
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json)
Hash identifier: 420ivrrYrmq4Ldhst/zGYpCpxk1Z6pI6HoySOwbabM4=
Subject key identifier: 63:0A:E4:AD:00:A5:08:31:89:C2:8E:9D:AD:78:47:DD:F1:6C:FC:EA
Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Certificate serial: 78754AAA8198E02C95411634D7CF645400B3B6EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
Manifest number: 01DB
Signing time: Fri 27 Feb 2026 17:52:11 +0000
Manifest this update: Fri 27 Feb 2026 17:47:11 +0000
Manifest next update: Tue 03 Mar 2026 00:57:11 +0000
Files and hashes: 1: 3130332e3130392e3230342e302f32332d3233203d3e20313530393334.roa (hash: JEvIOsVwGUTyy+ELa7pteKDjLoptkdSCpebP+nyLjgQ=)
2: 3130332e3130392e3230342e302f32342d3234203d3e20313530393334.roa (hash: wJLVv3dGJ3iMYrWAOPrHgUOs/cbBFI5PK39xmjvRLuY=)
3: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: lVKIlUCinmOiDYJ5VTRAYniu6DGCdqb7FCSh9uQMjwE=)
4: 3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (hash: NQHGEUDRiXIKhlqun6HUzgzAgG6hDFCPy0ofeC6C2yE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:75:4a:aa:81:98:e0:2c:95:41:16:34:d7:cf:64:54:00:b3:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Validity
Not Before: Feb 27 17:47:11 2026 GMT
Not After : Mar 3 00:57:11 2026 GMT
Subject: CN=630AE4AD00A5083189C28E9DAD7847DDF16CFCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:cd:8b:03:80:dd:6e:75:e3:f6:e9:d3:13:
5d:4c:e1:eb:b0:1d:67:4e:c0:c4:61:2e:28:d1:41:
24:64:21:3e:a5:a6:8b:1f:26:0b:d0:b7:4c:3e:6c:
72:b3:07:5f:9e:db:39:18:87:dd:e5:47:2c:2a:e5:
25:12:0a:cb:4f:8b:2a:ad:16:c3:dc:7c:30:d7:cf:
2c:df:35:df:74:46:60:5c:ae:fb:f4:22:d8:fa:b0:
dc:61:3c:2a:ab:41:c7:5f:5f:39:c4:1d:a6:30:64:
12:96:e2:d6:9c:bf:7b:dc:69:61:ef:4d:51:eb:ca:
0a:b0:dd:0c:6f:a6:1f:2d:99:7c:f6:1a:ff:a5:46:
1b:34:a2:43:c0:92:af:2c:fe:7e:bf:20:30:62:4e:
4d:fe:c5:4b:14:01:55:b0:6c:95:c3:12:e1:1a:6b:
06:75:d9:c1:db:f3:4f:bd:34:1a:c3:6f:f3:08:3a:
97:5d:58:44:71:dc:10:31:95:e8:31:4d:7f:33:b6:
3f:02:83:33:ce:7e:0e:ac:25:0f:f5:64:ca:9d:76:
22:13:1d:95:fb:d1:0e:30:ec:bb:2e:57:a4:db:d6:
aa:ad:21:f6:0c:19:98:78:5a:f3:84:cb:a7:38:e2:
5f:4f:d3:cc:fa:6f:1a:90:0d:8c:dd:11:b2:ad:a6:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:E4:AD:00:A5:08:31:89:C2:8E:9D:AD:78:47:DD:F1:6C:FC:EA
X509v3 Authority Key Identifier:
keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:62:2b:54:95:39:48:17:e3:1a:60:d0:8e:4f:10:9b:70:b4:
10:97:2b:5c:2e:3e:ae:cb:bb:0d:85:7a:60:c8:b7:4c:d8:51:
9b:e4:2e:55:2e:d6:a9:f8:d1:e0:e4:0e:49:7f:ae:e8:21:50:
f9:dd:8e:fc:95:31:03:bb:13:96:47:fc:ee:98:e1:6a:9c:74:
fc:7b:d5:5d:c8:66:35:59:34:fe:fa:ad:a5:60:35:94:fb:96:
91:dd:82:d5:bf:ad:d7:41:ee:38:61:07:a7:6d:db:e8:39:9e:
c8:30:ea:59:1b:5d:5c:86:03:59:92:a0:b0:60:94:ad:34:52:
53:d3:33:3c:bd:ab:00:ba:83:70:ee:36:bd:62:3f:2a:76:67:
b7:76:c3:6c:89:fb:1b:ae:81:b4:c5:3a:22:1e:1e:68:b9:e4:
12:7b:0b:90:63:54:11:fa:4a:7b:f6:49:2f:d2:24:04:d5:83:
4f:90:eb:84:0b:0f:96:1a:64:51:5a:78:ce:62:92:61:2a:2f:
ad:6e:4b:9c:58:af:2e:69:90:0a:b5:bd:09:45:ae:ae:67:61:
b4:1e:a0:9a:ef:ed:b8:46:7d:d0:d6:28:06:d5:97:1f:bb:70:
11:48:16:4b:3d:59:cd:b8:1e:70:44:72:c7:06:56:35:99:68:
53:36:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:44 2026 by rpki-client