
$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json)
Hash identifier: 36PPLVw4BSkzeDQCtAHaNV/fu7Ajsipnp8u76QBWH8s=
Subject key identifier: 9B:CA:2F:FA:14:88:67:49:D6:E2:4B:68:F8:CB:46:DE:D0:7F:97:A1
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial: 07A88CC9EB4684A2DCFBCD38EAC94C36CC8D8C3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
Manifest number: 01F9
Signing time: Sat 28 Feb 2026 11:00:49 +0000
Manifest this update: Sat 28 Feb 2026 10:55:49 +0000
Manifest next update: Tue 03 Mar 2026 17:02:49 +0000
Files and hashes: 1: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: a+I06nP5b+sG7uombRaO/A9VFiWnda28578PbtlGH3U=)
2: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: CgKxcfHPPWCbeEhmb1vMTY/de7VpXGQUJEpzuwbBzoI=)
3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: BXp0DiStVhZuRg84lCtQ4q7ZgVrjo+zScqcIWL6/IJE=)
4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: 0zElYS8pYAdAq2zXe+2YefY+xTaQBq2KFhrk8AH5DcA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a8:8c:c9:eb:46:84:a2:dc:fb:cd:38:ea:c9:4c:36:cc:8d:8c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Validity
Not Before: Feb 28 10:55:49 2026 GMT
Not After : Mar 3 17:02:49 2026 GMT
Subject: CN=9BCA2FFA14886749D6E24B68F8CB46DED07F97A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:58:90:3e:7a:8e:34:43:c4:ed:7e:df:62:
48:f2:2a:5d:8a:5a:ed:52:48:6b:c9:c4:1d:cc:1f:
42:28:c1:13:19:75:38:f8:99:14:0f:36:e9:52:33:
04:8c:01:87:31:fb:19:70:6a:79:76:e7:0a:55:8f:
ff:4d:34:e1:08:96:7b:0e:86:9a:3b:66:57:83:54:
0a:7e:4f:5b:77:77:28:72:55:ba:92:eb:2e:1e:4c:
97:66:72:91:ef:6a:0e:40:59:39:2d:3c:dc:6e:6d:
87:9f:ca:27:e5:1e:50:03:02:dd:e3:bb:cc:74:57:
60:31:04:9f:5d:63:8c:1c:08:b6:e7:6d:19:ab:97:
e4:f5:e1:83:b7:ce:a1:79:a9:c0:d1:83:b5:52:90:
ee:c2:56:0d:62:46:94:fa:cc:49:4a:d3:92:ba:b7:
f1:ad:0a:95:24:54:c9:a6:d0:20:ee:3a:22:3d:08:
c1:d1:e7:ed:17:d1:85:9c:77:d3:18:aa:7e:89:6c:
e0:be:8b:d2:30:1a:d3:e5:4c:ad:11:c4:fa:29:8f:
7f:ee:35:dc:8e:f6:09:09:52:e1:30:22:eb:83:56:
95:d6:2a:e5:91:e5:32:45:d1:36:93:19:c3:43:2e:
9d:4f:95:49:ec:2c:e1:5d:9a:4f:0c:42:7a:9f:d5:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:2F:FA:14:88:67:49:D6:E2:4B:68:F8:CB:46:DE:D0:7F:97:A1
X509v3 Authority Key Identifier:
keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:99:5d:44:53:17:c8:d7:d1:b4:41:e1:a0:83:28:d6:cc:93:
8a:cf:e8:01:a4:5b:c3:20:19:e2:81:01:d7:3d:89:de:4f:aa:
c0:4e:87:55:20:cf:c1:06:07:5a:b3:62:7e:10:91:5f:87:d7:
52:c5:00:89:3e:60:3c:fe:da:fa:c9:60:7a:41:3b:c1:bc:43:
fb:90:61:65:f3:f0:0f:d9:8b:6f:15:0a:8c:83:37:e2:cd:9a:
62:dd:82:30:69:ac:90:c8:45:10:1f:99:1c:a8:a2:ba:92:7a:
6d:66:5b:78:48:7f:74:7c:f2:10:e0:52:ba:90:ea:58:e6:9e:
26:eb:38:af:6c:3e:c0:aa:a5:b4:0c:00:7a:f3:eb:8e:23:a5:
b9:22:f0:14:36:2b:ff:4b:11:d9:92:e5:bc:77:dc:9a:fb:1e:
1a:70:fa:90:c5:e0:be:99:4f:ed:bc:56:e9:aa:06:87:e4:54:
28:90:6b:1d:3f:a0:29:26:49:89:c2:1a:7f:53:15:42:b3:a2:
90:8e:4c:5f:d0:ce:70:40:b2:5f:d9:5e:d0:c0:94:a5:4c:b8:
87:ff:34:87:49:1a:09:2b:da:9f:db:c1:5b:bc:04:a1:5a:b6:
97:13:d4:21:97:a6:b4:47:52:87:44:07:35:e6:7b:71:6c:59:
1b:15:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:51 2026 by rpki-client