
$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json)
Hash identifier: IfcewaropVjldy667rbRWJb4FP6O43fJ2p9oHRRWG3E=
Subject key identifier: 8B:CC:31:BF:41:A9:87:5F:CB:84:91:70:73:8F:44:B6:3E:C5:0F:31
Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87
Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787
Certificate serial: 428F00F37939EFA29538AD53B52F4C8093ED9943
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
Manifest number: 0139
Signing time: Wed 15 Apr 2026 11:32:21 +0000
Manifest this update: Wed 15 Apr 2026 11:27:21 +0000
Manifest next update: Sat 18 Apr 2026 21:57:21 +0000
Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: es+PM5DHY0OEoYIZp9mFTTyGdrgFRcIfkpvHjA5og3o=)
2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: K9NpV52vuntZKpwQF+Kz1UmNJo+CR6II9fQsq0M7K5Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl
rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 21:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8f:00:f3:79:39:ef:a2:95:38:ad:53:b5:2f:4c:80:93:ed:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787
Validity
Not Before: Apr 15 11:27:21 2026 GMT
Not After : Apr 18 21:57:21 2026 GMT
Subject: CN=8BCC31BF41A9875FCB849170738F44B63EC50F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:99:8b:b7:68:aa:cb:55:a3:40:00:80:89:
e8:6c:8f:11:60:c2:ab:c5:ca:24:d3:04:ea:62:c7:
97:ff:a5:0c:9c:f1:ee:8a:60:04:25:b8:97:3e:76:
90:8e:12:2f:0f:05:38:4a:64:31:00:ac:9d:71:b0:
56:fe:8d:19:fc:60:40:54:fe:2e:bb:26:73:46:32:
78:a2:c3:ba:91:aa:64:e2:2b:52:d7:6a:ad:74:09:
3a:04:f2:31:e4:90:7c:52:96:40:7e:c2:1e:e3:7c:
38:53:30:e1:2f:89:df:15:33:67:2b:7e:b2:84:ce:
50:70:77:79:34:a4:24:15:36:50:44:c0:3b:d4:12:
15:f8:ef:b7:de:76:25:50:5b:44:6e:ef:6d:08:64:
b5:b8:1a:99:10:06:99:51:a4:72:63:b9:82:9c:99:
5f:7d:98:43:e5:8a:a3:21:2d:de:c9:6c:66:81:09:
34:c7:b9:d5:86:43:2d:31:10:8f:51:f3:37:e7:29:
57:9a:96:2f:0d:62:aa:7d:7a:9e:da:b5:9a:4f:e9:
b2:90:73:c9:3f:45:bd:88:aa:a8:7d:7a:5b:d4:f4:
66:72:5f:b1:86:ee:a5:a5:6a:fe:97:c9:ee:01:12:
15:a2:da:f9:2b:86:c8:a5:ed:df:80:4e:4c:1d:4e:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:31:BF:41:A9:87:5F:CB:84:91:70:73:8F:44:B6:3E:C5:0F:31
X509v3 Authority Key Identifier:
keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:f8:82:8b:76:86:54:0a:d4:1e:f4:30:51:1b:9a:ca:13:
31:1a:5b:53:6c:23:37:a3:d5:33:6e:13:20:e4:9e:c3:28:3a:
ba:aa:84:07:3f:01:80:3d:15:aa:88:42:89:83:71:aa:40:5f:
59:f9:d5:29:ff:fc:eb:4e:a2:40:a5:d5:cf:31:cf:70:8f:9b:
9b:82:c8:d6:8f:9a:9d:f6:8b:05:a8:be:2e:ec:c6:ca:99:0e:
e0:67:5e:d6:44:62:47:a8:91:3d:9c:df:74:bc:bb:2c:bf:09:
c8:93:e0:b8:b1:90:3b:23:7f:52:03:e6:83:83:37:58:f9:c2:
e2:de:d5:97:b1:4a:31:b5:e7:19:52:50:c0:f1:e3:33:fc:6f:
7d:cf:f5:a5:76:a8:b4:e8:3d:78:9b:b4:1c:80:91:24:d2:f8:
06:dd:88:ac:69:0c:86:bc:ff:4d:90:d9:a4:db:2b:2b:fc:f9:
f4:05:96:80:3e:39:ce:e9:c3:5d:56:eb:d5:0d:92:aa:93:7d:
44:fc:31:63:66:a7:d2:89:8f:43:7c:32:95:ee:4d:9b:ae:01:
16:7a:03:b6:36:47:ab:52:60:3f:98:db:29:57:18:73:c2:60:
6a:5a:bc:de:ca:88:6c:7c:91:e1:43:5b:6b:a9:4e:14:03:9b:
a6:2e:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:51 2026 by rpki-client