
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier: ux+DoUDsVnn1UOOtEnvBQIeJj/5nbF2uQMnWeEPkROw=
Subject key identifier: F6:D4:F9:4C:4C:1E:EE:6C:8E:89:29:44:5E:EB:E0:91:5E:D7:F8:53
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 78B989B717E704AE66C214ECAB04FF087C1B4E2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number: 0D95
Signing time: Sun 01 Mar 2026 02:02:06 +0000
Manifest this update: Sun 01 Mar 2026 01:57:06 +0000
Manifest next update: Wed 04 Mar 2026 05:46:06 +0000
Files and hashes: 1: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
2: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: CiJpoPdlthB7wcMIVbApp+pNp838J8X4+LKECP0zd+k=)
3: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
4: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
5: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
6: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
7: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
8: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
9: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
10: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
11: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
12: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
13: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
14: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
15: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
16: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b9:89:b7:17:e7:04:ae:66:c2:14:ec:ab:04:ff:08:7c:1b:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Mar 1 01:57:06 2026 GMT
Not After : Mar 4 05:46:06 2026 GMT
Subject: CN=F6D4F94C4C1EEE6C8E8929445EEBE0915ED7F853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:34:a9:11:ae:61:da:1e:c1:eb:4d:35:ab:
29:c4:c0:ea:e3:e9:83:5d:c4:40:9c:e1:b9:c2:30:
08:ad:a4:17:f2:b0:a9:4c:1c:c7:f5:e0:23:9d:3a:
35:30:fd:2a:06:ec:4f:02:d0:d4:14:de:11:b4:2e:
bb:36:fa:33:5e:cc:95:e3:40:5e:31:7d:c5:ab:e0:
18:6c:d0:96:6d:bc:ae:80:5b:d5:97:2f:06:f8:ac:
e9:c4:48:c0:68:1e:58:49:7c:56:05:e2:e6:01:60:
26:be:4c:a1:04:b0:47:b6:5b:e1:a3:fa:10:0b:6f:
a1:60:3c:c8:ee:1a:ea:c1:06:cb:89:13:9b:80:52:
4f:ca:68:ee:5c:e7:0f:30:d2:bd:b8:2d:35:10:02:
d3:1c:a2:35:ea:fa:56:e2:5f:21:48:51:3b:9f:5f:
4f:80:50:a0:90:24:24:db:33:bd:6a:8a:cf:ef:ec:
8a:b3:5c:a3:94:fe:b6:48:d4:f3:88:54:96:1f:bc:
e9:c9:4d:03:22:dc:e4:c9:e9:b2:15:3e:9a:60:91:
04:33:91:db:d9:24:ef:ae:98:d7:45:d3:29:60:dd:
2b:23:06:a1:18:ae:db:78:75:c1:32:ba:be:13:08:
9c:5a:b0:a6:89:03:fe:50:04:52:73:7a:dd:86:1a:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:F9:4C:4C:1E:EE:6C:8E:89:29:44:5E:EB:E0:91:5E:D7:F8:53
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ad:48:5c:3a:d0:85:eb:f6:a8:6b:21:7e:20:c2:e3:84:b7:
7b:25:c8:80:41:cf:3a:60:4c:94:81:9e:f3:f9:ff:65:f9:7d:
f2:93:d9:e7:e8:d2:69:d9:62:81:53:73:9e:cb:2c:a4:86:b9:
76:77:a0:57:3d:e8:2e:da:b1:24:31:5b:8d:62:27:f5:bf:1d:
ac:c5:8e:a9:94:68:73:6b:3a:05:4d:ae:dc:aa:0b:76:f3:73:
ad:e5:e3:99:93:96:ae:84:4c:36:25:4b:ef:08:69:73:0a:e1:
c2:5a:f7:cc:3a:8c:69:a5:0b:bb:fb:b8:4c:68:ac:c1:50:cd:
0b:fd:84:b4:c0:4a:0a:0f:33:3e:97:22:00:31:9e:ab:e0:cd:
91:29:2e:8c:02:0f:4c:5e:3f:8c:6f:d7:c0:b8:4c:67:94:be:
fa:af:0a:ee:5e:fc:54:7b:5d:fb:a8:74:27:6b:c8:40:d7:56:
6a:25:60:99:aa:b7:2e:ce:c6:5a:4c:b7:eb:d6:24:68:ae:f2:
07:85:b9:cf:23:ef:8a:aa:b1:db:b3:19:16:68:da:69:f1:d4:
a4:09:b3:ea:ca:63:0d:d3:8d:c8:03:0a:24:b5:55:63:ff:54:
f6:c1:65:34:9e:b3:71:66:95:38:68:0c:68:d9:83:5b:68:2e:
d0:e4:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:58 2026 by rpki-client