
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json)
Hash identifier: 6R2sR1BQzGXG7YM91dqwGut/OJku0J7bFVfTwkk8s8o=
Subject key identifier: 7D:D0:AF:EE:22:F5:97:57:3E:4D:8A:9E:81:78:BF:E4:98:6D:52:6E
Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3
Certificate serial: 255CEB2259FC5681271496EF654FE94235F07C1E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
Manifest number: 027F
Signing time: Fri 27 Feb 2026 21:22:36 +0000
Manifest this update: Fri 27 Feb 2026 21:17:36 +0000
Manifest next update: Tue 03 Mar 2026 08:05:36 +0000
Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: jltEVAHgC1MnUoq/sBszNBGFJYwpZxVznRomJeOajbk=)
2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl
rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 08:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5c:eb:22:59:fc:56:81:27:14:96:ef:65:4f:e9:42:35:f0:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3
Validity
Not Before: Feb 27 21:17:36 2026 GMT
Not After : Mar 3 08:05:36 2026 GMT
Subject: CN=7DD0AFEE22F597573E4D8A9E8178BFE4986D526E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:69:4b:fd:1e:cc:b6:f4:16:02:a6:ac:f1:
4c:61:ba:17:46:d1:8a:a2:8a:5b:09:05:f0:d9:bf:
78:6b:07:95:00:fb:70:c8:c3:3b:f3:2d:e6:21:48:
f7:86:6a:2a:ea:aa:49:88:08:4b:f3:10:91:59:74:
75:45:7e:7b:3a:24:97:07:38:08:79:34:25:9a:4b:
9b:fb:a0:80:7e:1a:23:ad:8e:c7:a7:76:45:6e:49:
16:57:3d:1f:ea:30:f1:22:7a:0f:33:80:9b:18:d9:
b5:c2:0f:67:14:2b:72:7c:8e:01:55:9e:5d:1c:e1:
7a:8a:89:ef:0b:85:c1:69:1e:16:d4:be:75:f4:40:
2f:bc:5c:26:bc:7c:54:06:a5:a3:f9:77:5d:21:9a:
ed:d0:30:7d:a2:ff:02:d4:3c:46:fc:ee:df:de:60:
1b:08:3f:34:cf:38:61:f3:6a:5d:73:fa:4f:9c:bb:
44:3c:aa:6c:75:f1:47:2f:40:1f:39:19:1d:3f:8c:
47:a3:42:4f:8f:36:3f:03:9d:8f:21:29:0b:8d:a5:
a8:d9:dc:d8:f0:cc:cf:39:7b:d0:91:ac:aa:81:ea:
42:84:8c:d3:ba:dc:fc:4b:e8:05:41:75:39:a8:e8:
04:65:b2:e9:f9:7c:9d:18:92:86:66:89:af:ca:b1:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:AF:EE:22:F5:97:57:3E:4D:8A:9E:81:78:BF:E4:98:6D:52:6E
X509v3 Authority Key Identifier:
keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d8:7b:93:3c:10:26:cd:39:b6:e2:cf:1d:1d:23:1e:7c:b2:
5c:2e:55:22:bb:e7:ca:39:e8:24:58:4c:b4:df:9c:e1:0c:40:
37:c6:f1:a6:80:54:a0:21:e0:fa:6b:61:35:f6:32:18:58:ce:
b8:ca:a4:7c:9d:91:c9:13:78:a5:78:15:9c:4f:28:87:8f:65:
bb:50:15:1e:90:a4:cc:a5:23:c9:96:ae:96:a9:35:ff:08:a5:
40:39:7d:6e:dd:a0:be:b8:10:47:97:b6:59:00:6b:5d:f1:54:
f8:77:92:02:06:5a:f1:d3:ad:e1:a3:a2:db:55:5a:ee:0c:f8:
12:b9:94:eb:9b:e5:57:1a:af:05:4d:ac:9d:54:f3:84:f8:72:
a5:2a:e2:7b:0a:93:25:07:8c:1b:fc:3d:16:dc:6b:f7:d9:a8:
d9:5a:56:23:de:b4:00:ba:5b:a3:01:39:95:05:5c:20:43:51:
09:3d:7f:c1:4d:3d:dc:a7:95:8b:00:3e:85:a9:42:81:ee:ea:
92:94:aa:95:73:21:b2:65:00:42:19:66:3f:96:92:46:e0:98:
5f:bb:67:9e:91:fd:2e:d8:5f:b5:f8:9f:82:50:c2:08:d9:f1:
d8:cf:46:9e:71:ee:eb:26:b6:3b:7b:79:60:d2:e0:34:bf:a8:
e8:06:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:29 2026 by rpki-client