
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json)
Hash identifier: H0RSPkSdB2YTGymNZsYioaxolOycxg6yx622IdZtUn8=
Subject key identifier: 73:0A:51:D1:E0:08:CB:FC:74:EF:61:76:FD:E8:95:74:8D:59:C2:1A
Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF
Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
Certificate serial: 6B731C908BF84F70F8D77A6FED955E35317A2ED3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
Manifest number: 020E
Signing time: Thu 16 Apr 2026 15:31:41 +0000
Manifest this update: Thu 16 Apr 2026 15:26:41 +0000
Manifest next update: Sun 19 Apr 2026 20:57:41 +0000
Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: +aJ3urDYDAdZbLVxgK3efiShr+akQCYv1/hl/FmSvgY=)
2: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: /p/YUqzCILIMxGCwlRVSjL/gcgZFzSPDRt6vAxkS6yQ=)
3: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: YYTZNty3sg6WbwJZplWjBQqyNGraOYIziE5EjfxvIWA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl
rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:73:1c:90:8b:f8:4f:70:f8:d7:7a:6f:ed:95:5e:35:31:7a:2e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
Validity
Not Before: Apr 16 15:26:41 2026 GMT
Not After : Apr 19 20:57:41 2026 GMT
Subject: CN=730A51D1E008CBFC74EF6176FDE895748D59C21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:1e:4b:13:2b:47:21:dd:1d:20:77:76:be:
83:79:b9:ed:c0:92:bc:32:90:0b:0f:17:06:49:31:
a5:50:a1:5f:13:c3:95:fd:4f:78:c1:8a:9a:6b:8a:
70:f3:cf:1c:72:98:36:8d:f8:2e:10:20:9e:6b:65:
fa:be:c8:18:0d:c0:d7:fd:e2:fb:d6:7b:e5:cb:ef:
8c:d1:b9:23:45:12:f2:a0:17:ed:3f:e6:5d:db:57:
1c:f2:33:b3:85:93:84:30:55:bb:63:f3:1b:54:b3:
3a:6b:5c:1f:5f:94:a1:5e:18:9a:41:af:0c:d1:73:
65:38:67:75:03:15:0e:e9:36:79:09:ed:2f:bb:aa:
46:ba:c3:d2:43:29:14:88:7b:5c:b6:95:7f:a7:fe:
c4:62:f9:ce:57:6f:b0:c1:db:a6:d7:c2:21:df:72:
5c:46:a2:26:7b:22:92:c9:72:49:7f:c1:96:20:b4:
84:bc:91:ca:60:d3:43:d4:df:08:80:b8:d6:dd:40:
c9:ed:18:24:5a:47:17:8f:53:65:ea:fa:ea:b1:fc:
39:cc:e9:49:61:bf:67:c4:45:63:9d:65:ce:12:41:
15:43:8c:2e:92:1d:69:8e:c4:51:df:e0:97:10:ca:
05:aa:fe:9c:8b:19:12:ef:d0:26:91:e0:7c:bc:32:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:51:D1:E0:08:CB:FC:74:EF:61:76:FD:E8:95:74:8D:59:C2:1A
X509v3 Authority Key Identifier:
keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a4:cd:89:99:3b:ac:92:f3:a1:58:34:a5:e7:d4:5e:34:1b:
d9:11:9f:53:54:9b:27:f5:f8:ef:29:00:0e:1a:3d:33:f7:a9:
9c:c1:c6:3a:0f:42:d0:fd:18:99:16:47:4b:ff:80:ee:9d:0a:
f5:77:9d:8c:85:a7:bf:6f:8e:fa:0f:a9:a8:53:eb:7f:b9:46:
14:32:f5:8b:73:12:15:19:c6:3b:cc:f2:33:90:25:97:f1:d3:
69:ac:8b:cc:11:7b:2c:e6:f4:c2:1e:4b:07:f6:c8:43:30:f4:
20:64:7b:08:a5:b5:bc:79:2e:c4:d9:de:f2:09:9e:36:9a:0d:
f9:1d:57:91:27:c7:ea:bb:10:05:9a:71:0b:b7:c3:04:4f:81:
f6:65:06:ff:cd:c9:4e:61:75:37:d1:f0:1c:75:9b:b4:3e:34:
20:bc:21:f4:51:c7:34:a5:39:59:93:61:1b:11:f8:f6:00:8d:
6e:42:6d:7e:dd:ae:88:26:7e:75:b3:c0:d9:49:48:9e:91:fc:
e6:63:6e:c5:9c:df:f3:b7:22:cb:d7:4b:a6:17:09:3b:00:78:
16:59:76:bb:7d:50:0f:da:f1:2a:0f:57:d7:94:33:21:30:31:
57:8e:83:21:1d:44:2c:0b:a6:0c:06:ca:03:ca:1c:e7:2f:0b:
9c:62:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:37 2026 by rpki-client