
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json)
Hash identifier: q1HKvAWshGFguFJTIlaX/+xt2ReVvbMT081Gxvldqe4=
Subject key identifier: D3:4F:DD:7D:CA:69:6E:01:EF:92:FC:13:02:8D:B1:EB:D1:CB:4F:6B
Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Certificate serial: 2C6439096A313DD121FCD87C122D42455BB457B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
Manifest number: 027C
Signing time: Fri 27 Feb 2026 23:11:23 +0000
Manifest this update: Fri 27 Feb 2026 23:06:23 +0000
Manifest next update: Tue 03 Mar 2026 09:11:23 +0000
Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: zBjxcMuUD4tsbjegEHsAYB+/ZA6qPnd9mjOp0XOHUEM=)
2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl
rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:64:39:09:6a:31:3d:d1:21:fc:d8:7c:12:2d:42:45:5b:b4:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Validity
Not Before: Feb 27 23:06:23 2026 GMT
Not After : Mar 3 09:11:23 2026 GMT
Subject: CN=D34FDD7DCA696E01EF92FC13028DB1EBD1CB4F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:2e:46:96:37:f7:76:7a:90:2b:9b:75:f6:
a4:4f:2b:51:72:2d:cf:0b:ac:7f:55:fe:ca:e1:cc:
22:22:f1:73:92:25:b8:92:80:55:d8:27:32:a5:d9:
7d:49:94:6c:db:3f:da:ba:e6:f7:bb:01:db:04:6d:
f6:7a:41:33:20:79:73:bc:d6:3f:80:77:f8:b3:56:
0c:83:f4:c1:e3:19:e1:57:1a:a0:66:ec:44:68:f5:
90:6b:63:c8:ed:e7:82:8b:0c:3a:6a:05:1d:1e:bb:
23:0a:e1:0a:c3:0c:70:7b:f1:3a:18:34:17:5b:f8:
76:53:20:d9:59:8d:1f:2d:26:65:56:56:53:59:4d:
7a:3f:cd:16:85:f1:69:aa:61:03:dc:31:3b:da:46:
ca:f8:b8:8b:f7:ba:72:38:05:b0:92:5b:6d:ea:33:
37:1c:c3:6f:cb:7a:41:4c:a5:51:1b:3e:bc:dd:d0:
c1:da:45:2f:bc:3b:f7:04:c9:41:5c:7b:4d:c8:ed:
e4:c5:50:d5:95:dc:53:9a:da:ea:94:8d:71:da:c9:
30:2e:17:e0:51:92:e9:87:c5:33:a2:98:b0:ec:49:
9f:9e:0c:10:4b:ea:6c:05:bf:d1:3f:68:49:e5:a8:
f2:cb:10:e0:dd:1b:36:cf:af:19:39:df:d6:90:49:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:DD:7D:CA:69:6E:01:EF:92:FC:13:02:8D:B1:EB:D1:CB:4F:6B
X509v3 Authority Key Identifier:
keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:09:db:00:03:a0:d9:e5:b7:40:1c:40:e2:de:8f:42:7a:
51:f8:95:c2:83:5d:d1:0e:8d:f9:57:02:97:21:81:82:8c:c0:
61:8d:b7:b3:98:45:39:5b:9f:35:1f:71:f9:27:97:32:c3:86:
40:91:8a:48:61:c8:91:ab:ee:50:80:81:99:3d:4b:5b:af:85:
60:50:88:c1:3b:75:c0:02:ef:71:e2:cc:cd:25:32:fe:40:61:
c6:f8:ee:1d:c5:b7:23:c8:66:84:a1:1f:fb:62:17:3a:c2:2c:
d3:fd:31:7b:63:d5:c2:77:c0:e0:60:db:e8:bc:4b:1f:00:24:
bc:ba:28:db:91:60:d4:4c:0f:00:cd:de:da:94:90:6a:a6:01:
87:9f:af:4f:ab:0e:b1:36:b6:57:f7:4f:49:c7:fc:7c:5f:d7:
ab:0c:99:62:94:21:18:9f:de:ed:f0:be:44:27:42:cb:1c:43:
84:84:73:70:dc:09:b7:8b:b6:c8:15:b7:11:02:65:6b:79:18:
bd:0d:32:43:8a:40:60:28:6b:57:30:56:e7:ed:b4:4b:e0:1c:
82:f5:75:50:46:db:14:db:83:f3:a6:33:97:53:5e:b2:5c:5b:
e1:c5:93:91:32:2e:a2:d9:2f:f2:62:48:94:4f:aa:37:16:30:
15:cb:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:32 2026 by rpki-client