
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json)
Hash identifier: PgOab4r6PZbTlqKDNy5qHRZZ5uG+jR/VrqGhtVE/xV4=
Subject key identifier: 1B:94:58:A3:AF:49:00:0B:5C:83:D7:9D:F5:57:04:FB:EB:EE:A3:56
Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Certificate serial: 16039A83CB7C3C1610744C844FF5F064F40A3CFC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
Manifest number: 0551
Signing time: Sat 28 Feb 2026 16:32:25 +0000
Manifest this update: Sat 28 Feb 2026 16:27:25 +0000
Manifest next update: Tue 03 Mar 2026 17:48:25 +0000
Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=)
2: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: dg6f9jfeWA0R/UE5oGpIpnOmMzXRXl27L4JUx+XqKeM=)
3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=)
4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl
rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:03:9a:83:cb:7c:3c:16:10:74:4c:84:4f:f5:f0:64:f4:0a:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Validity
Not Before: Feb 28 16:27:25 2026 GMT
Not After : Mar 3 17:48:25 2026 GMT
Subject: CN=1B9458A3AF49000B5C83D79DF55704FBEBEEA356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:24:00:67:ec:4e:91:4d:07:12:c0:45:8b:
50:89:25:f8:f8:72:b6:84:06:52:3e:2e:42:f6:a1:
e8:40:22:f0:ca:c6:c7:24:1d:81:cf:7d:be:b4:b6:
7f:ef:35:34:74:2d:cf:10:1a:1e:2f:75:0c:40:ec:
9f:5e:6f:2a:a3:36:08:0b:8f:fb:87:09:4e:bd:30:
58:92:37:55:82:a5:3f:37:d4:b1:b6:35:de:9f:5b:
d2:ca:32:bf:de:3c:ef:91:5c:a4:55:6c:f8:c8:73:
50:14:43:c1:51:35:c4:de:89:a3:b9:53:1d:cd:79:
e8:a6:c7:20:d7:80:33:c8:16:f3:9a:c6:7e:cc:13:
63:a8:bb:92:9d:55:b3:83:71:7d:ca:16:92:78:20:
37:d2:3c:1c:8f:c4:a1:74:3a:cc:6f:c1:c2:3c:de:
92:a2:16:84:89:f2:a4:9c:07:ed:7e:f5:93:9a:45:
03:fa:04:10:6b:2d:4a:bd:f0:80:ef:5c:6f:e7:c9:
82:bc:bf:18:f6:32:a1:23:64:ce:f0:78:33:5e:c3:
fa:aa:80:53:a1:35:88:69:35:f0:cc:8f:5c:17:f4:
d5:cc:34:24:4c:39:34:75:78:de:20:1e:5d:a0:0b:
15:25:3f:d9:15:ae:d0:1f:36:94:77:f5:ef:79:c2:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:94:58:A3:AF:49:00:0B:5C:83:D7:9D:F5:57:04:FB:EB:EE:A3:56
X509v3 Authority Key Identifier:
keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:bc:17:28:83:05:43:21:0c:ac:cd:29:3f:61:92:2e:34:
9b:ed:b6:46:f7:d6:bb:9f:22:23:cf:07:fe:1e:c1:79:56:b8:
81:7a:c1:1f:b0:c4:6b:02:5a:3f:81:e3:22:ed:5c:10:8c:33:
50:3e:34:c8:a4:72:bc:ce:44:bc:f1:1f:c7:c6:5a:0b:9d:0a:
98:ef:2b:99:d0:f3:e7:98:d2:d4:33:46:46:36:26:83:95:7c:
43:4e:bf:15:bb:b3:cd:5c:a1:b2:1e:96:88:52:78:26:33:14:
61:2f:a6:13:31:a0:c2:45:c4:7f:ac:80:25:cf:ca:6f:c0:26:
12:fe:7d:e9:50:a1:44:3e:9f:71:fd:f5:68:7a:59:20:a8:64:
9c:73:ac:b3:69:cf:51:30:66:5e:b9:ee:10:1e:e3:ad:08:5b:
db:bc:98:b3:66:b1:b0:76:4f:7b:af:88:1b:2e:32:aa:9c:dd:
ab:85:73:6a:a1:bc:65:a2:ca:f2:e6:0e:d7:ba:8d:07:52:69:
f8:7e:1c:c1:f0:b4:0c:bc:31:79:43:9b:f3:32:99:22:b1:9d:
8c:ff:90:b9:4a:be:49:96:14:f9:09:dd:18:ae:88:f3:71:fa:
6f:52:5c:03:1f:f0:81:cb:a5:26:b0:e8:2a:b6:af:22:55:9a:
85:cc:51:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFgOag8t8PBYQdEyET/XwZPQKPPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB
RUYwNjdDNTAeFw0yNjAyMjgxNjI3MjVaFw0yNjAzMDMxNzQ4MjVaMDMxMTAvBgNV
BAMTKDFCOTQ1OEEzQUY0OTAwMEI1QzgzRDc5REY1NTcwNEZCRUJFRUEzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgiQAZ+xOkU0HEsBFi1CJJfj4
craEBlI+LkL2oehAIvDKxsckHYHPfb60tn/vNTR0Lc8QGh4vdQxA7J9ebyqjNggL
j/uHCU69MFiSN1WCpT831LG2Nd6fW9LKMr/ePO+RXKRVbPjIc1AUQ8FRNcTeiaO5
Ux3NeeimxyDXgDPIFvOaxn7ME2Oou5KdVbODcX3KFpJ4IDfSPByPxKF0OsxvwcI8
3pKiFoSJ8qScB+1+9ZOaRQP6BBBrLUq98IDvXG/nyYK8vxj2MqEjZM7weDNew/qq
gFOhNYhpNfDMj1wX9NXMNCRMOTR1eN4gHl2gCxUlP9kVrtAfNpR39e95wuCHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUG5RYo69JAAtcg9ed9VcE++vuo1YwHwYDVR0j
BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy
RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw
NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm
NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5
MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAdkvBcogwVDIQyszSk/YZIuNJvttkb31ruf
IiPPB/4ewXlWuIF6wR+wxGsCWj+B4yLtXBCMM1A+NMikcrzORLzxH8fGWgudCpjv
K5nQ8+eY0tQzRkY2JoOVfENOvxW7s81cobIelohSeCYzFGEvphMxoMJFxH+sgCXP
ym/AJhL+felQoUQ+n3H99Wh6WSCoZJxzrLNpz1EwZl657hAe460IW9u8mLNmsbB2
T3uviBsuMqqc3auFc2qhvGWiyvLmDte6jQdSafh+HMHwtAy8MXlDm/MymSKxnYz/
kLlKvkmWFPkJ3RiuiPNx+m9SXAMf8IHLpSaw6Cq2ryJVmoXMUfc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:00 2026 by rpki-client