
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json)
Hash identifier: iKltHNI02DyiWKUVNWj5fDPDIBLBxgzj/XSuA1JNJ7Y=
Subject key identifier: 01:99:4F:97:7C:C3:B3:92:0A:C8:8E:25:31:36:0E:94:59:FB:28:14
Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Certificate serial: 40F1B09781B55B0D11C5E107336DFDA962C53730
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
Manifest number: 011C
Signing time: Sat 28 Feb 2026 05:50:54 +0000
Manifest this update: Sat 28 Feb 2026 05:45:54 +0000
Manifest next update: Tue 03 Mar 2026 13:34:54 +0000
Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: ANtGacIwt6I95XQKyYOR6SZm7Kqz012pNyXysVxKyn0=)
2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f1:b0:97:81:b5:5b:0d:11:c5:e1:07:33:6d:fd:a9:62:c5:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Validity
Not Before: Feb 28 05:45:54 2026 GMT
Not After : Mar 3 13:34:54 2026 GMT
Subject: CN=01994F977CC3B3920AC88E2531360E9459FB2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:d8:fa:db:a5:7f:ce:49:72:91:5e:5e:09:
e0:f6:ed:a0:ed:3d:62:ba:74:9f:68:ff:51:06:ef:
56:5d:c6:60:d3:87:e9:4f:a2:6b:ac:5f:9a:0c:89:
13:47:24:26:8a:12:5e:46:0d:dd:76:56:27:2f:41:
b1:52:5c:42:ca:96:d2:6c:ae:44:a1:af:2a:61:8e:
35:21:6d:df:63:08:48:89:8c:0c:90:b6:8e:30:de:
9a:9e:41:ee:72:73:f6:57:ab:e8:70:64:5c:cb:39:
b9:4f:ea:02:54:92:ba:74:a8:9e:91:96:40:44:e0:
99:3e:9b:a9:b1:2a:75:cd:51:d9:5a:19:b2:e1:91:
37:86:05:97:f7:c4:97:f8:50:45:8b:9c:a5:e0:f1:
ba:0f:e1:20:1a:a7:90:dd:43:07:a2:5a:4d:64:72:
43:6a:40:b7:1f:b7:e3:72:74:b9:b0:dd:6a:da:cb:
e4:11:15:25:c2:e8:2d:c8:4f:eb:2c:78:f0:11:35:
1c:0a:ff:f2:c0:92:54:9b:20:cb:c1:21:4f:95:d0:
20:b7:22:06:7c:d9:5a:c4:3a:73:0b:3a:84:02:36:
8d:59:fb:b5:06:a7:55:67:e6:ea:c8:02:d2:46:5e:
85:dc:ce:9a:49:76:22:e1:95:04:68:ce:94:11:1a:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:4F:97:7C:C3:B3:92:0A:C8:8E:25:31:36:0E:94:59:FB:28:14
X509v3 Authority Key Identifier:
keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:3f:b6:f3:24:93:97:07:26:3d:1f:bd:54:12:a8:c7:28:d1:
04:3b:bb:ea:36:f3:b2:69:c7:c4:c4:b5:b9:ca:54:1a:a0:7b:
c0:83:56:ca:d6:11:cb:3e:32:66:c0:2a:ad:ed:89:67:26:07:
bb:13:ef:5e:54:81:c5:c4:4e:9c:48:43:d8:3e:1d:4f:6a:72:
a3:a2:9e:2c:dc:43:36:af:69:61:56:89:8d:1d:45:c7:05:79:
8d:3c:23:e1:e2:cd:cf:b9:72:35:f8:f5:f0:d9:50:cd:ab:13:
ad:6d:ad:da:f1:7e:86:1a:ad:06:6c:fa:18:7d:df:1e:f4:6e:
e9:f2:d7:61:f4:b3:62:9e:48:96:cb:ab:0d:3e:24:db:f7:d1:
78:2c:2d:a0:2b:bb:91:aa:2c:af:1f:a3:05:33:be:0b:df:29:
85:a2:fb:fd:47:d5:73:56:c7:18:69:e9:10:07:d0:47:98:7b:
c3:41:cf:fa:e1:53:13:bc:d3:0f:02:d1:09:42:56:72:b1:79:
bc:23:fa:e2:32:44:13:b8:fc:be:13:3f:7b:82:fa:0a:56:0b:
a5:aa:6c:a0:ff:ac:80:fa:0c:25:dd:ca:f2:5a:6b:01:b3:49:
ea:d4:a9:b1:82:09:af:42:fd:48:a8:89:77:16:06:91:cd:6f:
96:0c:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:51 2026 by rpki-client