
$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
File: 990382439FFA8C086A4458B338B52CCD0D54CFA8.mft (raw, json)
Hash identifier: GcmasNactBHAGq07yf4UJJhghIxXqpFpUqSjj+/ci/8=
Subject key identifier: F2:F0:56:34:8A:94:04:00:B0:06:80:02:8B:5C:E3:8E:2E:C9:C9:A7
Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8
Certificate issuer: /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
Certificate serial: 090A7CD37E31F10508BCE361F4BFA728FF43FB68
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
Manifest number: 06
Signing time: Mon 02 Mar 2026 00:11:49 +0000
Manifest this update: Mon 02 Mar 2026 00:06:49 +0000
Manifest next update: Thu 05 Mar 2026 05:57:49 +0000
Files and hashes: 1: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: 6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=)
2: 990382439FFA8C086A4458B338B52CCD0D54CFA8.crl (hash: tpMA3UnWUJXHPuQZ+pgb+Mqc5mG7N4YZboG1MwBe1rQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl
rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0a:7c:d3:7e:31:f1:05:08:bc:e3:61:f4:bf:a7:28:ff:43:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8
Validity
Not Before: Mar 2 00:06:49 2026 GMT
Not After : Mar 5 05:57:49 2026 GMT
Subject: CN=F2F056348A940400B00680028B5CE38E2EC9C9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:26:63:a6:da:ef:f8:e7:83:45:b4:c1:48:
4e:f9:ab:93:d2:a1:06:11:26:1d:4c:d1:d0:4b:9c:
8a:16:b1:37:b1:62:8f:92:e7:f9:1e:eb:4b:f3:16:
99:6a:b2:52:76:81:d0:7c:dc:b7:fc:76:a2:e1:fb:
9f:79:4e:fd:ab:87:7e:89:05:69:c2:83:9c:de:87:
b9:70:a0:fd:23:16:1e:cd:31:8b:34:13:ef:1b:ff:
b9:bc:1a:f5:7d:68:5c:02:b2:3e:6c:51:f8:46:87:
fb:e8:ea:90:56:ff:7c:5e:b3:99:91:ca:7c:f1:13:
fe:00:bd:e3:d2:ed:50:cb:03:6f:79:5c:38:39:d0:
d6:e9:2c:53:70:94:44:3a:eb:ab:21:0d:7a:2a:66:
0a:ac:5f:8f:17:30:d9:d0:b2:94:6e:ce:8b:81:0e:
80:61:73:bf:09:97:2e:09:ad:80:03:d6:79:df:27:
1a:05:cd:4c:ef:a3:17:71:1b:c1:a4:44:95:34:9e:
ab:06:63:b1:89:1b:d7:c4:17:21:62:c0:de:4e:00:
1e:16:14:4d:94:22:c8:27:41:bd:2c:5a:7d:f1:ee:
8b:1b:d0:88:f1:08:13:67:ba:e0:5b:74:3d:3b:db:
15:75:e6:a6:0d:4e:6e:b6:7f:34:6e:c6:9f:53:1f:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:56:34:8A:94:04:00:B0:06:80:02:8B:5C:E3:8E:2E:C9:C9:A7
X509v3 Authority Key Identifier:
keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:ac:43:78:72:3e:9a:52:4c:66:5f:e4:5b:b3:42:6a:5c:
b8:0b:23:3d:c8:cf:66:ea:de:e3:ea:8d:00:f1:65:aa:44:61:
81:20:f5:40:1f:a4:39:6a:4d:bc:1a:0f:70:09:ed:0f:67:a1:
61:18:d3:13:63:72:be:b7:92:3e:05:16:36:d4:a2:44:e2:3e:
bc:4b:46:84:b2:4b:54:d3:d6:47:e4:c5:b6:d2:52:7b:0d:43:
14:eb:ed:1f:00:a8:81:b4:0f:3b:05:80:28:ef:e3:3c:c0:28:
a6:4d:da:f1:ef:e5:d8:05:3a:80:04:fb:fb:19:80:58:b6:51:
d6:1f:1a:1a:88:cc:fb:ec:cd:3c:66:ff:69:83:ab:9e:a8:21:
52:ae:0a:26:25:74:45:ce:3a:ec:67:0a:2e:8e:d0:b2:b6:5e:
40:b4:72:8d:5c:ba:ed:8e:d1:f1:78:73:3e:57:63:3f:fa:6b:
12:ff:ce:48:29:d2:e4:83:b7:7d:5b:da:c7:d9:ba:3d:7b:59:
a9:88:59:a8:f4:ea:32:45:93:6a:67:30:59:44:61:cf:de:23:
d8:ac:fc:47:28:9e:ab:4a:31:19:b3:b5:2a:27:cd:7b:b0:70:
56:17:65:d8:3b:a5:00:9d:24:59:63:f6:df:98:dd:fe:2f:20:
e5:b1:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:40 2026 by rpki-client