
$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
File: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft (raw, json)
Hash identifier: YXNZ5qHQ9/ORtzPAY/xqNMSeHcdGvC4+L8zRhgDIYEc=
Subject key identifier: 6F:E9:97:99:3B:BF:05:73:F0:5A:49:37:57:E3:AC:20:32:39:E9:12
Authority key identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31
Certificate issuer: /CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31
Certificate serial: 030C78762797A93C725133CC88954D06E159D032
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
Manifest number: 06
Signing time: Sat 28 Feb 2026 22:11:46 +0000
Manifest this update: Sat 28 Feb 2026 22:06:46 +0000
Manifest next update: Wed 04 Mar 2026 03:51:46 +0000
Files and hashes: 1: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl (hash: hUFFLH+DKQTs6fJFFojbIQ7MwuVNgdFTHaObPl4rZSs=)
2: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: uQHIImYmptjCUQ/bftz22qTLuZl56mNDlhYd4jLzdhA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl
rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0c:78:76:27:97:a9:3c:72:51:33:cc:88:95:4d:06:e1:59:d0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31
Validity
Not Before: Feb 28 22:06:46 2026 GMT
Not After : Mar 4 03:51:46 2026 GMT
Subject: CN=6FE997993BBF0573F05A493757E3AC203239E912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:63:ef:d5:dc:a2:59:92:b2:1e:f1:51:d9:
02:c5:a9:ff:dd:9c:1f:92:bb:fc:9d:b8:67:db:59:
6f:f3:da:43:a0:53:77:80:ae:da:3f:1f:61:74:61:
1e:97:23:de:f4:1e:ae:d8:60:37:82:0f:64:3f:d5:
b8:70:68:a1:a9:3f:64:10:c2:08:79:25:7b:b2:56:
33:44:2c:48:a4:e2:03:d4:45:eb:ba:8a:0a:22:52:
6c:b7:53:bb:fe:14:23:b3:76:6b:a9:45:ef:88:79:
81:b6:82:33:fb:21:46:6a:32:87:73:82:89:95:dd:
9c:67:46:2a:00:db:fb:6c:84:fd:0c:db:20:e7:a1:
f7:4e:f1:f0:6a:af:1f:b8:b9:bf:c5:8a:97:01:b7:
00:c8:43:b1:1e:35:e9:00:83:a0:a2:83:3f:75:0c:
d1:cf:d8:a0:d1:c4:d7:58:33:6d:49:df:71:cd:54:
e3:c5:4b:af:8e:25:97:7e:cd:34:e3:4c:fb:ee:3e:
98:3b:58:bb:d5:7f:89:2b:ae:6c:cb:e7:8f:ed:69:
4c:1b:23:c2:cf:bf:70:ab:34:6e:68:92:a1:b7:36:
d4:4c:b3:50:10:db:2f:eb:04:bc:78:ea:d9:ea:be:
45:4a:e7:e3:08:cf:de:79:9f:92:05:10:f5:0e:54:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E9:97:99:3B:BF:05:73:F0:5A:49:37:57:E3:AC:20:32:39:E9:12
X509v3 Authority Key Identifier:
keyid:C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f7:82:49:48:36:25:3b:42:3c:70:93:a8:07:76:4d:9d:77:
56:4e:dd:af:79:e1:ee:04:65:37:33:c1:c2:52:5d:1e:2e:a2:
5f:b7:bd:55:af:33:f3:a2:01:b5:40:c8:3b:29:28:68:bd:02:
ba:9d:6b:ee:c9:55:20:2c:08:fa:f8:69:94:68:a6:3c:38:4b:
25:db:11:30:47:d0:c5:da:5c:b6:dd:d4:56:3f:25:a9:88:1c:
27:77:8c:66:5d:27:ab:a1:2a:15:3c:8a:6d:97:91:19:18:c7:
e8:da:9a:6c:44:e9:c4:f7:5c:d7:de:b1:66:4b:7f:78:1b:89:
46:8a:ab:83:1f:72:f9:27:13:e0:76:ce:c5:46:9f:3b:b5:f6:
86:21:b7:86:78:bd:10:04:93:59:f7:23:27:ef:66:98:b9:b9:
d3:47:fe:4b:83:07:f2:42:3f:97:57:d8:91:6c:85:11:6f:68:
97:5a:85:19:b0:0c:a2:ab:75:d4:92:e9:1c:69:36:bd:c5:e7:
0a:8b:ed:aa:be:9d:0f:22:a6:9d:8e:11:5d:11:eb:a7:f3:ed:
33:e2:65:9e:9f:97:1d:7d:bc:25:64:f0:ca:25:99:43:1b:99:
dd:fa:8d:59:70:41:39:cb:54:1c:08:3f:22:b3:34:b1:66:eb:
84:d2:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:19 2026 by rpki-client