
$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
File: 94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json)
Hash identifier: B/nIadVFZ0mloaULXs10mnj8byMEhMQ6QrKjmsv0+V0=
Subject key identifier: 92:DB:EA:10:8F:A3:F2:59:25:49:A1:3F:EE:75:5E:D3:D5:83:71:75
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial: 79E1C5B47ECC57D2ED953F728C842389D27EA8FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
Manifest number: 011A
Signing time: Mon 03 Nov 2025 12:42:23 +0000
Manifest this update: Mon 03 Nov 2025 12:37:23 +0000
Manifest next update: Thu 06 Nov 2025 23:15:23 +0000
Files and hashes: 1: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: NUksVUiiMD/cnEedDlB64CKXGadq+hlkLijfVUlayZs=)
2: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=)
3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=)
4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 23:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e1:c5:b4:7e:cc:57:d2:ed:95:3f:72:8c:84:23:89:d2:7e:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Validity
Not Before: Nov 3 12:37:23 2025 GMT
Not After : Nov 6 23:15:23 2025 GMT
Subject: CN=92DBEA108FA3F2592549A13FEE755ED3D5837175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:e4:d0:c4:c0:39:06:cc:e3:4f:d8:99:1b:
47:40:37:41:7b:2c:a1:2d:e3:02:d0:33:00:c7:7c:
55:8e:73:85:98:c9:ea:61:16:f1:9c:1d:5a:83:f8:
7c:18:be:e7:02:f3:3c:3d:9f:3a:66:21:33:77:94:
5a:3d:8b:bb:f6:b0:1c:13:31:06:26:0d:58:d7:4f:
7e:46:cd:e0:43:23:17:a3:6c:7f:ee:eb:ec:a6:b0:
a2:89:f9:78:70:69:86:23:c6:76:68:3b:25:90:e4:
3d:31:1c:4f:71:eb:64:54:d4:c8:4a:11:f7:09:d8:
7d:da:37:42:3b:2f:55:4e:bc:fd:9c:33:3d:42:85:
c1:51:53:f1:b9:4f:ef:97:ac:a6:03:10:91:c7:94:
70:26:f8:c8:d6:b5:22:35:59:58:e8:28:fc:3e:1e:
0e:f6:12:f4:42:cf:16:79:aa:59:7c:1d:36:3b:88:
bf:09:7a:8e:bd:22:30:8d:81:8c:18:9e:b3:0d:f5:
c2:89:23:ad:0e:a4:48:7a:46:c3:ee:64:80:c3:9f:
18:70:a9:5c:51:00:6d:76:c5:3e:61:08:7f:9b:28:
cd:b8:cc:be:0c:d4:12:51:b7:e8:11:90:f3:c0:dc:
7b:09:db:27:46:17:17:92:b9:96:a3:40:23:4f:8d:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:EA:10:8F:A3:F2:59:25:49:A1:3F:EE:75:5E:D3:D5:83:71:75
X509v3 Authority Key Identifier:
keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9a:5b:90:77:35:9d:5e:15:74:96:c0:d7:99:4f:b7:ea:16:
a6:53:76:e9:d5:c4:b0:fc:5f:64:e2:ac:62:01:68:fa:30:d3:
03:c1:14:31:6d:24:97:0d:4b:6d:e9:e1:fb:90:f8:ac:8f:8f:
4e:9b:fc:a4:cf:d9:6c:fe:28:4e:da:0e:df:ef:06:db:ab:14:
52:e3:d9:01:e1:81:4d:a7:d6:dd:e1:b1:a5:6c:4e:e4:05:c7:
dc:51:e1:60:df:32:ca:d7:46:37:e2:95:7a:eb:00:d4:e5:0d:
dc:c9:6f:d8:e7:7c:bb:cf:77:89:64:cc:c6:ca:7a:fb:78:d1:
98:6d:26:55:76:6b:d2:95:8d:a3:e7:55:83:00:dc:45:a2:8b:
38:2e:e2:74:56:ae:ae:96:b2:b2:26:e9:8e:01:7d:32:7b:85:
fb:40:9d:30:d9:02:12:49:f5:c3:93:65:11:da:82:d8:b1:94:
33:59:76:2a:b1:08:3e:72:ae:67:c3:bc:3e:3a:71:fc:a8:69:
a9:4e:3c:fa:63:01:ea:e4:83:84:4a:3f:79:d3:d2:4d:a7:35:
ee:dc:f4:0d:b9:f8:f0:c0:1d:04:ff:c0:f3:f2:a3:06:f6:b7:
a0:02:77:bb:51:46:ad:c1:df:39:2e:7a:61:bf:c2:1b:39:cb:
13:2e:51:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeeHFtH7MV9LtlT9yjIQjidJ+qPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3
ODA5QTZGMzAeFw0yNTExMDMxMjM3MjNaFw0yNTExMDYyMzE1MjNaMDMxMTAvBgNV
BAMTKDkyREJFQTEwOEZBM0YyNTkyNTQ5QTEzRkVFNzU1RUQzRDU4MzcxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/feTQxMA5BszjT9iZG0dAN0F7
LKEt4wLQMwDHfFWOc4WYyephFvGcHVqD+HwYvucC8zw9nzpmITN3lFo9i7v2sBwT
MQYmDVjXT35GzeBDIxejbH/u6+ymsKKJ+XhwaYYjxnZoOyWQ5D0xHE9x62RU1MhK
EfcJ2H3aN0I7L1VOvP2cMz1ChcFRU/G5T++XrKYDEJHHlHAm+MjWtSI1WVjoKPw+
Hg72EvRCzxZ5qll8HTY7iL8Jeo69IjCNgYwYnrMN9cKJI60OpEh6RsPuZIDDnxhw
qVxRAG12xT5hCH+bKM24zL4M1BJRt+gRkPPA3HsJ2ydGFxeSuZajQCNPjZg1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUktvqEI+j8lklSaE/7nVe09WDcXUwHwYDVR0j
BBgwFoAUlPbCYCe59yqocB0SlmJ/pXgJpvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MGQwMDcxOC01MjEwLTQ0MzgtYjY0ZC02MmVjMWYzZWJjZDAvMC85NEY2QzI2MDI3
QjlGNzJBQTg3MDFEMTI5NjYyN0ZBNTc4MDlBNkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3ODA5
QTZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2
NGQtNjJlYzFmM2ViY2QwLzAvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdG
QTU3ODA5QTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKOaW5B3NZ1eFXSWwNeZT7fqFqZTdunVxLD8
X2TirGIBaPow0wPBFDFtJJcNS23p4fuQ+KyPj06b/KTP2Wz+KE7aDt/vBturFFLj
2QHhgU2n1t3hsaVsTuQFx9xR4WDfMsrXRjfilXrrANTlDdzJb9jnfLvPd4lkzMbK
evt40ZhtJlV2a9KVjaPnVYMA3EWiizgu4nRWrq6WsrIm6Y4BfTJ7hftAnTDZAhJJ
9cOTZRHagtixlDNZdiqxCD5yrmfDvD46cfyoaalOPPpjAerkg4RKP3nT0k2nNe7c
9A25+PDAHQT/wPPyowb2t6ACd7tRRq3B3zkuemG/whs5yxMuUcI=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:20:44 2025 by rpki-client