
$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier: +uXTVtu6/+6fC/Btjc5bGyfzqiW9v3KMWmNOVOiQn5E=
Subject key identifier: 19:56:9B:00:45:05:82:5D:33:19:0D:DD:CD:ED:BD:B9:F3:B6:BE:89
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial: 1632B3B5313E98D7F9570282A4156E0BAE9ACF2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number: 026F
Signing time: Thu 16 Apr 2026 11:51:14 +0000
Manifest this update: Thu 16 Apr 2026 11:46:14 +0000
Manifest next update: Sun 19 Apr 2026 15:19:14 +0000
Files and hashes: 1: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: vBsCZpSLsG8TyyHzBprL3UJo7rlFoPAmHEwc5gmedk8=)
2: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: FxTnIw5vjqoZ72+CAYm/fpZrJZrtFwulq6Su/flXW3g=)
3: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: EposWqNhqTBV+ThXQA6xbonlZoMNLwQUM8Vh9hXvDGM=)
4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: aiEQUHBNmT2EYIMF6U+PL/eCCGa3TZkcETojuN2/9y0=)
5: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: 8q9FunYMiC4JUDNMrbMunq+kGGfV2MdAlwFbpWvTdhQ=)
6: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: +9kGEt9FMbzyaqnQ3HEkWMHJN2f1S3notrK/o+QNX2M=)
7: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: hjm0LUhYDn2I8CxksukPnoNnaeAZf+/VHTSQqPF6sIo=)
8: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=)
9: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: mNmdnMu5oYSkMpGBbuVRpLEZatNmYnyhrSrV5OzZZhM=)
10: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: mhEqOvUFx3lE0vII+brzmnr7/SGFot2kwuR99kk7PAA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:32:b3:b5:31:3e:98:d7:f9:57:02:82:a4:15:6e:0b:ae:9a:cf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Validity
Not Before: Apr 16 11:46:14 2026 GMT
Not After : Apr 19 15:19:14 2026 GMT
Subject: CN=19569B004505825D33190DDDCDEDBDB9F3B6BE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:85:2c:8f:5a:67:40:d7:b7:37:65:bb:9d:
23:40:6d:9c:47:cd:1d:92:60:28:b3:fa:e5:1c:76:
83:60:a7:11:98:69:bd:72:79:33:60:fd:63:32:98:
25:1f:e9:1a:35:89:9f:ad:54:1b:0d:0a:43:65:cf:
61:fc:44:3c:f5:31:df:b3:c4:ec:b5:c4:ea:f6:8e:
8d:cc:58:fc:f9:cd:14:de:13:5d:ef:4a:b2:5b:19:
dc:c9:78:a9:92:4f:fc:5e:d8:74:ce:cf:c4:f0:15:
1a:6b:bb:e9:bb:e4:91:23:9b:50:de:ce:83:64:02:
a8:1f:03:77:83:af:c3:3a:71:2b:4d:eb:e6:0f:11:
79:99:8c:08:ad:1b:71:e2:e3:54:39:5e:36:91:84:
18:c3:73:cd:9c:6d:b2:58:69:bc:2a:01:e0:f4:1f:
26:eb:35:e5:25:dc:31:28:7e:28:7c:62:ad:1b:39:
8e:84:00:84:02:c6:ca:5a:40:69:56:c0:6c:2e:f4:
7e:b4:2c:98:d0:04:5c:44:d8:d2:17:b6:df:e5:2b:
b1:56:8b:79:64:f4:e6:65:3b:5c:5d:53:f2:d1:ca:
24:41:c0:cd:ea:9f:41:97:28:eb:05:3e:5e:cf:a9:
ec:b2:90:80:66:0c:16:79:b1:77:55:86:63:a1:5a:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:9B:00:45:05:82:5D:33:19:0D:DD:CD:ED:BD:B9:F3:B6:BE:89
X509v3 Authority Key Identifier:
keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:a9:0a:82:13:3b:b4:58:ef:02:64:e7:b3:5a:da:3f:fa:
9a:2d:60:30:1e:f9:bb:3d:f2:9a:92:e2:4b:a6:5c:5e:74:a5:
66:a3:c2:5f:5f:fc:e7:be:79:95:fa:61:66:a3:7c:c8:d5:8d:
16:7d:7b:0d:2a:c5:59:52:80:09:e2:68:4a:0b:b9:12:59:6c:
03:72:c8:08:b1:a2:d5:71:52:e0:75:0b:b2:26:ef:97:a3:92:
50:aa:f7:6c:40:11:88:0f:a5:d7:a7:b0:61:75:28:5b:a7:ae:
7d:8d:5f:4a:a9:54:0e:02:bf:a2:b1:d9:ff:4d:b9:39:c7:7e:
e7:b2:8f:bc:4f:dd:f3:dc:c2:18:a0:24:2c:87:f4:66:8a:9a:
7a:a9:ec:2e:ad:80:c2:79:37:0d:96:03:9f:06:4b:d4:4b:2f:
08:b3:cd:d7:53:bd:f4:03:43:43:b7:5e:02:54:9d:6b:22:fa:
63:6b:d9:6b:8f:0c:9b:ce:06:47:64:e2:79:0c:6a:ec:4b:27:
34:0a:a8:fc:27:a8:8b:4b:eb:2a:2d:60:d7:2e:4f:46:10:64:
9f:82:2f:47:cc:17:ba:e5:b3:ee:c1:71:c4:25:6d:49:37:55:
41:a4:57:65:22:61:a0:13:db:d1:f0:b1:8c:19:c1:ce:2e:f9:
91:1e:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:51:51 2026 by rpki-client