
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json)
Hash identifier: C/hWK5aAR51oV0xrpcCD4pw1rGmvyC7YloPxR7PLhI0=
Subject key identifier: 19:3F:B8:97:B7:F7:7F:A4:5D:56:68:AA:FA:35:3D:76:82:39:3E:1C
Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
Certificate serial: 69E920292DF97EEC1BBDA3FDEC2EEA39B43B509C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
Manifest number: 0515
Signing time: Sun 01 Mar 2026 15:12:06 +0000
Manifest this update: Sun 01 Mar 2026 15:07:06 +0000
Manifest next update: Wed 04 Mar 2026 15:23:06 +0000
Files and hashes: 1: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=)
2: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: P1pIMR3Twv0EXLYa2EoYhzVVEdbfJP+M6nT8+TCmbpg=)
3: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=)
4: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=)
5: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl
rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e9:20:29:2d:f9:7e:ec:1b:bd:a3:fd:ec:2e:ea:39:b4:3b:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
Validity
Not Before: Mar 1 15:07:06 2026 GMT
Not After : Mar 4 15:23:06 2026 GMT
Subject: CN=193FB897B7F77FA45D5668AAFA353D7682393E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:cf:a4:ab:b4:dd:cb:e8:09:f3:08:0d:99:
85:c6:5f:a4:e4:88:56:54:3e:26:be:6b:70:3f:54:
10:7b:d2:55:42:d7:c2:75:7f:1e:85:b1:96:73:72:
d2:b0:64:7a:42:9b:7f:cc:d4:5c:8e:77:b4:14:bb:
54:0c:05:ce:4b:e6:92:e9:f4:2c:d5:a7:3f:fb:4d:
83:4c:3e:7d:cd:f3:7a:b3:f5:91:31:09:61:88:57:
d5:db:3c:13:7e:0a:f4:ac:1c:5e:84:c3:a0:54:95:
75:b0:e4:19:09:2b:07:49:97:97:74:b9:0b:7a:74:
91:65:fc:e2:8f:60:eb:64:28:c7:55:b2:02:b7:ce:
37:ae:40:cd:19:2a:1a:b5:ef:b3:90:e7:f1:a9:63:
94:21:d4:03:a9:c7:06:05:33:9a:fc:e6:82:74:aa:
00:2a:fd:e9:4d:60:9e:00:71:88:d2:bd:13:d1:2d:
b1:2a:c9:c5:0b:3d:9b:82:0a:aa:35:2b:39:2b:8e:
6f:b4:9a:8e:2e:65:25:ca:71:c4:2d:bf:37:f8:4f:
39:91:40:f9:8c:00:1c:3d:76:a9:02:9f:68:19:25:
1e:05:29:53:21:4c:59:b3:81:11:0a:a7:74:68:16:
ec:05:3b:47:cb:7a:61:cc:87:51:22:85:51:d3:05:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:B8:97:B7:F7:7F:A4:5D:56:68:AA:FA:35:3D:76:82:39:3E:1C
X509v3 Authority Key Identifier:
keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5a:d2:63:66:1b:2a:72:59:e4:af:73:01:ca:e7:2f:d9:eb:
0f:b3:32:a7:0f:4c:cd:9e:7c:e7:9b:da:16:f4:aa:ee:c4:a4:
d8:8e:d3:e4:1a:a5:80:d9:45:9f:2b:75:ef:f1:dc:ff:23:20:
f6:be:5e:23:69:d9:a5:10:ea:ac:1a:33:9a:bf:81:28:7f:3d:
4d:3e:8f:05:a6:88:9b:fa:5d:84:4c:b0:9e:eb:9d:c0:b5:83:
a6:58:93:f7:5c:b4:0f:cb:0d:51:a7:d2:47:96:39:13:fe:f3:
77:a5:b1:d8:84:af:29:df:98:57:5e:c8:9a:1a:c1:fa:20:27:
8f:63:6b:da:fa:e7:9c:ff:62:61:53:27:61:57:08:2d:32:ec:
a0:d7:ff:d2:b3:5f:d2:43:ac:fd:b3:01:55:24:0b:bf:db:be:
27:a7:52:ac:e5:d2:a0:fd:25:6f:fb:8e:8e:8a:48:e9:0c:50:
90:f3:30:0b:5f:1d:e9:ef:f5:bd:d6:c3:f4:5b:0c:c8:9c:40:
6c:33:0f:7a:1a:d9:20:68:d4:9f:6f:29:82:9b:36:09:2e:b8:
fa:08:4c:7d:4e:18:f9:89:3e:74:20:90:ef:76:84:30:f1:2f:
31:ca:1f:ed:71:f6:30:d0:0f:35:85:e1:d7:2a:65:74:95:40:
03:18:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:15 2026 by rpki-client