
$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json)
Hash identifier: 3euDjqAOQqvrvFAcU0AMHpR28zfP4ho4vMsx2pW1GYg=
Subject key identifier: AA:F8:6B:7D:22:75:BC:AE:48:3D:34:8C:9F:31:35:63:2E:2E:00:40
Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769
Certificate serial: 1504B77C013FA4C01D320B8AF23DD8240F025C6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
Manifest number: 0100
Signing time: Sun 01 Mar 2026 01:01:29 +0000
Manifest this update: Sun 01 Mar 2026 00:56:29 +0000
Manifest next update: Wed 04 Mar 2026 08:09:29 +0000
Files and hashes: 1: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: zK90jmviS5skAn/jDcVMI3Aok7WFlX9b62aRW8Ax9FY=)
2: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: op17tTZM2HwKqC/8PHonqMAMo5+y0vdaaax3C7HrX0c=)
3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:04:b7:7c:01:3f:a4:c0:1d:32:0b:8a:f2:3d:d8:24:0f:02:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769
Validity
Not Before: Mar 1 00:56:29 2026 GMT
Not After : Mar 4 08:09:29 2026 GMT
Subject: CN=AAF86B7D2275BCAE483D348C9F3135632E2E0040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:e0:b2:2b:bf:d9:26:85:76:e5:6f:6d:b4:
d9:cf:1f:03:72:36:19:0e:cb:7f:44:7c:9a:1a:40:
15:f3:ec:15:42:45:cb:f8:dc:a9:0b:de:f6:74:57:
d5:4a:ed:e5:2f:d8:90:d2:64:be:62:f4:7c:e9:d4:
f9:fb:b2:bd:ca:c6:cf:42:0d:3b:0d:89:ff:21:97:
4d:c1:9c:65:8b:f7:30:12:ba:7b:14:f5:2c:35:68:
58:18:b1:18:c6:46:17:29:98:84:13:a5:3a:aa:79:
72:c8:cc:0a:bb:da:a3:b2:67:81:d9:94:a9:c5:c7:
35:f0:91:6f:a0:de:2f:9d:47:b5:37:aa:a4:0d:7b:
25:d0:5b:23:99:69:fc:19:a6:de:9e:35:72:42:a3:
17:fe:bc:81:e8:5e:a0:30:f9:7c:44:0e:59:9f:7c:
e6:1e:37:a5:c8:c7:7e:79:4e:bd:57:4a:f4:10:55:
49:55:18:50:16:cb:63:13:8b:03:92:cb:68:a3:36:
e4:ee:c3:7f:f1:b3:11:d6:df:2c:53:fa:6f:64:46:
b4:42:6a:26:a3:91:a6:1d:37:b7:4c:f7:05:41:7b:
f9:14:45:a9:71:6a:2c:ca:9a:9e:ed:96:17:e7:9a:
13:b8:d8:61:8f:34:ca:d2:08:fb:a5:a2:62:5a:62:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:6B:7D:22:75:BC:AE:48:3D:34:8C:9F:31:35:63:2E:2E:00:40
X509v3 Authority Key Identifier:
keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:76:4d:1d:e3:67:9c:a3:cb:98:05:3b:7e:f0:bf:12:3e:fc:
d6:59:64:54:71:49:6b:a9:9f:b9:bb:1a:fa:ea:9f:4c:73:dc:
f2:96:96:73:70:45:49:36:9f:a2:97:4e:c0:2f:4a:7b:97:73:
67:eb:e6:d8:29:29:5a:46:a0:cd:2c:ba:4a:4b:07:42:24:d8:
bc:ec:fa:40:e5:52:2f:36:3c:86:35:b8:5f:03:d4:70:89:1e:
4a:a5:34:cd:81:54:13:af:61:c2:14:1d:ff:3a:ad:e2:fe:65:
e2:b3:a9:65:b5:94:56:24:2d:92:93:e8:9d:6e:25:2b:c8:1a:
77:51:1a:e2:27:fb:d2:51:2d:37:13:4c:7a:57:03:08:5c:07:
fc:b7:3f:e7:ec:9c:0b:70:5d:99:87:b1:52:3d:00:83:97:3c:
66:df:26:eb:0e:db:6a:00:c1:d4:e5:fa:6b:51:f0:cc:03:02:
05:c4:eb:f5:b1:c8:ff:ad:5b:ad:15:34:a4:67:27:94:ae:dd:
89:c0:99:af:3b:f4:b9:02:88:78:09:34:72:2c:da:7d:b1:6f:
c3:f1:45:ea:79:7b:28:03:5e:17:2b:63:f7:19:5e:ca:80:6c:
19:44:64:8c:35:52:2a:03:d9:1e:ad:56:01:d2:0b:f9:21:5d:
d7:41:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:54 2026 by rpki-client