
$ rpki-client -vvf repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft
File: F2B9762E29FC128E7A5553319EB45533550D5C93.mft (raw, json)
Hash identifier: 7rT+BDmeLXXMJUsqBkmoWiKgdhgLeSi076AkHJl7V3Y=
Subject key identifier: E7:4B:CF:A2:0E:61:E1:C9:5D:96:E2:E0:8A:0F:B0:AB:13:04:29:2B
Authority key identifier: F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93
Certificate issuer: /CN=F2B9762E29FC128E7A5553319EB45533550D5C93
Certificate serial: 18F6BB524DF25CD8109F3EED3EFFC45F6D98ED63
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft
Manifest number: 040F
Signing time: Mon 02 Mar 2026 07:41:01 +0000
Manifest this update: Mon 02 Mar 2026 07:36:01 +0000
Manifest next update: Thu 05 Mar 2026 17:30:01 +0000
Files and hashes: 1: F2B9762E29FC128E7A5553319EB45533550D5C93.crl (hash: vTN3jkE2v2hgckN0C8tGs5lom4ERBZ716YZcTc6PORM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl
rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f6:bb:52:4d:f2:5c:d8:10:9f:3e:ed:3e:ff:c4:5f:6d:98:ed:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2B9762E29FC128E7A5553319EB45533550D5C93
Validity
Not Before: Mar 2 07:36:01 2026 GMT
Not After : Mar 5 17:30:01 2026 GMT
Subject: CN=E74BCFA20E61E1C95D96E2E08A0FB0AB1304292B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:8e:ca:77:1d:d2:7a:6b:b7:c2:c9:05:c9:
55:d8:ff:04:e3:92:37:0b:ab:e8:3a:5c:1c:7b:89:
51:62:c8:0b:74:e0:ba:1e:2d:a6:ff:18:27:92:16:
52:b7:88:63:3b:66:89:20:49:e8:10:98:9f:68:3e:
b9:3c:b6:3f:17:ff:96:58:7c:25:43:f7:5b:23:6b:
fd:8d:3b:6a:5d:f7:fd:3a:28:dc:25:70:eb:f9:2d:
6d:5d:98:93:d6:62:73:b2:38:7a:57:75:f7:6c:16:
0a:f9:b3:7c:07:a0:c0:6a:66:eb:55:23:34:21:54:
5b:7b:d2:9b:f1:ce:b3:f5:5d:d4:9a:62:1e:0c:a4:
a1:92:e7:da:0c:88:f0:25:1c:82:4f:2e:04:36:ef:
da:49:fe:ff:13:7c:bc:f0:df:b7:a8:87:c5:2d:36:
48:66:47:31:fe:da:cb:31:bd:7b:b5:ae:1c:59:bc:
74:bc:7c:0f:28:a2:8a:84:a0:82:fa:32:8e:e4:e3:
94:8d:86:36:23:00:92:cf:07:4a:05:9a:60:0a:2b:
19:9f:1f:62:cc:56:f8:0a:63:d8:78:71:29:3e:f7:
a9:95:9a:e8:13:bf:7d:00:35:e0:a8:cb:2d:d3:2e:
b4:aa:ec:10:d1:8e:d9:10:21:df:a1:f5:ab:a3:d0:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:CF:A2:0E:61:E1:C9:5D:96:E2:E0:8A:0F:B0:AB:13:04:29:2B
X509v3 Authority Key Identifier:
keyid:F2:B9:76:2E:29:FC:12:8E:7A:55:53:31:9E:B4:55:33:55:0D:5C:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B9762E29FC128E7A5553319EB45533550D5C93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/F2B9762E29FC128E7A5553319EB45533550D5C93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:7a:b2:ae:65:1a:88:a0:8b:a1:15:e7:85:d0:65:b4:da:
1b:5c:21:29:bd:41:9b:8b:bb:50:d2:35:33:7c:c8:4c:9b:39:
cc:c8:7f:f8:5c:2b:47:5e:3a:f9:96:70:c6:7c:3f:23:c2:d2:
85:0c:5b:9d:e1:d5:d0:c8:a4:0e:fa:51:d0:da:73:86:33:a5:
90:57:6f:0e:5b:31:a1:91:54:f3:a4:73:fe:b0:12:4c:e0:2f:
16:62:71:ba:25:5c:a0:37:b3:c4:f0:c9:f9:73:75:34:13:d6:
e5:1d:85:41:9e:cf:bf:24:85:9c:c7:a2:24:4c:a8:e5:fd:03:
e2:ec:f1:63:2d:ec:4e:38:1c:c6:86:8c:0a:22:2d:f7:4a:8f:
af:d4:52:65:08:1b:ac:07:a5:d9:b0:b5:98:e9:9e:d4:45:14:
b4:f1:65:d0:ef:ab:1b:65:fd:92:f5:f8:b3:7c:52:bf:fb:71:
f8:7f:4e:a8:c2:0b:13:f5:18:65:de:87:65:ef:3d:99:47:65:
0f:f8:a3:33:aa:c1:4a:77:2d:27:c1:e0:42:a3:1b:d6:ba:7f:
c9:d0:65:1f:d3:5d:7f:b7:8c:4a:46:45:79:e2:3c:af:85:f9:
2a:28:d5:80:77:20:ea:fd:6c:48:2c:ba:91:de:04:52:8a:db:
ea:06:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:36 2026 by rpki-client