
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json)
Hash identifier: r4dHllQjM0vZoDl/3+PTWOo4a04+WqUFu7GEhkoHTRY=
Subject key identifier: E6:AF:6F:4E:10:F1:66:A6:A5:51:C1:07:2E:56:4F:99:BE:37:D6:A0
Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Certificate serial: 3C9ACDE2D71E1D748D887109B7B3FFCF685D667B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
Manifest number: 0569
Signing time: Thu 16 Apr 2026 07:50:59 +0000
Manifest this update: Thu 16 Apr 2026 07:45:59 +0000
Manifest next update: Sun 19 Apr 2026 16:33:59 +0000
Files and hashes: 1: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: xDJAH/P+MJUcq0zV3hJ4Q6GAmnXd1MM4u4nW8oPlnq4=)
2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=)
3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl
rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 16:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9a:cd:e2:d7:1e:1d:74:8d:88:71:09:b7:b3:ff:cf:68:5d:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Validity
Not Before: Apr 16 07:45:59 2026 GMT
Not After : Apr 19 16:33:59 2026 GMT
Subject: CN=E6AF6F4E10F166A6A551C1072E564F99BE37D6A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6e:98:c5:29:97:62:c0:2f:d5:59:55:83:58:
75:6b:6a:31:f0:b4:21:12:70:89:89:63:02:7a:92:
d6:ef:9d:ee:bd:90:1d:32:b9:cc:6c:bf:90:53:a6:
56:23:61:31:d4:1b:e6:6f:ba:8f:eb:40:f9:a8:c5:
28:4d:9b:7e:9f:6e:61:50:80:6a:be:a3:c2:12:6a:
af:49:f1:a7:3a:3f:af:45:38:93:5a:54:d0:69:fa:
f2:48:43:0c:ec:d5:bb:32:ea:c4:62:fe:ad:05:b3:
25:25:7a:0a:95:e1:e6:e2:26:bf:4a:74:58:bf:33:
0c:12:ec:15:e2:b9:d7:ec:4e:ef:a7:b1:87:ee:2d:
a7:d1:3f:d9:94:b9:83:d4:3c:1e:ec:b3:2a:21:10:
f6:93:50:18:3e:cc:88:86:cc:e0:6f:f9:67:76:ae:
16:2f:aa:82:1b:7b:51:38:17:63:5b:22:3f:2e:84:
af:22:20:1d:98:11:ba:78:cb:73:3c:d7:92:62:9c:
f0:10:98:2f:52:c9:c9:7d:05:a8:9e:2e:86:e8:b9:
5a:a0:d4:62:97:b1:81:4d:41:6e:96:22:e9:43:d8:
f7:2d:77:62:d6:dc:b2:e9:a0:eb:1a:29:6b:38:f5:
53:28:20:37:89:80:12:69:c5:32:3f:8f:13:04:f4:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:6F:4E:10:F1:66:A6:A5:51:C1:07:2E:56:4F:99:BE:37:D6:A0
X509v3 Authority Key Identifier:
keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fc:f3:60:14:2a:5a:83:05:f9:f9:5d:30:bb:17:98:d7:3f:
d4:f2:7f:d1:36:bf:c9:80:24:98:35:26:f5:81:84:14:59:18:
ff:51:ca:98:e3:31:03:65:2b:f4:91:23:26:16:1b:b1:bd:50:
33:4b:10:d1:f1:6f:0c:c0:09:f3:2d:51:88:47:de:86:66:8e:
33:a8:54:3b:ba:c3:40:e0:bb:43:d3:0c:db:21:5e:c6:5d:c4:
0e:ce:3f:6d:a5:9b:c9:9e:7d:e8:84:e1:97:a4:a5:f0:90:c3:
09:e9:88:67:ac:5e:97:8c:56:1b:af:a8:ec:76:84:91:11:68:
3e:15:a5:29:4d:cd:8d:73:a2:e5:00:60:fa:32:9f:a0:d1:d7:
37:8a:62:5c:fe:d7:e5:9e:82:f8:02:cd:45:c8:c7:ae:f7:b9:
67:61:46:f3:f0:f9:1c:5e:5b:df:94:37:2c:cf:70:99:0f:39:
22:c4:dd:7c:ae:c6:d6:fe:f8:56:ca:aa:e0:0b:c3:fd:27:e8:
1e:06:33:37:69:34:e6:a9:20:7e:3e:68:af:df:f2:ae:e3:4e:
c8:8a:44:69:d0:22:84:c1:a1:14:e6:4d:73:6f:87:6f:e5:01:
a4:8d:7c:c5:c9:ad:24:7f:1d:54:3b:36:23:dd:97:2c:c7:41:
07:86:a9:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPJrN4tceHXSNiHEJt7P/z2hdZnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4
NDVDQ0M5QzAeFw0yNjA0MTYwNzQ1NTlaFw0yNjA0MTkxNjMzNTlaMDMxMTAvBgNV
BAMTKEU2QUY2RjRFMTBGMTY2QTZBNTUxQzEwNzJFNTY0Rjk5QkUzN0Q2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDybpjFKZdiwC/VWVWDWHVrajHw
tCEScImJYwJ6ktbvne69kB0yucxsv5BTplYjYTHUG+Zvuo/rQPmoxShNm36fbmFQ
gGq+o8ISaq9J8ac6P69FOJNaVNBp+vJIQwzs1bsy6sRi/q0FsyUlegqV4ebiJr9K
dFi/MwwS7BXiudfsTu+nsYfuLafRP9mUuYPUPB7ssyohEPaTUBg+zIiGzOBv+Wd2
rhYvqoIbe1E4F2NbIj8uhK8iIB2YEbp4y3M815JinPAQmC9Sycl9BaieLobouVqg
1GKXsYFNQW6WIulD2Pctd2LW3LLpoOsaKWs49VMoIDeJgBJpxTI/jxME9EWNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5q9vThDxZqalUcEHLlZPmb431qAwHwYDVR0j
BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB
QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD
Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl
ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5
RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIb882AUKlqDBfn5XTC7F5jXP9Tyf9E2v8mA
JJg1JvWBhBRZGP9RypjjMQNlK/SRIyYWG7G9UDNLENHxbwzACfMtUYhH3oZmjjOo
VDu6w0Dgu0PTDNshXsZdxA7OP22lm8mefeiE4ZekpfCQwwnpiGesXpeMVhuvqOx2
hJERaD4VpSlNzY1zouUAYPoyn6DR1zeKYlz+1+WegvgCzUXIx673uWdhRvPw+Rxe
W9+UNyzPcJkPOSLE3Xyuxtb++FbKquALw/0n6B4GMzdpNOapIH4+aK/f8q7jTsiK
RGnQIoTBoRTmTXNvh2/lAaSNfMXJrSR/HVQ7NiPdlyzHQQeGqZE=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:34 2026 by rpki-client