
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier: xLssMwcjs6+VVuBonHPB7q14NjvQJODN4tSXC4VDDxQ=
Subject key identifier: BA:A3:E4:79:E3:37:31:54:E6:E4:45:4E:22:73:FA:28:29:83:95:55
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial: 7629F49A51F00CD1E93C72B146A05B3F3BE62B12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number: 0550
Signing time: Sat 28 Feb 2026 17:02:36 +0000
Manifest this update: Sat 28 Feb 2026 16:57:36 +0000
Manifest next update: Wed 04 Mar 2026 02:10:36 +0000
Files and hashes: 1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=)
2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=)
3: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: diqjjuvjS6KhZodybrDDS2NIPU8XZATtEZzSOumo/64=)
4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:29:f4:9a:51:f0:0c:d1:e9:3c:72:b1:46:a0:5b:3f:3b:e6:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Validity
Not Before: Feb 28 16:57:36 2026 GMT
Not After : Mar 4 02:10:36 2026 GMT
Subject: CN=BAA3E479E3373154E6E4454E2273FA2829839555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:7d:f6:90:b2:49:20:67:af:68:93:45:34:
3b:0f:a7:d8:e8:1a:65:19:70:1d:22:ce:fe:f0:ef:
c0:7e:fe:ee:8c:25:12:33:cb:75:b6:0b:91:ae:51:
79:fe:6f:bb:c9:30:22:59:4a:28:70:d4:c1:01:85:
a0:ae:53:6d:c0:94:9b:64:01:7e:96:1a:4e:41:92:
4d:c8:db:b6:c2:6f:25:8e:e6:ab:d2:28:2d:d5:bc:
c6:c6:54:bf:70:b7:56:3c:c6:d3:11:29:03:c4:ab:
60:5c:2a:cf:97:56:2d:de:0a:29:c9:1c:c1:95:39:
b7:47:b0:06:e7:60:59:d1:24:ea:d5:ec:27:95:08:
a2:f3:48:d7:cb:b1:7e:7e:36:b5:79:d0:7e:00:45:
10:7e:ed:b0:08:e9:a2:6a:8d:33:a1:33:2a:d1:42:
f0:0a:36:f9:9d:d4:bd:54:1a:ac:6c:5e:04:d7:68:
70:2c:d7:6a:50:e8:e7:8b:f1:b9:ce:08:f2:b6:3d:
d3:4f:6c:53:21:26:6d:1a:fc:e0:44:12:0d:e3:7c:
e7:61:7a:c0:ea:3b:7d:ef:79:05:e1:8e:c8:4d:fc:
83:f9:bc:4c:52:0a:93:67:ae:8d:f4:25:1f:2b:c3:
89:53:d0:84:bc:dd:68:d5:3f:ac:7a:7a:18:78:d3:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:E4:79:E3:37:31:54:E6:E4:45:4E:22:73:FA:28:29:83:95:55
X509v3 Authority Key Identifier:
keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:28:fc:07:f3:34:17:4b:56:d2:92:20:bc:1b:25:fa:d6:
7f:d1:9b:4f:c5:03:54:29:be:35:06:17:d5:3b:36:31:84:08:
4c:b2:5e:6a:8d:87:88:49:34:51:4a:ee:93:66:84:0c:cb:cb:
5d:8b:f8:5f:e0:60:16:08:16:bd:ee:2d:22:90:1e:fe:fc:04:
ea:2f:ac:04:9b:47:3a:0f:9e:e3:75:8d:21:e3:33:8a:88:24:
d8:45:cb:7f:6c:92:b3:61:2b:54:6c:92:95:a5:76:4d:1c:fb:
8f:44:30:6a:54:ae:f3:b4:50:6d:de:ed:b4:94:8f:73:16:5b:
9a:a3:5c:a2:2b:3a:07:6f:0c:33:ac:02:db:46:27:62:c7:03:
f7:b2:c9:c3:e8:14:4a:a9:db:10:12:4f:32:46:f7:4d:ac:ee:
84:8d:5d:d1:5f:ae:38:32:b5:5e:10:c7:a3:14:29:3f:49:e9:
ca:e4:8c:6d:75:13:a7:c4:60:0a:0f:3b:89:23:e8:aa:8b:16:
50:17:c2:2e:fa:6e:14:c5:3d:2d:3d:3c:0a:27:1a:af:ca:13:
db:e4:28:1d:d3:6f:8b:0e:e1:af:b2:76:29:7c:fa:31:3b:e9:
d9:c6:50:85:27:cd:e9:cd:cc:77:53:80:a7:5b:c7:bc:95:51:
18:98:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:36 2026 by rpki-client