
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json)
Hash identifier: 0mAO12yvhhkb+VN3zOH79RaDwen4lb0g0/eyn/i0/8U=
Subject key identifier: CB:E8:D7:21:9D:CC:BC:8E:15:5E:E5:B2:35:07:35:C4:F6:83:8B:3C
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial: 2983E44978202FF347753F096AB0462071D6537E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
Manifest number: 03BF
Signing time: Mon 02 Mar 2026 08:30:01 +0000
Manifest this update: Mon 02 Mar 2026 08:25:01 +0000
Manifest next update: Thu 05 Mar 2026 11:58:01 +0000
Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=)
2: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: jHWxpTJTqoCoAvbxRxBTvMMf9XEcYg5hLD1ycxoiEVk=)
3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=)
4: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:e4:49:78:20:2f:f3:47:75:3f:09:6a:b0:46:20:71:d6:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Validity
Not Before: Mar 2 08:25:01 2026 GMT
Not After : Mar 5 11:58:01 2026 GMT
Subject: CN=CBE8D7219DCCBC8E155EE5B2350735C4F6838B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:ab:c0:b0:a4:b0:3e:cc:6a:cd:c0:97:03:
91:7b:69:5a:ca:a9:ca:07:d3:c7:df:ed:a7:a1:0a:
3e:80:eb:80:7a:d5:06:66:9c:bd:5d:14:82:61:79:
f1:9a:87:dc:5f:1b:cc:5a:da:23:60:86:59:e9:91:
ae:77:44:08:e5:2a:73:0e:18:ec:a0:a2:f5:1c:1d:
cb:8b:8b:7f:eb:65:ec:27:62:90:3d:85:4d:ab:7b:
29:8c:fa:58:87:51:65:4d:2a:4a:64:4e:16:26:c2:
1f:0d:54:87:b8:87:09:62:6a:b2:ff:f9:86:52:28:
cb:df:84:23:76:dd:b8:f5:4e:fa:e8:e8:97:0c:f7:
d5:28:e0:ef:a6:bd:ce:c1:ca:18:64:57:42:00:f3:
32:47:99:4d:6a:e7:2f:73:47:7a:bd:06:b3:26:04:
48:06:40:67:26:ae:3f:b8:bd:d8:7b:e1:65:89:34:
2d:a5:c7:3e:7b:b9:de:82:e1:c4:29:76:a3:6c:26:
68:be:3c:3d:46:4a:ec:15:f1:38:c8:bc:77:b1:3a:
43:e4:10:de:91:25:b7:89:4d:73:12:2a:ff:a5:33:
71:06:ed:7b:a4:0d:ab:3f:98:83:d9:6e:6c:f6:92:
41:6f:63:17:49:ea:b3:86:af:0d:ca:6d:ba:b2:19:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:D7:21:9D:CC:BC:8E:15:5E:E5:B2:35:07:35:C4:F6:83:8B:3C
X509v3 Authority Key Identifier:
keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2a:db:3b:23:30:b7:49:44:80:67:3b:92:a5:1f:6c:a3:fa:
c3:43:b1:81:63:6c:b4:45:1d:5e:a5:f0:32:ad:f7:41:de:9c:
39:07:f5:91:c2:4d:32:a7:b9:09:1f:a2:95:46:bc:c6:11:66:
cf:d9:52:48:44:97:f8:d8:80:0b:f3:59:ce:ab:a6:e5:3e:b6:
58:8b:9c:50:9d:c1:32:b7:98:95:b2:48:c9:fa:58:61:bb:1e:
47:35:34:4a:c6:56:53:04:fd:db:78:ee:a9:1e:f6:9f:38:59:
36:c0:8f:50:e1:46:b8:e6:3e:5f:59:41:46:3c:8d:74:be:83:
3b:d8:3a:7b:30:74:6c:3d:e0:85:f9:04:ce:5e:b8:b7:c8:4c:
96:eb:6c:8c:10:99:71:7f:3b:b0:fa:a5:c5:9d:5a:4d:22:1e:
fb:1d:5f:9a:ec:e4:c1:ac:81:01:9e:3e:2e:2b:bb:66:fe:42:
43:47:38:a0:1c:12:66:48:b2:fd:18:40:62:22:59:95:68:be:
3a:cf:e5:7e:ea:35:0d:05:fa:28:00:f4:37:ff:35:68:2f:83:
65:b1:fa:dd:df:97:f7:32:51:7d:3c:4a:db:11:a1:35:9c:a2:
76:04:3c:ae:78:09:ac:87:bd:5a:4a:5e:08:db:a8:5c:c4:94:
28:4b:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:52 2026 by rpki-client