
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
File: F999F87E868383FB5DA974A732B21FA770F1AC5C.mft (raw, json)
Hash identifier: DONJAqkfuG/o0lnkY72sbSYsgnzIdtmFSFydDPHnuj4=
Subject key identifier: 38:A8:69:72:B9:8F:BE:86:B7:70:7E:32:F0:CD:E1:29:6D:0A:2E:F4
Authority key identifier: F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
Certificate issuer: /CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Certificate serial: 65469590DC2A5F1E17D469327F3C0F1EE77E921C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
Manifest number: 022B
Signing time: Sat 28 Feb 2026 10:01:14 +0000
Manifest this update: Sat 28 Feb 2026 09:56:14 +0000
Manifest next update: Tue 03 Mar 2026 15:38:14 +0000
Files and hashes: 1: 3130332e3131372e3138332e302f32342d3234203d3e20313338383833.roa (hash: ixRJi1MWGC1okPSFiKG/jBrV/vpTa13AlLkEe20yP98=)
2: F999F87E868383FB5DA974A732B21FA770F1AC5C.crl (hash: YE1zUZkyMurPVzfN0UDOklrOyrHVV97jRhIkCtC/bag=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:46:95:90:dc:2a:5f:1e:17:d4:69:32:7f:3c:0f:1e:e7:7e:92:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F999F87E868383FB5DA974A732B21FA770F1AC5C
Validity
Not Before: Feb 28 09:56:14 2026 GMT
Not After : Mar 3 15:38:14 2026 GMT
Subject: CN=38A86972B98FBE86B7707E32F0CDE1296D0A2EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:e5:96:c9:57:10:f9:91:f4:72:1e:64:84:
85:6d:25:7a:7a:5e:14:c1:0b:4c:4d:6b:a0:58:ac:
80:e9:75:e9:77:42:d7:fe:d9:56:79:bc:96:49:e3:
cf:f2:c1:8c:a0:d5:0b:20:79:56:38:d7:32:59:95:
85:93:57:59:d0:b4:4d:66:98:d7:f0:d9:2a:44:d3:
84:56:d4:aa:dc:64:e0:16:ec:45:d7:77:15:eb:61:
fc:9b:6f:9e:a1:49:ec:ff:f9:4f:15:ef:01:1e:0f:
c9:c1:57:00:77:73:19:82:79:e1:ab:8a:f5:8c:ae:
bb:98:a7:ed:e5:ca:1c:35:f3:e2:9f:bc:a9:ca:20:
42:4d:15:0e:1f:a2:03:ab:78:d1:b3:ee:20:83:85:
79:4a:eb:cc:97:37:d5:3f:29:01:f5:2c:e0:d7:6c:
00:ce:e1:d7:2f:ae:03:4c:4b:40:34:66:9a:0b:5a:
4a:3f:0f:be:47:01:a4:99:42:39:be:15:31:dc:3d:
7f:56:a4:12:1b:2f:a1:80:82:35:ec:ae:08:1e:3b:
a0:e8:42:d3:2c:3a:c3:da:83:05:67:a9:bb:dc:e7:
25:8f:0a:09:f3:50:be:1c:7f:4f:d1:24:d1:e7:a3:
78:ab:95:70:60:a6:a3:62:00:fa:af:a6:4f:32:0b:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:69:72:B9:8F:BE:86:B7:70:7E:32:F0:CD:E1:29:6D:0A:2E:F4
X509v3 Authority Key Identifier:
keyid:F9:99:F8:7E:86:83:83:FB:5D:A9:74:A7:32:B2:1F:A7:70:F1:AC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F999F87E868383FB5DA974A732B21FA770F1AC5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8db428-195c-490a-abc2-3cb6f0d560a3/0/F999F87E868383FB5DA974A732B21FA770F1AC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:12:a1:a5:92:8a:09:9e:80:14:e5:bf:8c:18:49:54:42:5b:
9a:32:a4:b6:78:cb:6d:de:95:16:3b:0f:55:64:fc:a1:19:fb:
2d:58:e8:9e:73:a2:59:fa:45:6c:b7:f6:d8:75:9e:a1:1d:df:
b1:49:70:5f:9d:2f:f4:83:7d:93:fb:32:92:19:66:25:be:1a:
29:2b:5b:9a:aa:b5:1f:7b:37:e1:c9:9b:a5:25:0a:2a:a7:7b:
93:27:12:1e:a5:2f:65:4a:b2:82:b1:0e:0e:a5:08:29:3f:96:
67:b3:75:04:46:45:e1:7f:42:b2:2c:97:1f:8c:84:3f:c0:29:
2d:8f:39:12:2f:8a:f5:a3:85:71:c0:80:8c:dd:f8:88:5c:22:
9d:c2:ad:01:06:5b:e4:9a:1e:7e:0a:e5:06:0f:39:e5:da:7d:
e0:b5:aa:e5:9b:8e:49:a8:46:63:1f:7b:1b:5c:59:06:a3:38:
99:f0:a0:8b:5b:88:fa:44:68:71:4c:5c:83:95:14:b3:5b:a3:
72:b7:34:08:f5:db:6a:36:38:32:47:98:e5:52:37:7f:81:b9:
13:0e:ff:8d:02:49:ff:27:fd:17:59:1a:3d:a5:c5:1b:da:56:
ee:b1:07:81:66:68:9c:d2:92:52:a8:75:e1:0c:0b:23:ee:32:
88:72:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:42 2026 by rpki-client