
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json)
Hash identifier: ybh4MJXJiRMuGdzQWxKtqFlAO+RKx0Q9bPVBQClkjmk=
Subject key identifier: 6B:A1:A1:48:EE:3E:D1:21:FE:04:E2:CC:5F:89:2B:41:80:9E:45:5B
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial: 067C82863C328110D1D464A3304F505446D9E9F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
Manifest number: 0255
Signing time: Sat 18 Apr 2026 22:30:52 +0000
Manifest this update: Sat 18 Apr 2026 22:25:52 +0000
Manifest next update: Tue 21 Apr 2026 23:19:52 +0000
Files and hashes: 1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=)
2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: OK4+ZGPiNK9M0LTKfhfnCli3YFayVooWCEXXaTNNICY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 23:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7c:82:86:3c:32:81:10:d1:d4:64:a3:30:4f:50:54:46:d9:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Validity
Not Before: Apr 18 22:25:52 2026 GMT
Not After : Apr 21 23:19:52 2026 GMT
Subject: CN=6BA1A148EE3ED121FE04E2CC5F892B41809E455B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:64:54:86:e9:93:52:a9:ea:5e:07:f6:24:
a4:73:e5:1c:d2:5c:3a:47:f0:96:c1:0f:88:3f:61:
ad:9f:85:6f:0e:f3:f0:68:34:cc:99:58:b2:4b:d1:
d3:4a:92:81:ba:d7:1f:00:5f:bb:69:36:19:03:cc:
2a:ff:b8:4f:75:62:00:4b:67:36:97:da:ca:14:8b:
a6:8e:bb:f2:f0:40:cf:e9:12:08:ee:55:d9:be:47:
fc:ee:e8:d4:29:d5:8b:00:24:c9:d1:ed:e3:39:69:
05:4b:24:95:33:b2:b8:20:b5:d2:2e:6a:a5:39:15:
c5:fd:b9:ac:ec:fd:de:22:97:6e:30:73:98:23:06:
d0:91:73:48:d9:48:2b:06:b9:2e:4a:f4:85:c8:5c:
54:c7:f2:9e:06:db:c9:ab:3a:2f:d7:6f:f3:9e:40:
60:79:5c:2d:09:a8:d9:63:88:8c:fb:3e:44:2a:ac:
4f:55:17:0d:4f:1c:e8:07:d9:9a:c0:86:1b:85:59:
e0:28:bf:61:f0:e4:c1:03:cc:ce:cb:a0:15:7c:b5:
15:ef:d7:52:4c:02:d2:f7:8d:21:50:08:e7:51:28:
49:66:f3:2c:85:25:50:61:31:d7:39:b1:22:cc:df:
b8:1e:bc:ff:1e:69:d1:72:3a:07:d9:2d:8a:0b:23:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:A1:48:EE:3E:D1:21:FE:04:E2:CC:5F:89:2B:41:80:9E:45:5B
X509v3 Authority Key Identifier:
keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:24:36:a9:61:16:bf:b6:c5:fb:5c:79:4c:7b:6f:e6:84:
49:60:3c:cc:58:03:75:da:a4:89:df:f8:3a:cd:7b:ce:8c:02:
bd:7d:b9:42:13:78:0f:77:97:b5:3b:c7:cc:4e:91:6e:a9:44:
52:31:29:88:4f:1c:45:d0:71:d2:07:1e:b1:dd:d7:93:a3:26:
93:0d:87:30:18:3b:ff:fa:f7:cb:06:c2:f8:7b:5c:26:a6:aa:
64:c1:e7:74:1f:24:4e:46:51:f9:14:39:07:05:bb:62:c2:ec:
3c:6b:6d:bd:ed:83:83:40:60:d5:9e:cc:06:56:d0:15:60:9b:
10:79:96:cf:62:bf:70:36:22:ea:08:69:fc:f6:cf:aa:d0:86:
9a:bb:bd:9b:97:6e:8d:93:30:35:ab:8d:de:a3:de:f4:00:a3:
18:48:e5:f6:6f:5a:f2:55:50:44:4b:45:8c:f2:93:ce:eb:d7:
5a:e3:7c:d4:7c:1c:f1:9f:d5:f5:31:38:38:32:78:45:b3:a9:
30:39:be:67:42:a5:5c:61:e0:14:b5:79:88:87:3a:f0:d7:0b:
6b:df:a2:33:3d:c4:33:1a:af:7c:ca:b8:95:37:5b:3d:ca:85:
ad:5c:a8:dc:0c:45:89:36:14:ed:0d:af:39:2e:52:a3:bd:d1:
25:42:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:49 2026 by rpki-client