
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json)
Hash identifier: 4wR1VGy/pNkrcojKs8yuooF9hLWuhIecLmJBRBtIaXE=
Subject key identifier: 9F:D7:14:30:B5:38:B8:1A:32:30:84:58:CB:AA:6B:C3:B8:5D:57:6E
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial: 0B812F9B5E1512A8C0C26F85639C157D3CD69BB9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
Manifest number: 0282
Signing time: Sat 28 Feb 2026 15:22:33 +0000
Manifest this update: Sat 28 Feb 2026 15:17:33 +0000
Manifest next update: Tue 03 Mar 2026 22:29:33 +0000
Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: nZa9O0Oy57Qvy1eSyrrGMPwvccZjDMgFZsghULji6GE=)
2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: 8XAwGBnlCe7BB88cmE2SR+m77uMQp25c4HBkYkQPSuc=)
3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: VFgDZjjg61vRpBVfhYU5xtxK3HYEvLDpevoAQqYhxWQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:81:2f:9b:5e:15:12:a8:c0:c2:6f:85:63:9c:15:7d:3c:d6:9b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
Validity
Not Before: Feb 28 15:17:33 2026 GMT
Not After : Mar 3 22:29:33 2026 GMT
Subject: CN=9FD71430B538B81A32308458CBAA6BC3B85D576E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:e7:70:42:43:91:23:4a:ba:b2:69:6f:05:
cb:43:d4:85:d2:1f:98:82:ec:81:d8:f1:11:48:18:
80:f1:1e:ab:9d:8f:56:c2:fc:64:27:7f:37:3b:a5:
a2:32:22:d2:ce:3e:37:31:62:57:7a:59:4c:ea:53:
28:12:83:7a:15:82:e3:a8:b8:c3:c3:ed:b0:3d:07:
d9:50:1c:55:17:33:34:8d:e5:cf:b8:de:2a:18:ef:
18:26:28:df:60:44:5e:7a:2a:51:f1:af:9b:ef:6f:
de:64:a5:d8:49:82:8e:1b:3f:1e:b5:25:e8:72:b4:
f9:fb:e6:c0:c2:d2:0b:9f:2e:42:41:b7:9a:b5:ab:
c0:44:a1:86:d5:99:31:89:e5:44:3d:42:58:41:d9:
1c:47:4d:d7:e7:08:65:f8:2b:08:21:f9:a4:fa:11:
c7:d4:c4:40:a2:06:8f:ce:c2:c2:4f:77:c1:90:9d:
5f:c5:31:ef:52:fc:5d:45:93:d6:6a:1b:12:f7:4b:
12:ac:d1:10:a8:03:57:50:24:b3:b3:17:77:cd:6e:
2c:fd:24:7d:66:5a:06:ba:8e:67:1f:18:1d:25:0c:
24:43:7b:82:62:ec:3c:41:59:03:d0:9a:1e:7f:37:
da:5e:0e:a0:a4:bd:fc:8b:5b:10:ef:f3:33:0f:c5:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:14:30:B5:38:B8:1A:32:30:84:58:CB:AA:6B:C3:B8:5D:57:6E
X509v3 Authority Key Identifier:
keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:6c:7e:1f:8a:70:dd:09:c5:53:90:0c:2c:da:6a:07:25:
fa:8a:19:d0:37:6e:5e:03:57:3f:4c:8c:12:10:e7:4d:7c:9a:
05:71:8e:50:24:a7:c2:b0:17:29:a2:fa:bd:45:8f:68:31:ce:
d6:66:e3:54:fd:92:00:12:92:d2:c4:10:6f:82:2b:11:85:b7:
28:40:2c:ac:46:c6:cf:0c:f1:79:6b:4f:76:ab:3d:b9:c5:a3:
9b:47:2d:af:3e:83:8c:8d:99:bb:b0:90:51:94:83:c2:2e:65:
b0:9f:78:d6:50:8a:c3:09:b9:c3:60:6c:23:01:8a:86:a9:70:
82:25:65:19:0b:4e:a4:d6:ef:e9:f5:f8:6d:33:56:40:66:fc:
f6:5a:21:50:71:a5:2c:65:b7:34:22:c4:80:55:cc:87:d5:68:
6a:d9:3c:96:7c:83:fb:72:fc:b1:ba:af:41:78:26:72:5a:22:
12:e7:d5:36:eb:59:04:95:97:d8:60:94:c8:78:8c:89:fa:79:
64:68:8f:56:b8:24:2f:09:b0:ac:e8:38:ab:67:62:b4:a7:a7:
da:01:e8:8c:23:0e:89:1a:aa:9a:98:82:0f:f0:de:56:e4:dc:
c9:c8:1f:62:ee:ff:e4:76:d7:a7:01:18:20:9b:a0:d2:59:27:
9f:32:10:7f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC4Evm14VEqjAwm+FY5wVfTzWm7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE
RDhFQjQ1NzAeFw0yNjAyMjgxNTE3MzNaFw0yNjAzMDMyMjI5MzNaMDMxMTAvBgNV
BAMTKDlGRDcxNDMwQjUzOEI4MUEzMjMwODQ1OENCQUE2QkMzQjg1RDU3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+edwQkORI0q6smlvBctD1IXS
H5iC7IHY8RFIGIDxHqudj1bC/GQnfzc7paIyItLOPjcxYld6WUzqUygSg3oVguOo
uMPD7bA9B9lQHFUXMzSN5c+43ioY7xgmKN9gRF56KlHxr5vvb95kpdhJgo4bPx61
JehytPn75sDC0gufLkJBt5q1q8BEoYbVmTGJ5UQ9QlhB2RxHTdfnCGX4Kwgh+aT6
EcfUxECiBo/OwsJPd8GQnV/FMe9S/F1Fk9ZqGxL3SxKs0RCoA1dQJLOzF3fNbiz9
JH1mWga6jmcfGB0lDCRDe4Ji7DxBWQPQmh5/N9peDqCkvfyLWxDv8zMPxTrpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn9cUMLU4uBoyMIRYy6prw7hdV24wHwYDVR0j
BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy
OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF
QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4
MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0
QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB43bH4finDdCcVTkAws2moHJfqKGdA3bl4D
Vz9MjBIQ5018mgVxjlAkp8KwFymi+r1Fj2gxztZm41T9kgASktLEEG+CKxGFtyhA
LKxGxs8M8XlrT3arPbnFo5tHLa8+g4yNmbuwkFGUg8IuZbCfeNZQisMJucNgbCMB
ioapcIIlZRkLTqTW7+n1+G0zVkBm/PZaIVBxpSxltzQixIBVzIfVaGrZPJZ8g/ty
/LG6r0F4JnJaIhLn1TbrWQSVl9hglMh4jIn6eWRoj1a4JC8JsKzoOKtnYrSnp9oB
6IwjDokaqpqYgg/w3lbk3MnIH2Lu/+R216cBGCCboNJZJ58yEH8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:56 2026 by rpki-client