f:
1e:66:42:1e:19:2e:49:f3:ed:51:0d:3d:3c:49:ca:7d:24:31:
08:97:e9:9e:df:eb:52:54:bf:66:9f:50:41:93:cb:a3:08:71:
9e:f6:28:be:ff:8b:8c:51:0a:db:d0:85:87:92:79:9d:2e:30:
89:ea:f7:b9:db:98:1a:81:87:41:76:a4:fc:c0:1a:96:c3:17:
70:57:aa:46:80:7e:6d:cb:b1:6a:56:0f:4b:10:94:1b:38:35:
a4:ae:a8:42:cf:cc:24:70:b8:3c:4e:68:90:59:9c:5b:02:82:
41:7c:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:17 2026 by rpki-client