
$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
File: F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json)
Hash identifier: dkyns378bitFWwCmm0AsGM70O1BypKGU483+hvhvCsY=
Subject key identifier: 1E:9A:EE:F7:5E:CE:CE:BA:55:D7:98:8E:88:5A:3C:94:B8:B6:C0:F4
Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6
Certificate serial: 4403DC71DCCC210CDD296AAC116F07C1F50058F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
Manifest number: 01C8
Signing time: Sat 28 Feb 2026 15:11:43 +0000
Manifest this update: Sat 28 Feb 2026 15:06:43 +0000
Manifest next update: Wed 04 Mar 2026 02:23:43 +0000
Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: KhdAwHPIRwMrgrQqaZcX0vHGpMUk+wFVQWNDCczhLBo=)
2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: VoXBb68M16oS1wPetpw7gGtueb4R39x+kN/ZelBzUSw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:03:dc:71:dc:cc:21:0c:dd:29:6a:ac:11:6f:07:c1:f5:00:58:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6
Validity
Not Before: Feb 28 15:06:43 2026 GMT
Not After : Mar 4 02:23:43 2026 GMT
Subject: CN=1E9AEEF75ECECEBA55D7988E885A3C94B8B6C0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:50:60:13:4f:b2:c5:75:6e:24:6d:55:45:
dd:b2:a6:29:40:36:22:25:ab:97:0f:0d:95:1e:79:
aa:8a:e3:93:0c:b7:e7:fc:d0:1d:13:21:e7:fd:ab:
13:f0:3c:50:9a:32:91:cf:fd:8f:20:56:57:7d:44:
dc:50:94:03:df:ae:02:3d:d5:bb:31:c7:54:fc:e1:
6c:27:06:d9:4d:fd:81:cb:cf:1e:e7:21:59:4a:8c:
eb:4f:1e:6a:40:7e:ab:70:8a:68:56:88:98:08:57:
be:f9:e9:e0:1b:e2:dd:0b:3a:ce:4e:08:b3:26:47:
64:12:23:62:bd:03:14:f1:76:46:4a:e3:8d:50:da:
c6:ab:05:2a:37:f6:cf:96:70:19:29:0e:a6:6c:2d:
41:50:99:3e:72:47:fd:ce:80:95:00:89:2d:b2:76:
fd:39:91:a2:9d:42:16:28:7c:d2:3a:d7:17:f9:5a:
c8:69:cd:40:f0:be:57:4d:26:69:5c:d9:2f:46:f0:
ee:37:16:13:1a:44:64:e8:8a:c4:97:0b:49:2a:67:
43:a4:8d:a2:97:32:9e:8e:72:89:dd:03:57:19:b4:
c2:b5:43:45:f5:c0:6d:8d:4f:b9:d7:78:b0:74:be:
62:b6:7c:d5:a9:04:39:09:cc:a0:5c:c2:ad:60:99:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9A:EE:F7:5E:CE:CE:BA:55:D7:98:8E:88:5A:3C:94:B8:B6:C0:F4
X509v3 Authority Key Identifier:
keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:78:2c:85:c7:1c:42:58:34:24:26:f8:d6:ca:f8:e2:1b:1b:
5c:ba:81:3c:cc:5f:b4:37:62:e9:22:0f:23:f7:45:a3:a8:23:
d0:28:e8:a1:ec:4c:21:9f:4b:70:3a:58:30:2a:e3:45:19:42:
1f:13:08:c5:5b:54:37:a0:43:8b:f0:33:14:f6:28:16:07:de:
dd:e8:96:23:9f:45:42:10:9d:b0:4b:29:d0:32:f4:d4:8f:13:
12:b8:f9:09:af:49:f6:27:45:c7:01:05:54:4e:fd:45:8f:00:
7e:82:73:3b:24:33:ff:f5:7e:8b:fa:74:fe:70:e0:31:be:68:
1f:e7:0c:e3:d9:f9:4c:92:36:a5:97:20:a5:15:df:40:8c:0f:
6c:09:ff:27:66:f2:c5:c8:1a:e4:fa:01:61:f7:36:7d:d8:de:
19:d8:b0:b1:4d:35:ff:29:9a:05:e2:52:2e:51:98:12:eb:23:
dc:d3:51:85:05:65:73:ce:82:e6:b3:bc:82:b1:70:bf:d5:45:
27:9f:42:b6:69:35:65:d8:14:d7:99:fd:fe:3d:b6:d5:03:d6:
0d:1c:36:56:75:83:b0:53:b7:dc:21:99:c1:1e:a1:16:36:7c:
b6:59:22:de:e7:fb:bb:e4:aa:39:a8:ef:ef:82:c2:ea:90:e2:
26:4b:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:04 2026 by rpki-client