
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json)
Hash identifier: 2zY8mWnOvbD7TD1+HiCDk7kdM/fdZjbQfTvNCtGH37E=
Subject key identifier: 74:9B:AF:76:C8:6F:24:44:09:84:49:E0:A1:54:BA:A1:F9:7B:E3:B5
Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Certificate serial: 13E8E5235C06BF9EFD7399FCF942DEE959EFE414
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
Manifest number: 01B3
Signing time: Fri 27 Feb 2026 19:00:40 +0000
Manifest this update: Fri 27 Feb 2026 18:55:40 +0000
Manifest next update: Tue 03 Mar 2026 04:31:40 +0000
Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=)
2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: KY0QNkzibCDdRGRXT0MrQR257ACT1zvGbq1ZEIbWvHI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e8:e5:23:5c:06:bf:9e:fd:73:99:fc:f9:42:de:e9:59:ef:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Validity
Not Before: Feb 27 18:55:40 2026 GMT
Not After : Mar 3 04:31:40 2026 GMT
Subject: CN=749BAF76C86F2444098449E0A154BAA1F97BE3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:4c:ba:81:d0:53:4f:04:a6:44:1b:e3:73:
27:50:e0:a6:17:43:93:aa:76:ab:da:6b:2b:3e:d0:
f6:53:3d:be:45:5e:b7:23:fd:a2:2b:5f:44:06:a4:
ee:2b:0d:91:6f:85:ab:0e:98:a2:5f:21:d7:12:57:
54:d8:c3:27:11:54:7f:26:ed:3c:e5:80:9a:05:3b:
75:d1:03:6c:70:a0:1c:d6:cc:4c:97:60:21:59:b8:
a8:a9:62:2c:07:55:4e:f0:df:58:81:1c:95:fd:57:
36:af:1f:22:4a:ca:64:a2:3a:bd:8d:8a:eb:93:c4:
ae:e4:88:4f:e2:0e:55:13:c2:33:b4:15:f4:10:c4:
9b:68:e3:c3:79:a2:12:dd:91:50:a4:06:46:1c:bd:
70:11:6a:39:fc:c5:4e:bd:e0:0c:7a:ea:bf:ab:d6:
82:fd:27:fe:99:f6:39:ee:52:e4:18:f9:24:28:4a:
2e:26:cb:7e:ca:2a:f8:15:1a:f9:aa:30:83:d0:cd:
9b:f0:76:e5:66:d0:2a:e1:d1:ff:3c:da:0d:0d:e4:
78:fe:b6:47:95:3b:84:88:8b:cf:93:b4:b1:85:86:
fd:b0:4b:ff:ba:f3:59:e1:a5:a4:91:ae:94:f0:59:
c5:66:be:bb:8b:29:58:98:bf:66:e0:ee:1a:48:1b:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:AF:76:C8:6F:24:44:09:84:49:E0:A1:54:BA:A1:F9:7B:E3:B5
X509v3 Authority Key Identifier:
keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c1:e6:8a:27:40:1f:92:ac:5e:21:d7:ff:36:74:4d:14:6b:
56:a9:98:d3:42:cd:f1:6c:c3:91:b2:8c:4e:cc:99:44:b1:72:
b9:73:ab:08:6a:b2:31:16:b5:ab:a6:c8:8c:8a:d2:de:88:00:
07:bb:55:fc:99:38:ff:e2:ff:ff:57:ae:5a:e9:f5:7e:ec:43:
65:28:d8:cc:12:40:cc:82:52:5f:0e:b4:46:45:fa:1b:b1:90:
44:e8:9b:c3:e8:16:bf:e9:af:76:ee:33:3c:2f:44:da:75:1e:
b5:e9:c9:5b:b7:ed:d8:81:9c:9a:03:f8:94:d2:e2:84:42:ac:
d2:7a:38:6d:36:b7:b2:3a:81:c0:65:44:86:65:52:da:23:f7:
f7:51:eb:84:b4:0c:43:b2:10:69:c2:5e:e4:e6:98:94:fd:b9:
bf:41:98:37:f8:2f:d9:9b:b7:d0:ab:46:40:94:44:24:54:ee:
b9:ee:4f:af:28:3e:38:e5:8b:fe:d6:ef:b1:6f:8c:f5:54:f3:
90:a8:d2:d8:fb:97:27:ad:c6:89:f8:51:72:cb:6b:b0:a7:b0:
fc:d4:92:39:8b:e1:fb:bb:47:5b:7a:5b:30:9c:5a:6b:6a:c2:
b8:30:cd:5f:f2:04:b1:98:ae:72:96:52:ae:b4:c5:65:51:f2:
bb:fd:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:19 2026 by rpki-client