
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json)
Hash identifier: bKlgFmlhvF/DDn7UnI4EGZGVSwxo+tQPCwfb/0T7+Rg=
Subject key identifier: 8E:F7:50:35:36:A2:1C:E6:EC:8A:60:6D:53:CD:4B:30:C0:D0:02:3C
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 5FDEF12209B97D72EDD272B87177B78982118D55
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
Manifest number: 0239
Signing time: Mon 02 Mar 2026 20:20:50 +0000
Manifest this update: Mon 02 Mar 2026 20:15:50 +0000
Manifest next update: Fri 06 Mar 2026 04:56:50 +0000
Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=)
2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=)
3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=)
4: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: 9/qzZgloiUzGi1/6UgWpRyW/pN9DkTxomIrepiADIBw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:de:f1:22:09:b9:7d:72:ed:d2:72:b8:71:77:b7:89:82:11:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Mar 2 20:15:50 2026 GMT
Not After : Mar 6 04:56:50 2026 GMT
Subject: CN=8EF7503536A21CE6EC8A606D53CD4B30C0D0023C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:a0:f1:c3:20:d2:ef:cb:2b:c6:1d:c0:eb:
e2:5b:1b:77:70:26:5a:f2:8d:6a:8c:0b:9c:06:e1:
3b:5c:18:9c:7e:61:4d:08:4e:8a:5a:d8:77:d0:53:
44:80:d7:5d:13:9d:96:e4:40:fe:dd:64:dd:0e:33:
01:49:b3:52:2c:c8:9c:4e:c7:40:74:ad:9b:45:29:
8a:78:85:ae:29:a9:f4:02:1a:19:d2:61:71:84:36:
d9:b0:b2:7c:b9:0c:28:d4:6c:b1:78:a0:49:1e:ca:
a3:9b:fc:57:56:2b:a5:d5:1a:cf:58:17:ac:91:b8:
c4:67:73:08:0a:48:44:f8:5c:b3:46:e0:94:31:84:
73:ac:77:17:7f:0a:e7:98:77:93:a6:ff:87:f7:32:
96:14:ac:e9:63:a6:bc:0f:cc:27:cd:35:42:12:af:
3b:65:32:ed:2f:3e:2e:33:7e:26:2e:c6:a6:5f:73:
75:4d:49:a8:60:49:ad:60:b6:e6:d8:e1:a2:14:cc:
fe:81:b1:dd:58:80:c9:36:1f:93:d8:dd:91:52:77:
c9:12:6a:a0:1f:17:38:bc:22:07:58:d9:ea:19:e7:
1d:24:84:bd:d6:a3:06:c6:8a:0b:94:03:76:fc:ea:
39:6d:48:37:c8:0f:fe:96:3a:a2:fa:35:d4:bf:b1:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:50:35:36:A2:1C:E6:EC:8A:60:6D:53:CD:4B:30:C0:D0:02:3C
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7e:9d:1d:c6:63:07:0a:d3:01:cb:d8:35:f3:9c:4a:91:f8:
9f:4a:80:1d:69:29:0c:cc:63:cf:5c:3b:f1:2a:a1:2d:61:49:
2f:16:5d:f7:1b:05:70:f7:cd:53:ff:ec:74:1e:6f:3a:49:bc:
24:bc:1b:e7:90:5f:86:89:eb:f4:56:1b:2e:10:78:d8:47:fa:
48:3a:49:28:1a:f4:5d:54:06:c3:84:68:7f:8a:fa:6f:8a:55:
5b:78:04:f3:b5:33:54:29:1c:ba:25:83:a6:f6:00:af:f1:18:
2a:1c:0f:1b:e7:3c:dc:c6:5f:23:4f:53:1b:01:be:d3:62:f4:
4d:e4:0e:39:21:1b:27:66:37:12:b9:ec:37:03:0d:a2:18:e8:
37:2c:cb:1d:90:8c:0e:5e:aa:5d:47:58:de:6c:cd:6a:a7:2c:
64:1b:13:14:2e:13:4b:cb:21:f0:bc:1f:77:e9:a2:f9:8f:df:
69:fc:e6:8a:d6:bf:df:9f:59:7a:9d:06:32:7d:0d:fc:35:36:
c5:aa:d3:0c:05:e2:85:39:e0:db:a4:2c:b7:ee:46:ae:e2:50:
7e:11:38:e1:93:f7:6f:52:77:0f:3b:e7:0d:b5:4a:83:81:7d:
ed:ad:4d:48:ab:6b:16:9f:7f:0e:ea:83:58:ea:b2:a8:b3:ee:
69:6f:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:01 2026 by rpki-client