
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json)
Hash identifier: GSIRprEAWEHKHHn4H4iSID+Si7V6QfUzOKKCgdu44Ig=
Subject key identifier: C8:EB:B9:3D:D3:8E:9E:72:1B:FC:45:4C:56:69:8A:1C:73:6F:40:08
Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Certificate serial: 0206C4D2D1420E819F4B8F36E6123B16E81A15B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
Manifest number: 0260
Signing time: Wed 15 Apr 2026 14:32:10 +0000
Manifest this update: Wed 15 Apr 2026 14:27:10 +0000
Manifest next update: Sat 18 Apr 2026 21:20:10 +0000
Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: zXNm7Oe9WKygHDEWp5r/KW4LvF9FRVgLJSgb9+tVZdQ=)
2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: xuAut1zg7BUDWZrHPH1gYVQp+fcz/Ka10ymlG/jEuHI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl
rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 21:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:06:c4:d2:d1:42:0e:81:9f:4b:8f:36:e6:12:3b:16:e8:1a:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA
Validity
Not Before: Apr 15 14:27:10 2026 GMT
Not After : Apr 18 21:20:10 2026 GMT
Subject: CN=C8EBB93DD38E9E721BFC454C56698A1C736F4008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:93:84:74:8e:68:fc:b6:fc:81:7c:47:a4:
90:1e:46:93:dc:5a:77:52:16:cd:99:2a:4c:b5:c7:
53:4f:f3:70:56:61:01:53:44:c6:fc:bc:61:25:aa:
90:cf:af:f7:34:d9:fe:2f:19:24:3a:bd:b9:7e:52:
c4:fa:68:f2:36:fc:b5:a7:f6:8a:b0:7d:41:59:f7:
7d:11:cd:66:cd:04:b5:96:ea:cb:03:a2:74:ee:51:
99:f7:1a:97:b1:7f:8a:f8:13:e7:74:1b:8c:58:76:
1d:6c:59:7a:8c:c0:4b:d9:bb:d8:f7:b4:a6:ff:23:
d7:8c:9e:77:95:97:8d:9f:79:9a:b5:20:1c:20:24:
07:01:4f:41:20:30:da:c3:9e:76:f5:4a:6e:37:c2:
b9:a0:75:e6:27:81:23:67:42:df:6b:4c:a4:44:2f:
32:f6:ff:7f:96:32:d3:41:4a:51:e6:05:46:cb:cf:
f9:54:a4:8e:52:de:05:42:51:e0:32:b3:b7:16:e4:
6f:f4:fc:f7:db:d7:4b:e8:3b:b0:01:45:27:c1:27:
eb:2b:69:1f:cf:5a:58:56:f1:74:2d:97:20:a7:7a:
88:70:52:d5:dc:d2:19:cb:90:26:c2:b8:08:c7:fd:
d4:78:b1:08:f0:6e:c3:dd:fe:ed:8a:aa:44:f6:d7:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:B9:3D:D3:8E:9E:72:1B:FC:45:4C:56:69:8A:1C:73:6F:40:08
X509v3 Authority Key Identifier:
keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:8a:17:55:bb:56:dd:d4:2f:29:d6:02:84:26:75:cf:07:
79:c3:db:09:75:c7:8a:1a:7e:6b:61:7c:d8:4b:cb:0a:ae:fd:
c1:11:32:f4:90:e0:ae:48:67:80:60:aa:7e:4b:32:31:ae:46:
92:20:c3:62:e9:68:ae:ae:e9:e1:9f:ff:6b:ee:7a:c9:a3:80:
42:8a:8b:22:4c:ab:01:1e:95:b7:09:19:06:40:5a:de:b1:b3:
49:bd:a5:03:12:40:86:b4:7d:71:1e:fd:e8:2a:12:ff:4f:51:
c5:99:bd:9b:5f:6c:cc:66:39:00:a7:fb:1d:91:4f:27:a2:75:
f5:da:31:97:b5:5b:e8:9d:81:34:d6:07:8c:ee:86:e5:3b:01:
3f:8f:f0:97:95:d2:ed:64:00:d7:a9:ff:07:47:7f:a6:a4:bc:
d2:61:7e:ff:4e:19:0e:6b:2e:ed:7b:49:6b:42:2d:88:ed:09:
20:1b:b1:58:ec:7d:01:b0:a5:c7:7c:df:a9:4f:eb:6a:48:8b:
9f:66:aa:93:e3:b9:18:1b:af:a5:7f:bd:aa:85:64:ee:fa:3d:
de:8b:61:bb:de:04:5d:b0:81:7b:e4:a3:8f:f3:50:18:75:31:
4c:52:21:38:90:5f:63:e8:03:4e:7e:f2:f1:eb:c7:6d:71:2f:
7e:6d:08:a8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAgbE0tFCDoGfS4825hI7FugaFbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx
MUUzRTdGQTAeFw0yNjA0MTUxNDI3MTBaFw0yNjA0MTgyMTIwMTBaMDMxMTAvBgNV
BAMTKEM4RUJCOTNERDM4RTlFNzIxQkZDNDU0QzU2Njk4QTFDNzM2RjQwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN85OEdI5o/Lb8gXxHpJAeRpPc
WndSFs2ZKky1x1NP83BWYQFTRMb8vGElqpDPr/c02f4vGSQ6vbl+UsT6aPI2/LWn
9oqwfUFZ930RzWbNBLWW6ssDonTuUZn3Gpexf4r4E+d0G4xYdh1sWXqMwEvZu9j3
tKb/I9eMnneVl42feZq1IBwgJAcBT0EgMNrDnnb1Sm43wrmgdeYngSNnQt9rTKRE
LzL2/3+WMtNBSlHmBUbLz/lUpI5S3gVCUeAys7cW5G/0/Pfb10voO7ABRSfBJ+sr
aR/PWlhW8XQtlyCneohwUtXc0hnLkCbCuAjH/dR4sQjwbsPd/u2KqkT218DpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyOu5PdOOnnIb/EVMVmmKHHNvQAgwHwYDVR0j
BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB
MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz
RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy
YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE
QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKQqihdVu1bd1C8p1gKEJnXPB3nD2wl1x4oa
fmthfNhLywqu/cERMvSQ4K5IZ4Bgqn5LMjGuRpIgw2LpaK6u6eGf/2vuesmjgEKK
iyJMqwEelbcJGQZAWt6xs0m9pQMSQIa0fXEe/egqEv9PUcWZvZtfbMxmOQCn+x2R
TyeidfXaMZe1W+idgTTWB4zuhuU7AT+P8JeV0u1kANep/wdHf6akvNJhfv9OGQ5r
Lu17SWtCLYjtCSAbsVjsfQGwpcd836lP62pIi59mqpPjuRgbr6V/vaqFZO76Pd6L
YbveBF2wgXvko4/zUBh1MUxSITiQX2PoA05+8vHrx21xL35tCKg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:23 2026 by rpki-client