
$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json)
Hash identifier: MBoHt+iwBYXTHxPCTFJH1ZXRHWl/1uBPNmdMRzjXohA=
Subject key identifier: 5B:C4:61:1B:B4:AB:1D:BA:00:A0:30:BD:15:CA:C3:09:6E:EB:E8:3A
Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Certificate serial: 3CEE927383ED9F315B60EBA81F31C48AFD01C3B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
Manifest number: 023A
Signing time: Sat 28 Feb 2026 15:32:30 +0000
Manifest this update: Sat 28 Feb 2026 15:27:30 +0000
Manifest next update: Wed 04 Mar 2026 00:05:30 +0000
Files and hashes: 1: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: e9iCK2ckbdSDY38ju4n2bHBus05IevTfIMEmpaFUj90=)
2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl
rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ee:92:73:83:ed:9f:31:5b:60:eb:a8:1f:31:c4:8a:fd:01:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Validity
Not Before: Feb 28 15:27:30 2026 GMT
Not After : Mar 4 00:05:30 2026 GMT
Subject: CN=5BC4611BB4AB1DBA00A030BD15CAC3096EEBE83A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:26:84:c4:90:6a:eb:56:73:ba:57:a6:a2:
2c:21:28:3d:30:55:2f:6c:95:dd:b5:02:b7:9e:52:
1d:09:32:1a:19:46:58:b4:6a:4b:44:40:7d:32:48:
7d:c7:27:4a:5c:48:74:b3:29:c0:bb:5f:c0:43:bf:
00:8d:6f:17:6c:42:29:b9:88:f6:3c:6e:15:4e:c7:
c4:80:0e:e1:95:3d:7d:1f:ed:76:bf:bb:f0:38:f7:
b3:68:21:1f:9a:36:76:3f:c0:d1:87:69:7c:6c:e8:
68:01:dd:38:0b:ef:6d:1a:e4:0d:e9:e3:2e:19:5d:
1e:d1:5d:ce:a5:72:2d:45:73:c7:a4:55:48:30:69:
4d:a4:0b:4e:a8:76:97:2a:b2:64:70:0f:28:39:3f:
0f:68:f2:75:e9:9d:f3:10:31:cf:64:73:25:35:3f:
ca:47:0a:c9:24:da:f2:45:e6:79:9c:d4:19:6e:1d:
6f:4f:e5:20:0d:ec:19:6b:a0:ff:cf:33:7b:74:ad:
89:24:52:e8:b7:12:37:d9:0a:e8:83:cd:76:c2:89:
67:3c:47:88:c5:de:6f:8a:b0:fa:81:e5:f6:65:30:
69:cf:c4:07:0f:33:2d:5b:d9:58:5b:df:3e:af:db:
15:9a:7c:61:eb:36:ed:84:9e:9a:30:e9:68:2d:eb:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:61:1B:B4:AB:1D:BA:00:A0:30:BD:15:CA:C3:09:6E:EB:E8:3A
X509v3 Authority Key Identifier:
keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:1c:75:d1:d7:57:00:cd:8c:fb:c2:42:73:dd:5f:f0:ed:
2d:21:2f:2e:d9:ce:95:9b:ce:14:1e:c5:19:ae:3c:cb:08:f4:
76:23:3c:ea:42:73:db:ee:63:aa:84:64:81:f9:56:c2:44:40:
b9:40:de:91:02:8f:98:2c:6b:8c:95:52:e4:8c:78:02:32:74:
82:3b:2c:90:49:de:13:da:5d:69:18:e2:e6:ee:2d:b9:2f:73:
ba:d9:5f:c2:1d:8f:76:f3:61:5f:5c:bc:7d:3c:0f:4d:f5:d1:
e3:c2:e3:d2:0e:a0:16:68:78:5b:46:2f:64:ba:4d:21:d2:d4:
01:dd:51:86:02:de:29:97:87:78:03:12:54:e6:38:94:72:a0:
c9:ec:b9:04:f1:6a:d8:f2:9c:c0:56:68:f8:f9:85:5a:0e:f5:
49:29:f3:df:a6:fa:37:53:cf:b5:73:9a:a8:b9:92:56:61:8b:
2c:cd:e9:0c:d0:8f:e9:62:d9:48:a5:62:f5:93:38:1f:98:dd:
70:3b:96:e5:31:62:7f:cc:57:8a:b6:c9:1b:c0:77:a5:2f:d5:
8e:00:e5:72:94:67:f4:bd:17:66:a4:3b:4a:ac:7b:b8:c1:97:
3d:d6:89:aa:ad:45:70:a3:b8:43:35:09:f5:17:fe:4f:7f:3d:
30:c8:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:48 2026 by rpki-client