
$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json)
Hash identifier: vU82fvm6FjdSwye+8KcpBSCLnTdLOjT4rCNbKJ3LBLc=
Subject key identifier: D2:6D:E1:43:E0:48:FB:15:A2:E8:46:20:86:B6:F1:D8:DB:B3:0C:62
Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Certificate serial: F58331A3FC6DDA3E17636959AB9AEF254975C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
Manifest number: 0263
Signing time: Thu 16 Apr 2026 11:01:23 +0000
Manifest this update: Thu 16 Apr 2026 10:56:23 +0000
Manifest next update: Sun 19 Apr 2026 22:54:23 +0000
Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: rfvWdPfJDLIYs6uNr68F470gBmctz7tC2fHbouL5TpQ=)
2: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: M8fCe5D8d2IyMGkvGFHQzCu5uqFZk9IhypXImoxO/WY=)
3: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: ICdvINkILNoezpXS4hNV2DoVPsk+RYrVNgwPVBZPvUo=)
4: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: mJg/FJxF1cmpS6E7knWGIK6xKXPg644Y4Ya0tc8s1RU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 22:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f5:83:31:a3:fc:6d:da:3e:17:63:69:59:ab:9a:ef:25:49:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Validity
Not Before: Apr 16 10:56:23 2026 GMT
Not After : Apr 19 22:54:23 2026 GMT
Subject: CN=D26DE143E048FB15A2E8462086B6F1D8DBB30C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:53:b3:55:5e:fe:12:82:90:ed:e0:e9:1f:
9b:5a:4f:4d:ec:b6:e8:0e:e5:d7:91:d3:e5:32:0d:
9c:a1:33:c9:9f:00:06:93:d9:2a:71:f3:18:f7:61:
c9:cb:f6:0a:07:da:2f:61:75:de:df:e7:6d:6e:71:
c7:9a:2c:2f:10:bd:20:41:a1:46:3f:1e:f2:17:bb:
f3:aa:39:57:96:28:4b:34:4d:60:be:a6:5a:26:79:
e6:33:45:11:29:79:cc:67:13:ad:6b:59:3c:fc:79:
2e:50:62:5e:4b:92:fd:5c:e2:7e:62:bd:85:40:08:
f2:92:5c:7f:4a:fb:31:5f:e3:95:f7:b1:a3:4e:a3:
73:50:1c:32:5e:e4:c4:24:9f:7e:9b:35:b5:7e:6e:
2f:8c:72:55:0b:4a:a9:e5:6d:13:96:19:d5:e1:1f:
2f:cf:ce:f6:df:20:6e:30:64:68:e7:00:d4:c0:c0:
42:7d:ef:73:f3:b7:53:25:57:6e:40:9e:76:a0:ad:
ce:cb:c6:c5:6e:0a:e0:6e:5e:5c:14:75:4e:ef:9d:
75:dd:e1:8d:02:8e:5f:d0:80:64:30:cb:6d:9e:14:
8c:07:0e:ac:df:18:02:3c:35:fe:e0:c6:8c:a8:ba:
8c:c9:46:31:4e:6b:0c:bb:8f:a5:9e:ec:60:e3:c5:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:E1:43:E0:48:FB:15:A2:E8:46:20:86:B6:F1:D8:DB:B3:0C:62
X509v3 Authority Key Identifier:
keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4d:3d:07:49:ab:d2:71:d1:af:1d:b1:6e:a6:0d:a6:42:a5:
73:92:e7:10:4d:54:ee:db:82:88:a7:6f:01:46:59:c9:b6:b2:
e8:53:7a:28:4a:af:32:47:e9:1c:31:f0:44:0d:b5:91:d6:48:
8c:7f:ea:f1:d4:e1:ff:8c:ba:f2:4c:12:68:a5:18:49:63:af:
33:50:ca:9b:f6:cb:9f:9f:d2:94:48:5f:06:af:8c:54:3e:71:
d5:a7:8d:06:b6:bc:e0:58:47:f0:c4:ab:74:6f:95:07:53:22:
e1:19:0b:a6:a5:8f:b4:3a:79:20:25:13:88:11:ec:e3:1a:91:
c3:a9:9a:5b:40:88:84:27:da:da:02:5b:8c:e5:33:a8:bc:62:
a9:82:52:96:c7:27:1f:37:5f:bd:16:e3:53:0c:76:65:9d:42:
ff:ff:3c:8c:a7:fb:7a:5f:d5:d7:83:17:a8:38:33:dd:0b:2e:
1b:50:70:12:9c:87:b0:63:86:95:bd:ae:2c:4b:a5:0a:3c:63:
9c:b8:1b:65:0e:65:ee:0e:cd:fd:9d:2c:81:68:32:99:df:78:
d8:38:6d:5d:55:b9:37:51:6b:6f:34:9b:80:5d:94:dd:65:5f:
4f:c5:17:94:73:7d:ac:ac:56:bf:4a:78:31:6e:f1:14:71:78:
b4:00:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:36:52 2026 by rpki-client