
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier: VXyim0vKJOMZsuQNX6zcuYS71S3Rxr49Xxt54FmDvJM=
Subject key identifier: 12:D5:7C:02:98:69:0D:B3:5D:3B:9C:8A:78:E3:DD:FF:32:C4:92:04
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial: 21E340A482314DA17A0F929FD4C90CAD9F00B379
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number: 0552
Signing time: Sat 28 Feb 2026 06:31:59 +0000
Manifest this update: Sat 28 Feb 2026 06:26:59 +0000
Manifest next update: Tue 03 Mar 2026 12:27:59 +0000
Files and hashes: 1: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
2: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
3: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
4: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: jVMKcK626gFCcVxHz8dbHizep7699QI4usilAvmJpNk=)
5: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
6: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
7: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
8: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
9: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
10: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e3:40:a4:82:31:4d:a1:7a:0f:92:9f:d4:c9:0c:ad:9f:00:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Validity
Not Before: Feb 28 06:26:59 2026 GMT
Not After : Mar 3 12:27:59 2026 GMT
Subject: CN=12D57C0298690DB35D3B9C8A78E3DDFF32C49204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:c0:d6:01:b5:08:02:2a:a8:b6:5d:01:67:
fc:78:f4:90:48:f7:14:62:fd:75:b7:82:b6:2a:ef:
a7:be:9b:d2:1e:d6:71:a7:c6:75:f3:3a:0b:cd:dd:
45:5a:00:f3:ed:aa:46:4f:53:4e:dc:86:d6:b8:ef:
b7:8f:df:ac:48:b5:a3:1b:89:18:f6:6f:f4:a2:99:
65:92:6c:4e:ec:e6:96:68:65:78:41:e5:23:5d:4c:
56:29:71:b9:1c:ae:68:63:ae:07:db:77:77:a4:d1:
b1:e7:29:12:1e:6c:27:d2:68:82:31:2a:e2:f4:c7:
46:ff:75:e3:66:15:8c:ad:58:a3:86:ff:a6:19:13:
82:ae:1a:2b:0a:5e:f8:02:88:81:8f:83:99:2f:f9:
e8:d0:b0:c0:90:7e:46:88:ed:9e:8c:09:68:d9:f6:
1e:2d:3f:be:ae:43:e0:0e:3c:1e:30:47:9a:36:ee:
5d:67:a4:d7:2f:1c:a7:c2:f0:a1:97:8e:3b:aa:9d:
52:5f:b6:52:0a:ab:27:cd:6c:9b:8d:90:a6:8f:76:
b9:52:3f:88:6e:f7:35:39:b0:6b:b8:fd:bd:84:45:
bd:89:ce:dd:f7:23:01:50:07:12:f4:bb:c9:bc:29:
4d:cd:06:60:82:9e:fe:65:1c:36:b6:8e:77:9b:24:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:7C:02:98:69:0D:B3:5D:3B:9C:8A:78:E3:DD:FF:32:C4:92:04
X509v3 Authority Key Identifier:
keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:ee:bd:da:4d:0c:28:be:12:6b:0c:84:0e:a9:a7:2e:f2:
1d:2f:6b:1e:38:7a:40:2b:97:7e:2a:56:59:df:ad:27:2b:15:
67:1d:c5:70:16:5a:94:05:fb:3c:54:91:bd:c1:5f:0a:be:5c:
52:17:7c:ed:bf:04:d7:d1:52:97:b4:6c:1b:b5:1e:b7:66:b8:
3e:66:17:05:d3:f5:d9:83:62:c0:46:be:2d:6e:26:ac:25:aa:
d5:52:92:49:94:1f:9f:54:21:9a:ad:1b:d1:bc:a4:9c:1a:f9:
03:06:0d:d3:09:83:41:78:05:4b:14:21:09:0f:7b:72:15:c8:
28:63:96:c7:0b:1f:1e:8e:11:f1:c0:ce:ea:9d:52:62:6b:a4:
2b:56:6a:4f:2f:20:f8:b9:74:74:f1:93:3c:74:8d:28:5d:32:
01:f9:83:42:38:d4:d7:90:d5:09:4a:dc:0d:db:65:18:33:9e:
e1:2b:85:94:0e:3d:2b:48:32:11:a4:c8:1a:f5:61:bc:42:69:
f5:a1:6a:c4:79:60:7d:26:d4:14:eb:22:a5:a4:31:07:cc:c8:
ca:46:66:f3:d5:ac:f4:3b:05:9a:38:c1:a3:d9:a8:af:d3:f0:
76:f6:fb:29:3f:d6:56:0e:3e:11:0e:c7:98:09:42:4b:ad:e5:
50:e3:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:29 2026 by rpki-client