
$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json)
Hash identifier: XCUUfQjeMoYbnhQ72GPQNO2SXNF7xGVxiQGhMGI6oiw=
Subject key identifier: 98:39:30:89:26:84:BD:95:6F:C6:C3:B5:51:21:CD:72:E5:0B:C8:A0
Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62
Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962
Certificate serial: 78BC81AF38A5F9F4926E07AF089D844428D8E6F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
Manifest number: 0114
Signing time: Mon 02 Mar 2026 04:11:48 +0000
Manifest this update: Mon 02 Mar 2026 04:06:48 +0000
Manifest next update: Thu 05 Mar 2026 11:44:48 +0000
Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=)
2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: yeT5tk0PSdt7Aja+IWphpCNveZUrZLlSK6d6tlLsUgU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl
rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bc:81:af:38:a5:f9:f4:92:6e:07:af:08:9d:84:44:28:d8:e6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962
Validity
Not Before: Mar 2 04:06:48 2026 GMT
Not After : Mar 5 11:44:48 2026 GMT
Subject: CN=983930892684BD956FC6C3B55121CD72E50BC8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:55:84:13:76:92:20:05:ed:3d:b8:13:23:
c9:a0:8a:77:34:80:e8:f1:f2:a0:7a:f8:62:3a:a4:
2a:56:e9:83:a1:84:55:5f:c5:27:89:ad:a9:ae:2d:
23:c5:96:3d:93:90:57:41:fd:de:ae:b0:63:e3:5f:
ed:db:1a:01:a4:d3:29:95:02:a2:1d:f0:98:25:80:
3a:8c:5e:f4:f9:6e:3b:0b:f8:c5:10:0c:e0:69:bf:
c4:2b:fe:28:63:4c:9a:8b:0a:53:d7:45:66:f4:ae:
3f:36:46:00:99:20:bb:09:c5:26:50:58:ac:54:56:
9b:2e:e2:32:85:b5:6e:a2:1c:92:f5:47:60:77:f5:
d3:ae:f4:34:02:5c:37:f2:8f:92:f3:6d:2a:ae:59:
1b:a8:01:67:3c:e8:9e:22:e9:c2:96:0e:f9:b4:d8:
f2:ec:e6:7d:ab:c1:ed:2e:07:84:78:03:ab:97:53:
f9:bd:e2:56:16:12:17:0b:04:8f:c7:31:56:d2:fc:
2d:5e:8f:f0:30:ea:7d:5a:b8:5e:91:a8:42:3d:ab:
d1:14:be:2e:be:79:0b:ae:35:2d:18:ea:ec:fc:66:
cb:e4:70:e7:3c:ef:db:d7:e0:f4:c0:79:53:2f:b0:
eb:8f:68:9d:a4:ee:18:83:3f:b1:9d:09:7f:11:76:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:30:89:26:84:BD:95:6F:C6:C3:B5:51:21:CD:72:E5:0B:C8:A0
X509v3 Authority Key Identifier:
keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:9e:7a:be:ce:c3:b5:53:15:41:89:cd:23:3f:e0:95:c8:
42:d8:57:8a:17:e5:a9:f4:ca:95:4b:6a:c0:1b:35:ef:69:b6:
26:53:8b:d1:03:c7:3b:64:da:a9:1e:62:73:dd:bb:72:75:4b:
f8:52:0e:09:43:3a:1e:06:57:fd:a9:04:af:31:36:af:60:53:
37:e2:40:2a:a4:aa:bd:34:ae:42:0a:5e:e8:e6:c4:86:99:33:
ce:09:93:e1:07:a8:98:f2:36:a3:11:7c:bb:90:24:ae:ff:fa:
93:59:6a:56:db:e0:3e:5d:a2:68:0f:58:9a:e0:9b:d1:95:83:
8c:43:54:be:7e:a2:2c:82:67:9e:5f:58:98:dc:82:05:4a:00:
07:69:50:86:41:85:e5:39:75:88:d5:5f:8c:e3:ae:81:22:5d:
09:d1:67:07:3f:9b:27:40:fe:26:6f:fc:ec:3e:58:37:f8:e3:
b9:55:e4:4a:7c:d1:87:2f:2b:be:b1:af:60:35:36:a9:8c:3e:
fc:65:ef:15:d5:2a:17:aa:61:31:0b:fb:d1:52:c0:df:90:e6:
4b:b3:7a:f8:f7:8e:6c:a7:72:f5:f2:07:fb:73:32:a5:aa:0f:
ad:87:f9:1e:7d:95:47:6a:c0:c7:b5:0c:49:f2:26:7f:6b:ce:
ad:0d:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:58 2026 by rpki-client