
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json)
Hash identifier: YQry4ulJ31vmMgIZ0GZxZ3NjZ60f3QhoDZXvdEoNXTw=
Subject key identifier: 4C:8A:06:29:67:1B:B3:CC:BF:B1:F5:45:A9:81:E3:BD:8D:98:86:D3
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial: 4A1D008FDA8380E0CB437B8E24638B6A40B9F2FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
Manifest number: 023F
Signing time: Sat 28 Feb 2026 06:50:50 +0000
Manifest this update: Sat 28 Feb 2026 06:45:50 +0000
Manifest next update: Tue 03 Mar 2026 18:34:50 +0000
Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=)
2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: 3B23t1vh+5zMV3KAoPFWp/QGCrbI7orh+ZvyI+ebA04=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1d:00:8f:da:83:80:e0:cb:43:7b:8e:24:63:8b:6a:40:b9:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Validity
Not Before: Feb 28 06:45:50 2026 GMT
Not After : Mar 3 18:34:50 2026 GMT
Subject: CN=4C8A0629671BB3CCBFB1F545A981E3BD8D9886D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:06:d5:7d:0c:c2:dc:86:50:fa:af:7f:9a:
22:33:58:0d:42:55:8e:f3:e7:69:41:6e:c9:65:c1:
8d:e8:16:ba:df:22:09:f9:07:de:4f:7e:72:a1:bc:
97:aa:a1:3e:2c:8d:a7:a4:cd:f2:aa:3a:a2:27:cf:
fc:60:de:de:5e:46:18:a5:66:9f:34:99:f2:04:52:
52:c9:cb:f3:f8:da:e1:10:be:c5:7d:73:bf:b4:05:
84:83:21:56:5e:d6:61:85:7d:ba:57:31:9e:00:f5:
aa:51:39:80:5a:09:37:27:e2:1e:31:b8:01:12:c6:
5f:05:24:38:a5:0b:e1:72:a3:52:c9:47:0c:f8:2b:
dd:38:51:b4:90:19:1b:c3:8f:c5:c9:62:21:5d:f0:
2a:98:eb:91:66:a9:e5:80:fc:e5:8b:c0:27:93:0b:
a0:4c:17:d3:ad:6f:f9:12:04:4c:22:ce:77:e6:db:
14:dc:af:bd:2c:3e:c6:1d:bc:d2:ab:5c:11:b3:0f:
70:f1:7a:61:64:38:7c:52:e1:e7:d4:7d:ba:11:9f:
03:c3:a6:a5:4b:33:bc:f7:00:56:67:8e:89:29:ac:
04:21:88:01:81:6d:f4:b9:7a:d1:c4:56:aa:15:0c:
75:73:1b:21:ea:7f:ee:f6:20:aa:8b:68:a3:01:8d:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:06:29:67:1B:B3:CC:BF:B1:F5:45:A9:81:E3:BD:8D:98:86:D3
X509v3 Authority Key Identifier:
keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:27:d3:85:72:32:e6:a9:6d:ab:0a:6b:61:17:92:fc:ca:
1f:02:55:ce:84:ed:ad:6e:ab:83:b3:70:63:23:e3:31:60:56:
ce:a8:21:1d:44:9c:a9:cf:9d:4b:73:0c:7a:3f:8e:01:76:c8:
13:69:78:f3:9a:2c:a1:c0:93:d8:97:e1:7f:df:1c:a1:e5:18:
54:1c:bd:1c:8e:5a:6d:2d:56:64:4a:e6:e4:8f:73:e7:fa:d7:
3b:01:4d:34:8f:62:5b:58:a7:df:ea:af:27:9a:8f:a0:4f:c6:
01:76:bd:c3:38:7e:9d:00:22:23:66:81:05:02:46:3b:07:95:
f0:8d:35:e7:7c:b0:41:2b:20:c3:79:c6:c8:db:12:47:93:13:
71:01:6c:ae:41:26:d8:3e:43:c4:e9:c4:6c:9c:18:a3:34:8d:
80:9d:c1:36:1b:de:db:eb:b6:f6:e1:6c:8c:3d:b4:b1:0c:53:
f1:f0:be:40:9c:58:b1:89:b2:30:f8:37:b6:b8:4d:6c:0b:41:
aa:65:9c:23:a2:e8:87:0f:88:c9:b7:c0:4c:9c:ab:44:d3:5e:
72:a7:43:d1:74:f4:ba:18:c6:94:d5:b2:db:94:01:c4:4e:14:
d5:2e:33:c9:e0:57:c9:58:01:df:b4:20:d7:bc:da:0c:95:5f:
66:33:a2:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSh0Aj9qDgODLQ3uOJGOLakC58vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD
RDA1MjRFQjAeFw0yNjAyMjgwNjQ1NTBaFw0yNjAzMDMxODM0NTBaMDMxMTAvBgNV
BAMTKDRDOEEwNjI5NjcxQkIzQ0NCRkIxRjU0NUE5ODFFM0JEOEQ5ODg2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUgbVfQzC3IZQ+q9/miIzWA1C
VY7z52lBbsllwY3oFrrfIgn5B95PfnKhvJeqoT4sjaekzfKqOqInz/xg3t5eRhil
Zp80mfIEUlLJy/P42uEQvsV9c7+0BYSDIVZe1mGFfbpXMZ4A9apROYBaCTcn4h4x
uAESxl8FJDilC+Fyo1LJRwz4K904UbSQGRvDj8XJYiFd8CqY65FmqeWA/OWLwCeT
C6BMF9Otb/kSBEwiznfm2xTcr70sPsYdvNKrXBGzD3DxemFkOHxS4efUfboRnwPD
pqVLM7z3AFZnjokprAQhiAGBbfS5etHEVqoVDHVzGyHqf+72IKqLaKMBjdJfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTIoGKWcbs8y/sfVFqYHjvY2YhtMwHwYDVR0j
BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4
NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1
MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0
MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0
QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABr3J9OFcjLmqW2rCmthF5L8yh8CVc6E7a1u
q4OzcGMj4zFgVs6oIR1EnKnPnUtzDHo/jgF2yBNpePOaLKHAk9iX4X/fHKHlGFQc
vRyOWm0tVmRK5uSPc+f61zsBTTSPYltYp9/qryeaj6BPxgF2vcM4fp0AIiNmgQUC
RjsHlfCNNed8sEErIMN5xsjbEkeTE3EBbK5BJtg+Q8TpxGycGKM0jYCdwTYb3tvr
tvbhbIw9tLEMU/HwvkCcWLGJsjD4N7a4TWwLQaplnCOi6IcPiMm3wEycq0TTXnKn
Q9F09LoYxpTVstuUAcROFNUuM8ngV8lYAd+0INe82gyVX2Yzol4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:01 2026 by rpki-client