
$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
File: 00EE953FD699788668C724460F4D8D420238194F.mft (raw, json)
Hash identifier: jlaC2dQNicRZWaxW79TF95vNTKH+2he+5ZPYNguj95s=
Subject key identifier: EE:79:E4:6E:79:69:AA:A2:36:65:18:98:93:7D:A8:C3:62:9F:FE:2E
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial: 1EF695401F7A3200A0AD90532A65AD5F0F95F53E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
Manifest number: 0251
Signing time: Sat 28 Feb 2026 07:40:42 +0000
Manifest this update: Sat 28 Feb 2026 07:35:42 +0000
Manifest next update: Tue 03 Mar 2026 13:00:42 +0000
Files and hashes: 1: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: YWPfLwfnjAzwyRdQ8HMatujMpctNGsrqPWB+mJd3o7c=)
2: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=)
3: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: rkVkBOM1gxwGdr/crh5svI3UEvA+KgJo/zG78neJc4s=)
4: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: bvNupIpWmDhaL8rFDaTnVFDhI5fuAg0k+27/VGkzYJs=)
5: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4=)
6: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: jtfCyTfV0URchGl+wzEZEXq1ZK6wyh3Rdim0gK9JxbY=)
7: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: +0IYJt+ldEx6hRx5/LkWzdAnyMowfs90g5flb4WhwNI=)
8: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU=)
9: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: /6F+dCYfhj8nILz7NzSN2rSqER4M9P3bFQ45j14GuDI=)
10: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: SFv+wuFNNUXZIPzGgJ8H4FmCqsXvXTtUEEjtGiij04Q=)
11: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: oOdkzUMhWiV8RYKVpP+DjzstiVGxbGTPIWzG22cdnjM=)
12: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0=)
13: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=)
14: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: P5LJ10k2BHWyFCmNYnH84ZTaEVA9KJ8Poi0f/ODMh70=)
15: 00EE953FD699788668C724460F4D8D420238194F.crl (hash: 20xk8zDPy2yBjTjwSLn7nqy+kcTHtVhKc+NE2PG41io=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f6:95:40:1f:7a:32:00:a0:ad:90:53:2a:65:ad:5f:0f:95:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
Validity
Not Before: Feb 28 07:35:42 2026 GMT
Not After : Mar 3 13:00:42 2026 GMT
Subject: CN=EE79E46E7969AAA236651898937DA8C3629FFE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:4f:bb:fe:f5:b9:93:ae:f7:19:25:ed:7b:
be:7a:4f:08:9b:cc:c8:da:32:25:5d:51:bc:b1:97:
c6:10:e0:4a:e3:10:15:10:7c:6e:55:e4:74:ca:d9:
99:d0:b4:b1:22:c8:87:54:41:56:f4:24:4e:72:b8:
a8:7b:c0:7c:22:11:5a:91:5d:17:ad:8b:81:a6:c9:
c3:ad:98:0e:e5:b4:22:2e:f8:29:4f:71:7a:96:73:
80:f7:1e:47:a8:a9:77:87:9c:e3:c4:a3:ec:38:6a:
ea:7f:fc:89:70:7a:b3:eb:3b:dc:1a:10:59:1e:53:
c7:86:f9:5b:c4:b7:72:b1:9a:e3:ad:3e:9d:53:66:
b6:ce:56:83:90:98:13:0d:ae:8c:f3:a6:ad:f7:25:
64:71:36:3e:84:c7:c5:13:71:0d:c7:09:78:07:6e:
a6:99:04:50:ed:0a:c4:a6:6e:95:3e:00:ee:31:be:
a3:db:b4:e4:57:99:9b:2d:ac:7e:bb:62:19:ef:e9:
b7:ac:62:17:47:b2:7b:45:a1:b2:24:62:79:58:5c:
59:94:80:49:c6:34:bf:42:32:c9:74:9b:83:b3:33:
65:86:8a:f1:00:ad:f6:14:d5:8b:14:57:b2:91:30:
04:e9:41:93:9e:58:ae:6a:43:9b:60:8f:80:d4:c6:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:E4:6E:79:69:AA:A2:36:65:18:98:93:7D:A8:C3:62:9F:FE:2E
X509v3 Authority Key Identifier:
keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:6e:a0:ad:3c:8b:87:08:96:f3:6a:08:d3:d0:5e:7f:38:
ad:51:0f:83:b7:b5:e6:a7:28:0b:d8:2b:ed:30:bf:47:42:17:
8d:c4:a5:0b:10:be:b9:93:f7:6f:58:be:3b:22:62:00:e7:f0:
56:bb:1d:f7:2f:cc:96:90:14:0b:1c:93:b4:8d:87:c9:86:45:
c6:86:27:52:db:4d:66:9f:b6:6b:27:81:9e:1b:af:3b:8d:54:
3f:36:ef:82:b7:68:14:3f:29:63:12:13:78:9b:88:c6:2a:5d:
18:ab:aa:f3:80:39:cc:7e:27:d9:ef:c4:d8:51:61:a4:fb:f7:
b5:ec:55:dd:20:eb:21:a0:18:aa:ab:26:c9:ba:d4:e1:75:04:
4c:cc:d9:8a:20:b5:49:98:52:90:d5:a3:f3:91:93:91:95:d8:
6d:c8:cc:c0:72:0d:de:83:23:29:c1:c5:79:e2:a1:ec:10:99:
c7:ff:9a:e5:3c:c4:a7:6a:be:40:40:4d:18:10:4f:e2:aa:71:
33:48:72:cd:84:4d:59:92:e8:1d:6c:7a:b6:dc:dd:0d:08:2b:
79:a9:7e:b7:7c:ed:19:fc:b5:95:b9:bd:15:ff:dd:5e:32:e5:
c0:aa:70:27:25:cf:b1:bd:e9:ed:7a:1b:da:6e:61:10:23:de:
bb:3a:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:08 2026 by rpki-client