
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json)
Hash identifier: Z1uVMXOLNWZCzoKezFdFVeRUXV10SiU0mLgDNzu9XcI=
Subject key identifier: 30:92:05:83:95:D3:95:47:70:1E:03:B4:C5:C9:64:DA:1D:AF:06:6A
Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Certificate serial: 28C8B8E76DBBAF49BBBD2BEFA75DD323162034C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
Manifest number: 031D
Signing time: Thu 16 Apr 2026 08:22:22 +0000
Manifest this update: Thu 16 Apr 2026 08:17:22 +0000
Manifest next update: Sun 19 Apr 2026 09:54:22 +0000
Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=)
2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=)
3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: V0lqgJpIwlHJFEraQTxjKcoXHt6SjJcSU1xvlsLJHy4=)
4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl
rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 09:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c8:b8:e7:6d:bb:af:49:bb:bd:2b:ef:a7:5d:d3:23:16:20:34:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6
Validity
Not Before: Apr 16 08:17:22 2026 GMT
Not After : Apr 19 09:54:22 2026 GMT
Subject: CN=3092058395D39547701E03B4C5C964DA1DAF066A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:b7:3f:ef:5d:8b:46:a9:8a:53:7b:26:e2:
da:d4:4e:fe:85:93:75:bb:cd:dd:d0:ea:bf:25:19:
06:1f:12:ec:68:75:25:f8:11:56:55:d6:7c:2e:b8:
df:28:96:cb:69:62:32:2c:6e:3a:f0:bf:6c:5b:c7:
3d:7e:d4:d4:c7:56:16:10:24:e5:83:90:c6:2c:5f:
b0:36:6a:ff:71:14:86:65:06:ef:a9:4e:4f:9e:bd:
8f:3a:3f:8b:28:75:e8:05:b6:af:3e:33:95:d4:d1:
9e:28:91:c6:57:72:17:62:90:35:bb:e6:d9:b6:6c:
e3:d1:88:c5:9c:f3:b5:0e:b4:53:d9:20:4b:47:67:
9d:a8:2b:e7:5c:57:25:2e:b2:c9:6c:00:60:e8:24:
3c:a9:0a:98:95:5f:c9:79:78:6e:0a:a2:47:43:06:
f3:83:0e:63:65:e1:57:8f:a0:b2:b5:df:c0:ae:a1:
76:0a:aa:d3:9a:fb:33:22:22:07:be:91:a8:6d:3c:
d3:26:1a:69:73:5c:7a:52:46:e9:e3:75:09:8f:d0:
80:23:08:3b:75:e2:99:ba:02:8d:b4:62:64:d9:5d:
09:1c:47:e7:03:09:77:92:6c:7b:40:b0:9d:8a:dc:
75:ba:db:be:67:0f:f6:fe:e1:2b:77:e2:b4:9d:d5:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:05:83:95:D3:95:47:70:1E:03:B4:C5:C9:64:DA:1D:AF:06:6A
X509v3 Authority Key Identifier:
keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:69:aa:ac:96:f3:4c:19:49:a0:98:0f:6f:e0:90:b0:a6:c5:
a9:48:e0:51:23:d1:05:a9:3d:61:6b:f1:c9:72:36:87:07:58:
a5:09:9d:69:cd:ac:ca:48:5a:29:58:c3:9c:73:77:52:2f:ef:
64:c2:e3:09:0a:49:e8:63:22:1b:24:11:63:aa:81:a1:fa:15:
52:58:ad:17:20:c0:8d:7a:a5:33:ea:d2:3f:fe:b2:bc:0f:5d:
0e:80:ca:67:c8:cc:fa:d5:5a:00:75:9c:54:82:2e:e4:0e:e0:
b2:17:56:44:69:6f:59:e1:82:4e:1c:e4:76:a0:82:8f:03:2d:
c5:ad:7c:71:69:8c:0a:1b:77:a1:9a:b4:68:23:ca:5c:b2:79:
d4:6e:0a:fc:c5:b2:3d:57:da:5a:3b:7a:f1:67:fb:6c:e4:bb:
98:f4:ca:69:73:cd:6f:59:bc:b9:2f:f1:f2:53:7b:51:89:0e:
6b:03:ed:13:e5:d0:72:9c:93:eb:f7:73:16:ce:d9:db:a4:57:
3d:a6:bc:cf:d0:60:e1:ce:a5:1d:74:17:eb:b7:b4:01:64:68:
1b:74:60:1e:f8:26:0b:77:d8:73:78:6a:bf:20:e5:0b:08:39:
6c:eb:83:85:f6:b1:bf:b2:cb:db:30:96:32:82:d8:87:fc:f3:
a5:87:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:09:29 2026 by rpki-client