
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier: wsOxj9i05evnwsO4YZGsC0T0qAXxPqe9Kgj2Q3OzXQ4=
Subject key identifier: DA:E4:51:AC:B1:5A:57:10:40:84:A9:CC:9B:51:A9:F4:24:F4:A1:48
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial: 06C977806C2F4842EDDE60159D43CA49C783EA66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number: 03C7
Signing time: Sat 28 Feb 2026 02:21:00 +0000
Manifest this update: Sat 28 Feb 2026 02:16:00 +0000
Manifest next update: Tue 03 Mar 2026 06:27:00 +0000
Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: p8oIPt3SLG+bn8O2pvGjmG2aDKh8yXZH6ZNNl9lW2XE=)
2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=)
3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 06:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c9:77:80:6c:2f:48:42:ed:de:60:15:9d:43:ca:49:c7:83:ea:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Validity
Not Before: Feb 28 02:16:00 2026 GMT
Not After : Mar 3 06:27:00 2026 GMT
Subject: CN=DAE451ACB15A57104084A9CC9B51A9F424F4A148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:e4:21:77:f3:04:81:e1:2e:2a:09:6d:c8:
41:ab:24:d4:67:b3:75:ef:4c:bf:27:03:d6:f0:18:
86:c4:47:93:22:fc:30:39:2a:43:f4:57:4a:26:cf:
03:9d:b3:22:dd:62:81:d8:34:48:d4:ec:ce:6e:e4:
51:ac:3d:3e:71:b2:07:45:b7:e2:c7:77:f1:cd:79:
87:40:5a:38:b3:2f:f8:f9:1c:aa:70:87:33:00:c8:
fd:7b:d9:fb:57:ef:f7:2b:d3:e7:d3:fc:fc:44:9f:
8f:57:7d:fa:9c:ce:1f:32:ac:48:e4:11:11:91:61:
a0:38:da:6e:4a:fa:9a:f8:87:f4:66:70:ea:0f:cc:
91:a2:de:4a:14:00:76:12:02:cd:7a:d9:52:95:06:
62:88:25:20:51:7a:ec:4e:bd:57:1b:71:15:69:e0:
08:f9:c6:1f:3f:40:7e:6f:94:9c:e4:7a:fa:17:36:
b6:2a:b8:fe:f3:93:db:f1:af:8b:49:58:47:22:c6:
e2:ce:31:d4:98:58:04:8a:cb:7e:01:61:80:ac:55:
f6:55:d0:c5:89:30:05:2b:b6:f6:02:91:ac:0f:08:
1a:1b:1c:3b:f9:5f:77:1f:6e:93:4c:d8:a5:a8:72:
53:08:db:66:ca:f5:24:8c:d2:9d:de:ff:8f:a7:21:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E4:51:AC:B1:5A:57:10:40:84:A9:CC:9B:51:A9:F4:24:F4:A1:48
X509v3 Authority Key Identifier:
keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:a5:eb:8b:13:72:43:12:e0:a9:c7:f9:e9:18:71:6f:2d:
7a:60:81:7c:a2:b5:e8:1d:15:58:e4:df:81:5e:c2:01:e5:c6:
ee:06:0b:da:5e:f1:17:23:f8:99:b0:43:c7:f7:61:cf:7f:c1:
b9:3a:52:c0:65:7a:7d:06:d2:71:89:44:7f:0a:3e:bd:fa:32:
13:73:09:50:d1:d1:79:00:f8:39:f9:e0:4f:c8:82:33:c0:1d:
37:07:d5:f8:71:d9:48:1c:e6:9f:30:9a:17:71:2e:6f:84:8d:
ba:a2:06:6b:2e:a5:27:29:52:80:0e:d0:12:76:57:50:db:92:
fa:40:97:c8:8a:fd:91:b7:02:83:29:15:8a:af:02:a2:b4:26:
c5:f2:d1:13:35:07:2c:6f:ef:a0:b0:56:36:d7:f7:89:f6:b4:
05:94:01:08:14:5a:09:95:0a:28:a9:66:1c:30:69:ec:62:34:
36:02:41:ea:1e:56:a7:3d:73:ae:12:67:03:05:68:4a:b3:8e:
71:47:97:e7:89:ec:33:10:78:50:ec:17:49:82:0e:44:90:a7:
6c:4e:40:36:40:56:49:3c:71:6c:85:3c:b4:ca:6a:dd:57:69:
58:1a:52:ff:bd:f6:de:2c:b7:97:a6:8e:79:f2:d3:2a:30:30:
67:bb:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:08 2026 by rpki-client