
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json)
Hash identifier: OWFY4CMMg6gt14QJaQoSGE2u4ciMKDdvWjjw55vA4ek=
Subject key identifier: 99:29:B1:7A:E0:65:6A:FD:9B:9F:EB:96:B4:0E:BA:9E:8F:FF:CA:67
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial: 1E65A127A336298100C9881A6F795F649D08300B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
Manifest number: 0264
Signing time: Sat 28 Feb 2026 04:02:38 +0000
Manifest this update: Sat 28 Feb 2026 03:57:38 +0000
Manifest next update: Tue 03 Mar 2026 10:21:38 +0000
Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=)
2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=)
3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=)
4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: S64Q0+NezJtdPbpt9eumP+mb0KsVAoheGDNrj5S6dZM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:65:a1:27:a3:36:29:81:00:c9:88:1a:6f:79:5f:64:9d:08:30:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Validity
Not Before: Feb 28 03:57:38 2026 GMT
Not After : Mar 3 10:21:38 2026 GMT
Subject: CN=9929B17AE0656AFD9B9FEB96B40EBA9E8FFFCA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:4e:d0:8d:bf:ed:79:e3:cf:8a:94:b7:aa:
f1:dc:a1:1e:8d:f3:2d:91:f2:16:a9:ed:bd:3f:46:
6e:6e:e7:0b:1d:8f:1c:98:b2:35:6b:ad:19:6f:48:
0d:80:be:45:34:1f:eb:b6:5d:ac:8b:6a:65:51:f4:
97:12:5e:3a:51:17:bc:c8:b7:e6:53:e8:75:ea:15:
26:77:6e:0f:ce:93:3b:26:9c:10:d6:47:86:22:bb:
cd:09:33:ee:00:ec:ad:43:0c:28:77:53:a6:d7:8c:
f7:36:10:0b:e6:1a:10:e0:6a:a1:0f:2b:ec:bb:cd:
a7:dd:65:78:5b:ab:ce:99:d0:60:da:f4:3f:df:07:
ae:a1:e3:fc:f9:1b:fb:f8:08:a9:74:b2:96:aa:6a:
0c:29:80:75:27:bf:81:0a:9f:95:06:c1:74:9f:28:
79:7d:7c:20:ff:10:b4:a9:31:20:2f:93:e6:19:ce:
5c:66:0b:1e:2a:5c:b7:8e:77:4e:78:8f:58:f7:b0:
9b:2d:c6:db:30:cc:11:94:45:15:2e:b9:6a:99:20:
e8:b9:33:0d:38:2c:1c:d5:a1:28:74:1a:f7:64:40:
33:56:1a:eb:b4:d7:dc:d3:fc:e9:7a:97:0f:60:db:
b0:c3:d1:2f:38:bc:ac:35:a7:7f:96:d2:4e:4e:39:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:B1:7A:E0:65:6A:FD:9B:9F:EB:96:B4:0E:BA:9E:8F:FF:CA:67
X509v3 Authority Key Identifier:
keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:50:fd:7b:c7:07:02:a1:a0:e5:d9:40:fd:30:f4:c4:35:
54:90:5e:09:59:36:eb:a3:2f:8d:a2:59:f9:10:11:11:86:fe:
75:e2:c8:ac:f1:36:08:86:20:c0:44:61:54:87:bf:55:da:71:
48:0d:b6:38:ad:44:d7:4c:a7:e7:44:12:0d:3d:36:a0:d1:39:
f7:4f:0e:67:58:49:33:9b:ef:c5:95:a6:78:f0:30:7c:46:de:
ea:55:56:e5:0d:41:9e:c5:60:49:e1:70:7c:86:58:da:38:ba:
db:da:5e:66:a7:d2:8e:3d:dc:29:05:d4:2a:9a:e1:cd:65:23:
08:91:b8:19:0d:0e:31:8e:c9:e2:1b:52:7d:6a:20:88:0b:47:
4f:32:b4:8c:58:55:dd:07:81:6d:28:b2:d7:88:09:37:16:d0:
15:b5:d2:04:19:aa:d3:cf:2e:fb:23:f9:d2:df:74:de:53:77:
fd:9e:92:19:67:9e:f5:70:a5:68:71:8c:6e:88:30:6a:ae:c5:
92:dd:56:51:50:82:87:42:8e:5d:d5:5d:ca:d5:38:0a:db:60:
e4:d1:c1:5e:72:64:f0:01:c0:fd:73:80:a7:b6:f9:f2:8a:73:
98:3b:b0:62:64:46:9a:47:cb:d4:15:e3:dc:b9:8c:26:a6:28:
84:93:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:06 2026 by rpki-client