
$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json)
Hash identifier: a9k3jVpkx0+jiWaOva1rbiqjdSTuAnGmLNNlvqY9aks=
Subject key identifier: FB:32:C0:18:A7:69:7E:AE:1D:62:D2:7F:45:D6:16:87:C2:92:68:C5
Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Certificate serial: 7348351B334567C7A7B5F28981BEE8E4F4C6E654
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
Manifest number: 0172
Signing time: Fri 27 Feb 2026 21:20:46 +0000
Manifest this update: Fri 27 Feb 2026 21:15:46 +0000
Manifest next update: Tue 03 Mar 2026 06:49:46 +0000
Files and hashes: 1: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=)
2: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: GezI9maEnBHHlENvPMlwZb5etrR2DA3Ov0BgEag2FUQ=)
3: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=)
4: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=)
5: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: qqWSkoteDsFPSy94pyeYjAzSUP9Ynr2j2aE8DeLFfsU=)
6: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=)
7: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 06:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:48:35:1b:33:45:67:c7:a7:b5:f2:89:81:be:e8:e4:f4:c6:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Validity
Not Before: Feb 27 21:15:46 2026 GMT
Not After : Mar 3 06:49:46 2026 GMT
Subject: CN=FB32C018A7697EAE1D62D27F45D61687C29268C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:15:6a:3c:93:58:df:a3:47:6f:64:af:3d:
fc:bb:5c:19:46:a3:2d:ba:29:4d:0b:9d:ef:6e:e6:
ef:1a:4d:91:dc:7a:4b:ee:ab:8f:9f:cf:c0:f4:c3:
b8:81:8b:06:37:03:4d:04:3c:04:e7:71:55:73:6c:
c8:57:0a:20:2b:fc:6f:b4:e5:46:b1:3c:d5:02:82:
33:1c:9e:f6:7c:f3:8e:71:0f:b2:7c:7c:71:62:07:
88:d8:c3:b8:7e:0e:b0:06:e0:3d:4b:ff:fc:27:76:
00:06:71:69:c5:2c:90:b7:75:c2:4e:f7:25:7e:25:
ad:c0:80:22:3f:4f:cb:3b:8f:b4:37:fa:ef:84:76:
0f:20:4c:b4:66:18:ad:c9:93:df:1f:32:4b:08:ce:
9f:7d:f9:1f:8d:2a:b7:a9:68:21:75:0f:04:d2:a7:
1c:c8:ea:59:70:72:67:38:27:c6:bf:8d:af:bf:6f:
66:06:fe:1f:ab:96:93:ee:33:18:af:d8:49:54:a9:
f1:2b:a7:c6:3d:e7:3d:e6:9d:e7:d1:f0:43:0e:b4:
ee:b4:ca:db:a2:78:ec:c4:ea:5e:fb:07:7d:5c:4c:
a5:a2:c1:25:ca:29:2a:1b:01:85:41:4f:3b:40:e6:
ee:1d:08:38:c0:7b:76:35:86:35:43:1e:16:4f:76:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:C0:18:A7:69:7E:AE:1D:62:D2:7F:45:D6:16:87:C2:92:68:C5
X509v3 Authority Key Identifier:
keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:d5:38:e7:10:b1:5d:2a:bb:b4:e4:c1:0b:e2:ad:4d:c5:
4b:bb:13:04:02:c7:93:a0:1f:76:a6:32:3d:26:e2:f0:fb:73:
b3:6c:ab:8b:dc:49:70:74:62:64:89:bd:3e:d4:84:cb:6a:00:
0e:b2:3a:b7:e6:10:d6:b9:f9:2b:0c:f0:72:ca:b2:3c:72:83:
de:fb:f7:a6:60:e5:b9:c0:8f:9e:8f:59:d0:c7:f1:f3:f7:aa:
17:4d:1f:4b:cd:7b:b9:ec:d3:1d:42:0c:5e:2c:a0:71:66:06:
2c:d0:6e:55:7c:d0:ed:10:e6:42:21:15:6c:aa:6c:98:fd:bd:
1c:ed:6e:7e:ba:8f:3c:5a:eb:62:ed:e0:1d:65:70:aa:96:10:
fc:95:3e:e1:5a:02:1c:1e:91:a9:d5:f6:6b:fa:d4:88:c5:14:
cc:a3:7d:c8:42:c8:13:ea:bf:c5:52:56:cb:f9:82:c3:59:d6:
80:01:12:c1:00:87:75:2c:73:c7:a7:90:88:f6:e9:d5:aa:2c:
3f:79:e4:fe:2b:c2:0e:7b:b5:1a:33:19:f5:65:08:96:90:94:
9a:98:67:45:47:ca:0a:8d:a7:19:62:ff:67:01:26:58:85:f1:
88:9c:49:e3:09:7d:74:b7:09:e0:56:3f:a0:2c:e5:44:7c:04:
8d:6e:c7:a4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc0g1GzNFZ8entfKJgb7o5PTG5lQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4
MjE2NjE1QjAeFw0yNjAyMjcyMTE1NDZaFw0yNjAzMDMwNjQ5NDZaMDMxMTAvBgNV
BAMTKEZCMzJDMDE4QTc2OTdFQUUxRDYyRDI3RjQ1RDYxNjg3QzI5MjY4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaRVqPJNY36NHb2SvPfy7XBlG
oy26KU0Lne9u5u8aTZHcekvuq4+fz8D0w7iBiwY3A00EPATncVVzbMhXCiAr/G+0
5UaxPNUCgjMcnvZ8845xD7J8fHFiB4jYw7h+DrAG4D1L//wndgAGcWnFLJC3dcJO
9yV+Ja3AgCI/T8s7j7Q3+u+Edg8gTLRmGK3Jk98fMksIzp99+R+NKrepaCF1DwTS
pxzI6llwcmc4J8a/ja+/b2YG/h+rlpPuMxiv2ElUqfErp8Y95z3mnefR8EMOtO60
ytuieOzE6l77B31cTKWiwSXKKSobAYVBTztA5u4dCDjAe3Y1hjVDHhZPdswdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+zLAGKdpfq4dYtJ/RdYWh8KSaMUwHwYDVR0j
BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE
QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2
NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4
MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE
M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABqh1TjnELFdKru05MEL4q1NxUu7EwQCx5Og
H3amMj0m4vD7c7Nsq4vcSXB0YmSJvT7UhMtqAA6yOrfmENa5+SsM8HLKsjxyg977
96Zg5bnAj56PWdDH8fP3qhdNH0vNe7ns0x1CDF4soHFmBizQblV80O0Q5kIhFWyq
bJj9vRztbn66jzxa62Lt4B1lcKqWEPyVPuFaAhwekanV9mv61IjFFMyjfchCyBPq
v8VSVsv5gsNZ1oABEsEAh3Usc8enkIj26dWqLD955P4rwg57tRozGfVlCJaQlJqY
Z0VHygqNpxli/2cBJliF8YicSeMJfXS3CeBWP6As5UR8BI1ux6Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:13 2026 by rpki-client