
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json)
Hash identifier: IpYtiG297X8jv3ErgAoSJ/sgfmj21wUnovwLZ6P5YeI=
Subject key identifier: 50:92:11:03:C0:A4:0B:3B:90:BF:1A:27:E7:99:DA:82:15:7C:E6:25
Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C
Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C
Certificate serial: 67DA9B592FEB9E5D793724B2EEB952EFA824B717
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
Manifest number: 0551
Signing time: Sat 28 Feb 2026 23:31:41 +0000
Manifest this update: Sat 28 Feb 2026 23:26:41 +0000
Manifest next update: Wed 04 Mar 2026 08:09:41 +0000
Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=)
2: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=)
3: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: i/1E5HuxGOKLWRsuvnHfG/hTJML3ZQei7Pe/43vjlq8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl
rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:da:9b:59:2f:eb:9e:5d:79:37:24:b2:ee:b9:52:ef:a8:24:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C
Validity
Not Before: Feb 28 23:26:41 2026 GMT
Not After : Mar 4 08:09:41 2026 GMT
Subject: CN=50921103C0A40B3B90BF1A27E799DA82157CE625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:09:2c:f8:1f:91:86:a5:1e:1c:a7:7c:75:
8d:46:ef:36:e5:12:9b:73:a1:ee:16:d2:18:42:d5:
5f:07:cd:3c:50:28:08:f9:79:4c:64:90:68:94:c6:
b2:82:74:99:aa:bf:10:40:2b:8d:6a:05:53:5d:9c:
cd:44:62:01:95:d6:6c:fa:d9:e1:a5:a1:00:a6:e3:
89:9f:ff:bf:61:d0:f4:7a:90:fd:74:d0:3b:77:4c:
e1:39:17:85:ca:94:52:f1:63:3b:0a:d4:f3:68:55:
0a:f6:26:69:5e:d8:fb:1c:ea:f7:b1:a5:54:74:b5:
6b:25:d4:1b:58:46:7e:b1:45:37:ee:10:48:41:81:
30:f2:19:19:3c:95:d7:ba:25:50:97:04:5a:c4:fc:
fd:fe:69:62:3d:21:7b:36:1d:a4:73:02:ef:40:52:
dc:8d:3e:83:08:eb:55:4a:cc:20:f0:1f:3e:d0:7e:
7e:0e:93:3c:28:20:8c:c5:0e:2b:83:bb:88:c3:b5:
82:8d:13:a0:9c:d4:d6:41:a6:92:54:59:8d:f0:b3:
10:0b:d6:ac:57:a4:dc:65:42:65:db:83:8e:91:52:
80:51:37:bc:da:3a:04:1d:b6:8f:4b:73:ac:86:3c:
1c:12:56:de:96:63:a0:b4:69:03:34:23:5e:bf:54:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:11:03:C0:A4:0B:3B:90:BF:1A:27:E7:99:DA:82:15:7C:E6:25
X509v3 Authority Key Identifier:
keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:0f:bd:c4:d9:b4:fa:cb:77:f2:e8:f4:c3:e3:dd:1d:5c:
08:b0:7a:f2:0d:11:c6:88:c0:60:46:4f:18:a3:0d:2d:99:63:
0d:25:7d:0c:0a:e6:f9:f3:e1:42:91:9a:f1:0b:fd:72:4b:c9:
da:45:ca:f7:3d:ad:71:36:e1:68:e4:f5:72:4f:c1:46:7c:44:
77:db:65:21:1c:16:84:e9:46:80:02:3d:10:a1:3d:3b:b8:ba:
aa:87:78:50:6d:6b:c9:6a:f3:86:17:9f:46:56:12:cf:c2:ae:
0b:5d:cc:80:4a:7a:63:64:ec:ff:43:d6:ee:ab:80:dc:3e:6c:
59:8a:d6:dd:6f:9f:e6:c4:9f:31:6f:ed:29:35:ad:ac:87:7a:
23:1b:05:85:f4:3f:ef:c9:95:db:a9:36:62:e6:25:fc:dd:a8:
fb:35:1e:85:8b:24:64:0a:21:97:df:d8:0d:8d:b4:ab:28:3e:
e5:ce:21:9c:6d:bc:89:1d:3a:1e:1f:86:c2:c0:e5:5a:ef:a1:
81:ee:b1:38:9e:70:be:8b:b9:74:d2:9c:58:b7:e0:72:4f:35:
02:9c:99:b5:ad:96:fe:b8:f3:cf:3d:e8:d1:52:c0:b1:e7:61:
15:52:da:bb:ab:8b:85:e7:4a:25:5a:bb:2b:4b:63:dd:4e:2d:
c0:cd:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:42 2026 by rpki-client