
$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
File: 084550E9619FF5ABD20864D9A6383053B59BF91E.mft (raw, json)
Hash identifier: BoPqLcKMQzl0wisvcaTjFWNeiY8DSXaoYZ5WPjCiB3M=
Subject key identifier: 85:B5:D3:32:63:EA:F3:30:91:98:EE:5B:3F:EB:D9:50:F3:7B:89:42
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial: 4AC75B060DBE87790D77261D3A4FE4DD0F037418
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
Manifest number: 01CE
Signing time: Sun 01 Mar 2026 17:11:33 +0000
Manifest this update: Sun 01 Mar 2026 17:06:33 +0000
Manifest next update: Wed 04 Mar 2026 17:16:33 +0000
Files and hashes: 1: 3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (hash: JSKYuA8fJ4y0Rjc8zV/6efFq5nxlIBAvEr6kwWaUKJw=)
2: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: RdnZzcveMI6OTZ2tqV917YFqNgnyHc224NISl6oJbLU=)
3: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: cjrcytx7Zuxa9AtgQ+afjEzYS+0m/7FLcfwrrJooW6c=)
4: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: 30/vZduG4RMn/faR6AR/rSQuPldnzAfrSZBQwzPgYYM=)
5: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: QUmO+r1ZetkePDm99tDeZ2rTyu62swLem0hgSgkn7ss=)
6: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: YVfqjrZZKlyKKNROGIdcGYIh7CG+YxaGHiuctjc25lk=)
7: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: 2v9wN44Uo9Cs+bu4eyE/wLGCms0fGUP+hH0Oe6hkTeI=)
8: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: OQ224IMvAsB57i2ZLy8k+3izRu39/RIC634GB2DVf5Y=)
9: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: bEZOujHilL/rXvF4OnLLVFp4nRZlUgFYRFmndeCTA1Y=)
10: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: VgDUrmnqScAuLKPWIBCNW2XKtjbn0edxx7HC7UhTNi4=)
11: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: uo+i0GPa6EP/s8c5Ny4WiphUzVRwvU6LzzbkX7/CEoU=)
12: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: GzXYpE71o4tlTZAt4Hyg0opydgJ4djQwIaGFzaYbjpM=)
13: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: 5IMht0xKCCP0U9uwz1XPxOK7yxTeYdiQoJjjSz9Mxco=)
14: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: +ZHf279OS2MHjAeCxjl0QBmwTayFhrDzO/892nI5F/c=)
15: 084550E9619FF5ABD20864D9A6383053B59BF91E.crl (hash: zItj2Mk9gI5UfkT5LxF4RTWr0OHPy5FqRyvrTZRRLE8=)
16: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: WAaSNwShiSZ85pEV29yBzPi/4z8AK1cN4rEfINPVYW8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c7:5b:06:0d:be:87:79:0d:77:26:1d:3a:4f:e4:dd:0f:03:74:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Validity
Not Before: Mar 1 17:06:33 2026 GMT
Not After : Mar 4 17:16:33 2026 GMT
Subject: CN=85B5D33263EAF3309198EE5B3FEBD950F37B8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:83:a9:6e:25:08:6b:29:9c:5a:35:03:d7:
c2:31:4d:ef:ca:6f:b0:05:c8:f5:0a:3e:5b:a3:b4:
38:5d:04:6e:bb:c0:f9:2a:0a:cb:f5:21:af:cc:76:
b4:f1:c7:46:bd:8a:e6:7c:b2:69:82:36:08:be:9a:
4d:9b:ad:1d:a8:55:eb:2b:4e:8b:a9:fc:4c:38:1f:
7d:0d:be:82:69:ec:50:49:62:f1:50:c9:39:aa:4c:
37:1a:73:2f:2c:31:12:7b:f5:7d:6c:33:2a:ac:d7:
06:74:eb:40:6c:39:c7:15:c8:6c:c2:92:08:4f:d4:
d3:b6:85:bf:96:46:26:34:17:fc:20:b0:89:9e:dc:
73:0f:0a:85:3f:68:1f:d3:03:cf:a5:e1:55:36:77:
a0:cb:62:ff:41:ed:bd:ab:f9:3c:2d:83:d7:01:69:
f9:8d:7c:87:21:5a:9d:8f:a6:98:1c:51:b5:90:c2:
18:dd:04:8d:f3:59:17:5d:5a:f4:38:46:ca:e5:06:
00:da:c4:b4:1d:79:3e:bb:5d:66:e6:bc:04:36:d4:
f8:7c:fb:e7:a2:f4:d4:d6:91:d7:04:4c:cd:b8:05:
27:7e:65:13:d2:11:3a:4b:e0:41:e2:f6:3e:30:b4:
ef:d0:3a:f3:59:95:12:3f:62:e8:12:df:68:7c:52:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:D3:32:63:EA:F3:30:91:98:EE:5B:3F:EB:D9:50:F3:7B:89:42
X509v3 Authority Key Identifier:
keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:e1:a8:dd:b3:f6:89:54:94:70:b2:78:d7:0a:18:c3:28:
d9:fc:c1:69:9f:7b:94:5e:61:50:45:53:5b:cc:2e:ea:07:5a:
f2:b0:8d:e5:6e:b8:6e:bd:49:4a:31:3c:6f:82:a4:83:ae:97:
84:8c:13:a2:65:a5:64:5d:a1:95:09:d2:cf:b6:a9:76:a6:e3:
76:3e:81:fb:f1:e9:b7:4a:55:cf:cc:a7:e7:19:0b:9d:15:ab:
f2:2c:8a:20:74:c9:ce:bf:b7:db:07:59:51:0c:6a:7f:1b:e6:
81:e5:57:17:4f:0a:53:ac:46:77:9b:ea:46:ee:3d:ce:d4:a1:
d0:ef:4f:9e:6e:4d:9c:74:fe:a5:62:e6:1a:88:69:51:d4:ce:
65:ba:ea:c9:aa:dd:8a:da:54:b4:9e:52:3a:02:fc:f5:de:9c:
b4:1a:78:be:98:f2:ca:24:d5:3b:6a:67:7d:4e:bb:d8:d8:5c:
b7:fc:08:48:94:08:44:1e:00:1b:6b:9f:83:94:66:56:f6:0b:
53:ea:2c:4a:3d:18:77:59:7a:8c:c9:bb:a3:6c:a2:b4:34:a4:
08:14:c4:37:da:b8:4c:2d:fd:aa:b2:30:2d:87:5b:93:b3:f4:
2b:77:4a:1c:e6:fa:e9:df:86:a9:aa:a1:41:cb:18:85:0e:9c:
ec:19:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:29 2026 by rpki-client