
$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json)
Hash identifier: s57ucL+TVJdJvpJHAVeJtL8qV8RKVP4WwmulXFI864E=
Subject key identifier: D5:54:2C:E8:8A:40:78:5E:5F:CD:34:E0:9F:7E:8C:9E:EF:29:18:07
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial: 2CC1F53D517875667036A2867C4CE584033F3C4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
Manifest number: 0113
Signing time: Mon 02 Mar 2026 02:40:58 +0000
Manifest this update: Mon 02 Mar 2026 02:35:58 +0000
Manifest next update: Thu 05 Mar 2026 07:30:58 +0000
Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=)
2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=)
3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: fG6FPdoO/Va6c9J8CQc04La1veDXYj15rFBNc9TNpcw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c1:f5:3d:51:78:75:66:70:36:a2:86:7c:4c:e5:84:03:3f:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Validity
Not Before: Mar 2 02:35:58 2026 GMT
Not After : Mar 5 07:30:58 2026 GMT
Subject: CN=D5542CE88A40785E5FCD34E09F7E8C9EEF291807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:11:05:b7:86:22:22:50:94:ac:69:b3:46:
c6:3b:d6:c5:c3:c8:4f:37:e9:07:f6:04:f1:0d:21:
a2:5a:fa:ca:ac:e4:32:17:73:1c:c7:00:cd:68:8f:
12:8c:2c:6c:c2:41:e6:4a:90:24:56:af:56:32:ec:
f7:52:ef:00:7c:70:b0:e0:15:da:42:61:f1:46:88:
cd:45:6a:d7:d5:c1:6b:e8:c2:6a:04:61:ba:23:36:
55:3c:90:91:b0:e3:68:f0:29:99:18:7e:da:d2:1c:
0f:d4:34:8e:04:a4:ae:77:bc:a8:a5:7e:c5:42:72:
2c:22:01:ce:ed:7e:58:83:b9:6a:6f:a7:0a:3a:68:
7d:5e:e3:f1:67:d8:f8:ef:a6:c5:32:3e:81:0f:04:
30:d9:a4:fb:c2:0d:f2:87:52:ab:06:38:9a:8b:a4:
83:7d:36:3f:e4:a9:b4:d5:2b:9a:fd:60:55:4f:35:
97:f6:1d:3e:89:e3:ae:f9:a1:43:4c:b4:24:78:b9:
e0:11:dc:f5:c8:e7:19:4a:fd:54:54:9d:16:b5:07:
57:5d:bd:dd:8b:4d:3b:84:65:30:44:85:a1:6a:5d:
3e:f3:9d:9b:c7:d5:b4:55:00:23:e4:85:23:b1:54:
a4:19:7c:39:75:88:b1:b2:c2:a9:33:a5:b6:50:2f:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:2C:E8:8A:40:78:5E:5F:CD:34:E0:9F:7E:8C:9E:EF:29:18:07
X509v3 Authority Key Identifier:
keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:5b:94:6d:93:34:0c:7a:7e:c9:e1:33:9a:77:89:86:3d:
76:6b:e9:b2:c7:36:1b:01:67:48:84:45:46:29:63:a3:84:28:
a5:75:f7:b7:49:a5:b4:92:86:4e:ac:74:44:e7:c7:54:ac:96:
bd:43:b3:a7:6c:59:2f:6a:11:86:e6:6c:72:be:71:cf:75:f9:
08:0b:d1:4c:9a:62:68:7a:06:b4:ea:ee:18:ea:91:40:f1:e6:
09:74:f8:98:33:69:1c:0e:54:d0:9c:7f:85:ff:c5:e4:7a:3f:
45:65:69:09:f6:00:7e:13:1f:65:06:ca:b7:7b:ea:b7:e8:81:
5d:3c:2b:95:a2:f1:0c:87:b1:1b:87:f2:27:7b:3f:c9:39:40:
36:41:bf:65:71:91:19:f1:c2:b9:58:78:8f:97:4f:48:41:b9:
20:31:df:35:45:00:a3:f3:2f:c8:7d:ae:42:17:0b:97:24:fc:
35:27:d9:56:27:56:a0:80:ab:b6:e7:1a:bf:b7:a0:70:77:f4:
88:ac:27:3f:13:3b:00:be:47:1c:b8:c3:c6:77:68:96:b4:96:
26:1b:52:b3:25:98:1d:b8:f7:e7:e5:7e:d5:d7:9d:ce:06:ae:
ea:d4:30:d9:82:02:15:ab:67:9a:9d:a3:c4:f9:15:93:5a:4b:
0d:be:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:30 2026 by rpki-client