
$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier: s7eZ7H9uXb9giAkGnbShNRUhClVgG8WHk6jx+aL8LCs=
Subject key identifier: 13:DF:C0:EE:50:CF:67:63:6A:A6:1D:CC:5A:1B:16:7D:FE:2A:7F:24
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial: 3FC1E2CE34922E845C3C8D2E6B697E0A794D92D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number: 022A
Signing time: Sat 28 Feb 2026 12:31:26 +0000
Manifest this update: Sat 28 Feb 2026 12:26:26 +0000
Manifest next update: Tue 03 Mar 2026 17:21:26 +0000
Files and hashes: 1: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
2: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
3: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: MapDIpfyfkIsXIkSVVjyoERLtIlU7GFsA6nUfNMGc30=)
4: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
5: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
6: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
7: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
8: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
9: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c1:e2:ce:34:92:2e:84:5c:3c:8d:2e:6b:69:7e:0a:79:4d:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Validity
Not Before: Feb 28 12:26:26 2026 GMT
Not After : Mar 3 17:21:26 2026 GMT
Subject: CN=13DFC0EE50CF67636AA61DCC5A1B167DFE2A7F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:62:10:b5:e9:2c:23:26:63:c4:88:59:8e:
5d:fa:89:ea:e6:27:c2:6c:be:ca:50:ca:80:d7:3a:
4f:c3:83:2c:6c:aa:5c:3f:2f:25:78:3c:21:67:8e:
f1:48:60:fe:df:24:98:90:f1:cb:85:70:44:4c:1b:
b1:66:61:7d:cc:6b:f7:e1:35:2f:ea:a2:50:16:ea:
90:e4:74:35:09:7d:96:0d:02:c6:a4:41:85:a2:84:
2c:1b:d5:17:5c:ff:cb:82:1c:49:43:96:06:01:8e:
d0:d0:18:d5:77:a1:46:a2:a9:46:19:01:66:3f:94:
cf:fb:7a:4e:0c:16:5a:0a:1c:ea:77:a1:06:b2:32:
a4:9b:19:da:58:d7:8d:f6:5d:66:c4:7d:6f:c6:51:
41:2c:bd:de:90:03:5b:b5:5a:a0:01:2e:0a:0d:4f:
b4:1a:5c:34:7e:4d:cb:cc:d2:f4:36:09:43:20:4e:
c6:38:00:fa:6f:ba:48:f7:30:15:4f:88:10:d8:5d:
19:26:c2:23:a1:f1:9d:f5:97:02:a7:66:4a:6d:29:
8a:89:ac:c6:1e:6c:4c:18:7b:33:d6:65:07:47:f3:
74:10:66:6b:f5:b4:e3:c4:91:af:72:14:0f:28:96:
bd:14:71:10:ca:26:f7:6b:76:c2:6e:a0:27:ca:e7:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:C0:EE:50:CF:67:63:6A:A6:1D:CC:5A:1B:16:7D:FE:2A:7F:24
X509v3 Authority Key Identifier:
keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:65:f3:73:42:33:d1:bb:0c:dc:c7:48:99:40:93:29:54:5a:
13:5b:d7:d4:4b:d1:38:4f:84:f3:e6:c3:f2:85:43:6d:3e:f1:
20:91:a8:6a:ae:e8:e8:09:0a:29:fd:57:65:c2:9c:d7:e8:bd:
44:26:fb:d7:54:3c:b9:fe:d5:4f:a8:0b:a2:3e:63:9e:c4:92:
28:f4:3d:ca:a8:17:73:e2:1f:50:fe:ab:94:9a:61:6f:14:c4:
d0:92:bd:74:56:ad:85:94:80:14:b0:07:bc:8e:8e:f7:0b:15:
19:a7:ed:fd:21:14:d7:df:f3:12:c5:6b:8f:16:9a:e7:96:e0:
27:76:0e:0e:9f:0f:f1:2c:b7:13:ca:a6:ad:71:4f:9f:ba:d2:
d7:50:f2:8f:cb:41:4a:9a:5f:12:2e:3f:a7:ae:06:44:eb:d4:
25:b6:8c:15:dc:5d:b0:59:c3:d7:e5:4c:50:10:b9:19:d5:73:
58:70:9b:e0:50:e8:b6:db:0f:ce:3b:c4:95:2a:4a:b6:1d:bb:
12:e5:bb:44:04:6f:24:49:0a:5f:7a:c1:16:fa:a3:47:04:fc:
e9:92:32:a3:8a:0e:f2:29:a4:1e:b8:06:18:9d:b1:f6:25:c5:
21:eb:6c:5f:92:13:9f:fe:3a:48:9a:9c:7d:47:05:39:f8:85:
7c:31:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:08 2026 by rpki-client