
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json)
Hash identifier: stR2TaBJ17P+AN3QjOMipyLLv6JB1fphSZqDAXeQVxU=
Subject key identifier: FC:75:F6:81:E3:EE:40:22:6B:B8:77:41:50:13:BB:44:58:01:07:19
Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Certificate serial: 028C547A0943AB083A9813EB232DDBB5557E2BA8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
Manifest number: 02FC
Signing time: Sat 28 Feb 2026 06:21:37 +0000
Manifest this update: Sat 28 Feb 2026 06:16:37 +0000
Manifest next update: Tue 03 Mar 2026 12:41:37 +0000
Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=)
2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: XsQr2cZBJrqrxKiedEtkU8+T8cRo0bVz5mTLzUeMGVk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8c:54:7a:09:43:ab:08:3a:98:13:eb:23:2d:db:b5:55:7e:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F
Validity
Not Before: Feb 28 06:16:37 2026 GMT
Not After : Mar 3 12:41:37 2026 GMT
Subject: CN=FC75F681E3EE40226BB877415013BB4458010719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:d4:38:80:c4:2b:2d:18:8e:9c:e5:a8:3d:
9e:23:c6:b0:ad:90:ab:56:21:fd:05:cd:01:a7:f0:
5f:8a:e2:b8:c1:a7:ec:1b:24:44:a9:f0:51:20:95:
a9:8d:45:51:67:11:41:7d:fe:07:28:6c:1b:fe:a2:
e3:3c:0d:34:70:0e:18:04:94:e1:e1:10:52:99:14:
66:0a:96:f6:3b:15:31:f1:fb:d9:ec:5f:1f:88:7a:
88:7f:90:55:aa:f3:c9:ad:24:63:ff:18:5a:c9:93:
14:19:2e:6f:24:06:64:96:dd:fc:bc:de:4a:1e:1d:
14:2d:07:53:5c:f3:de:a9:70:d8:c8:cd:71:bf:bc:
3f:7f:b0:23:3f:21:df:9b:07:79:67:34:0b:16:cd:
50:dd:ff:62:86:7e:00:8a:4e:db:70:8e:a9:14:c7:
7c:fd:07:c1:e6:6f:2a:8c:4f:41:83:6c:72:2e:2e:
fb:0d:d6:d8:1d:96:d0:3b:bf:5e:ea:65:ae:31:aa:
19:04:37:7e:23:e9:d8:8b:06:e6:e4:3a:41:a0:36:
12:81:0f:83:bb:59:8f:0e:f2:79:8b:69:0b:4f:67:
f4:5e:59:5d:db:38:77:2c:40:9f:f4:ff:ad:76:b0:
e2:d3:6d:e0:9b:4f:2e:dc:5c:cd:a0:28:0c:96:79:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:F6:81:E3:EE:40:22:6B:B8:77:41:50:13:BB:44:58:01:07:19
X509v3 Authority Key Identifier:
keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:90:ed:b4:c0:86:de:7a:ba:0d:65:63:94:d2:ec:93:82:
e8:c9:9d:39:e9:80:1d:ec:70:27:0f:db:8e:3f:99:6f:b3:27:
1f:17:82:ff:53:15:0f:58:ab:a0:8c:47:6c:53:6b:49:9e:56:
e7:8d:41:bb:fa:b3:1a:58:68:81:cd:da:3b:d6:8a:42:ab:38:
52:ad:12:6e:75:e9:56:56:70:4f:53:60:99:79:fb:a4:90:b7:
1a:46:64:b2:61:ab:5a:db:1b:79:f5:9b:aa:47:5a:bb:c5:12:
e7:c7:26:18:bf:17:72:bb:cb:f6:2a:f8:e7:88:fc:1f:6f:3a:
8b:f5:42:3f:3d:d1:c7:24:b7:e3:37:81:3e:7d:95:e6:54:5e:
ee:d6:17:3d:92:3d:12:37:dc:85:4d:04:d0:b9:1b:a0:36:df:
d7:e5:87:76:36:03:45:c8:fb:af:84:36:84:27:39:26:e5:2e:
71:ed:00:31:ba:a8:43:9f:ca:eb:a7:e3:db:93:c5:29:bc:bf:
8a:ec:14:c2:6f:22:dd:f8:5c:30:e0:46:2e:4b:47:c3:69:79:
3a:32:40:27:86:6d:d8:82:3a:d9:fb:24:20:be:d3:60:fb:2e:
e6:be:bb:bf:6a:47:f9:56:e5:87:f7:b0:76:2a:ac:66:e9:7d:
aa:70:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:20 2026 by rpki-client