
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json)
Hash identifier: ISeFNeoE269q+sTjFlAA9bYAH9VnvBg1YcsqS1Mwwgo=
Subject key identifier: 3A:F8:EB:76:FF:39:41:CA:89:3A:DF:97:C3:5A:63:B5:38:96:17:BD
Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562
Certificate serial: 0CF373ACB35F8CB6643F5C6384CA8799ABF897C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
Manifest number: 010D
Signing time: Sun 01 Mar 2026 22:10:05 +0000
Manifest this update: Sun 01 Mar 2026 22:05:05 +0000
Manifest next update: Wed 04 Mar 2026 23:59:05 +0000
Files and hashes: 1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: USgAT+Lt0yCYiYHybL6Dj63Zp4zlVd7MHcMfpE91AzI=)
2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f3:73:ac:b3:5f:8c:b6:64:3f:5c:63:84:ca:87:99:ab:f8:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562
Validity
Not Before: Mar 1 22:05:05 2026 GMT
Not After : Mar 4 23:59:05 2026 GMT
Subject: CN=3AF8EB76FF3941CA893ADF97C35A63B5389617BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:55:b0:69:bc:40:88:aa:f2:19:bd:1a:c8:
2d:05:2e:c8:cf:b1:15:07:20:9d:cc:12:96:51:1b:
98:ec:2a:40:97:a5:20:91:c1:ee:2f:20:c2:5a:8e:
9c:9c:bc:f4:13:ab:af:26:bb:79:81:de:34:86:48:
56:b7:83:1a:b2:b3:22:0e:56:ca:9e:43:d5:a5:4c:
1b:c5:d7:cd:dd:6a:ff:ab:62:eb:c4:dd:53:ae:21:
5b:43:09:b2:22:bf:62:ce:58:b2:54:c7:b6:6f:02:
1b:49:bb:14:59:a8:97:86:40:82:4d:69:31:f5:59:
41:39:37:0f:d0:8d:c6:db:f3:d4:2b:bf:89:bd:8d:
8a:81:9c:0e:0e:d6:a3:dc:b7:8e:9d:ca:81:fc:08:
f1:ab:46:84:4a:a8:7a:33:f4:a3:df:0e:35:92:01:
1a:95:85:75:f6:f6:f0:e6:1c:04:a4:fe:14:4c:b2:
64:59:b5:78:01:f9:74:79:6d:d5:2f:5e:4c:36:ed:
ff:51:22:5c:b6:cb:52:2b:24:25:7b:70:f7:c5:7a:
da:48:20:4c:bb:46:f1:ae:7c:5e:95:3b:63:b4:8b:
ae:18:ed:3a:2d:fc:a2:24:e0:32:e7:db:a1:81:ed:
79:09:d1:c1:28:f8:60:d8:2f:5e:a4:1d:c6:75:9b:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:EB:76:FF:39:41:CA:89:3A:DF:97:C3:5A:63:B5:38:96:17:BD
X509v3 Authority Key Identifier:
keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:dd:3d:75:89:38:3a:b5:22:58:85:53:9e:40:46:26:f9:f5:
fc:f6:d9:72:c4:36:ab:10:ec:ea:df:9e:68:af:fe:f1:95:a1:
2c:06:81:62:75:75:6c:e7:a2:91:61:04:44:56:85:b8:20:dd:
b2:8b:a6:ff:47:58:d4:29:e4:56:2a:5e:0c:ad:af:2b:5b:76:
4a:47:3e:b8:07:d4:2b:99:b0:ce:12:b8:fa:09:a6:d3:7a:a7:
95:94:91:25:b7:d5:7c:99:6a:a2:d6:bf:24:9a:60:cb:cc:e1:
cb:1c:a7:2c:b5:e3:af:db:a6:13:c4:d0:09:96:50:50:29:73:
7b:7c:33:3b:c9:56:4f:d3:fb:2c:09:b9:79:19:b1:a1:68:b8:
e2:03:d3:4c:ce:4a:ac:63:7d:00:db:c6:44:28:d4:ad:14:62:
a7:36:f0:25:f3:87:bf:1c:dc:39:e2:1e:1e:ac:b1:67:36:2b:
17:0a:be:68:30:84:28:42:95:53:a0:8f:a0:cd:d2:76:31:2a:
0e:19:7e:7f:62:65:f9:65:e7:bf:65:d8:60:e1:43:dc:92:89:
0d:c4:66:c4:fd:41:ad:39:c5:99:13:b9:03:5d:e5:7b:d8:c5:
25:d7:8d:91:35:d6:ac:82:70:9a:48:7a:ab:f6:be:36:f7:1e:
fc:25:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:48 2026 by rpki-client