
$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json)
Hash identifier: mLtGmwRYVoSdat21yEBEEeLLGDhg+IkoTymcRdoFiSY=
Subject key identifier: 01:F4:A7:44:AC:14:F7:99:8C:F7:99:F6:6C:22:6E:72:75:50:7D:DB
Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Certificate serial: 3675E682FB1A8E36F411779EAEA917A865738B72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
Manifest number: 0550
Signing time: Sat 28 Feb 2026 14:21:51 +0000
Manifest this update: Sat 28 Feb 2026 14:16:51 +0000
Manifest next update: Tue 03 Mar 2026 14:55:51 +0000
Files and hashes: 1: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: SO59tFLPMy833ui6Dp8iRzBt0cvpH4DT/8VJbLRP0Z0=)
2: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=)
3: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=)
4: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=)
5: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:75:e6:82:fb:1a:8e:36:f4:11:77:9e:ae:a9:17:a8:65:73:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Validity
Not Before: Feb 28 14:16:51 2026 GMT
Not After : Mar 3 14:55:51 2026 GMT
Subject: CN=01F4A744AC14F7998CF799F66C226E7275507DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:90:6e:3a:29:6f:29:4d:9e:a0:32:33:0a:
8b:f9:58:21:62:cd:3e:d5:1d:78:1e:b4:1c:15:7b:
06:8d:0c:0a:5f:8c:a7:99:26:f2:7f:70:ac:af:e2:
31:a6:01:c8:3a:fc:97:3c:ce:6b:f7:32:38:d3:52:
4a:28:90:57:9b:b5:f2:90:ef:20:dc:8a:45:69:f8:
fd:04:2f:01:08:a7:3c:02:01:fc:b2:a8:9d:5b:f0:
1f:8b:fa:c0:91:c9:c7:a8:5a:a5:f3:b0:86:35:4c:
3b:1d:3c:1f:4d:6a:64:97:f3:af:62:a1:df:8f:ed:
dc:d6:9a:9c:86:4e:f6:c5:13:d5:ce:67:b2:c4:67:
b0:e4:ae:2f:65:b5:46:27:24:b3:78:73:d3:33:1a:
a8:63:1f:06:c7:c7:d2:0f:9e:47:99:96:99:ea:7b:
4a:a6:a7:19:0e:3e:38:04:b3:95:8f:12:7e:4e:e9:
27:9e:9d:1c:3c:90:e9:2b:23:b2:d5:f8:83:70:ab:
db:1c:02:7d:83:08:a8:ba:9c:87:26:e2:f4:e2:83:
25:e7:e8:16:20:ed:63:21:cc:6a:0b:3d:b3:ef:8a:
93:fa:41:ca:21:fa:d6:15:3e:dc:e5:3e:b2:51:1a:
c4:90:16:6e:e9:19:0a:5d:8f:fb:30:64:50:17:3c:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:A7:44:AC:14:F7:99:8C:F7:99:F6:6C:22:6E:72:75:50:7D:DB
X509v3 Authority Key Identifier:
keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c1:a0:92:97:d3:e6:0e:a8:1d:df:7b:a4:28:9d:c3:75:6a:
ad:93:b6:cf:23:3a:2b:c1:f4:21:89:dc:e6:13:45:e2:11:c3:
21:1e:89:3b:1c:b5:41:d6:2c:6b:04:81:28:93:91:d0:c8:0b:
ad:87:06:8b:40:dd:55:53:cb:2f:44:84:ae:3b:6b:ca:b3:02:
4b:61:24:3b:79:6b:13:6c:be:cf:d1:51:15:b5:f1:83:c0:e6:
98:71:37:31:a5:39:6d:18:c7:f6:3e:d7:41:97:c8:1d:e9:61:
39:11:af:99:35:e1:c7:df:df:21:80:8d:2d:0d:98:1e:fd:02:
9e:70:f9:ea:8b:a5:d7:00:8e:43:9a:64:c7:0b:d9:54:76:08:
ff:c0:cd:9f:b0:65:de:22:6f:09:38:8e:85:f8:81:90:1d:7e:
36:d9:6d:f0:d0:79:68:b1:f1:69:a0:c0:8e:c3:a4:9e:a4:19:
37:1d:38:92:3e:ec:e3:5c:20:31:29:a0:3d:62:c0:45:f9:c4:
05:d9:42:51:28:ce:c2:d3:9d:01:ad:76:69:1c:71:2b:c4:39:
94:54:35:19:3e:1a:43:80:e3:ae:0c:08:a7:75:0d:75:06:56:
12:a4:05:04:86:7f:d0:ea:51:e7:87:b6:28:aa:f3:51:88:b2:
e3:ed:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:43 2026 by rpki-client