
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json)
Hash identifier: 7gR/kgmI61FtgNzBM1zjmw0SvJC3uqjra8S6IcVlJxw=
Subject key identifier: 77:EC:BF:D0:3D:DE:DA:6A:B8:AC:68:A7:45:3A:B2:36:B5:FF:60:ED
Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Certificate serial: 021CA46C36E190E432E7319FBBD5CB919BAF2E5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
Manifest number: 0178
Signing time: Sun 01 Mar 2026 06:22:33 +0000
Manifest this update: Sun 01 Mar 2026 06:17:33 +0000
Manifest next update: Wed 04 Mar 2026 17:36:33 +0000
Files and hashes: 1: 3130332e39362e35352e302f32342d3234203d3e20313530393637.roa (hash: LEF8YB6t6OYZQZrhwG/4Qw0X6QqLKe1Bpj3LXFZ+/x0=)
2: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: GYMaTAbVHJ9UoFQJZiuUTKgXGRrm0gxXeDHqFLigmqE=)
3: 3130332e39362e35342e302f32342d3234203d3e20313530393637.roa (hash: DYNP1pkQZXlnNBDUWLT0o/w7WroozE34gPyP6ZNIwTM=)
4: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 17:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1c:a4:6c:36:e1:90:e4:32:e7:31:9f:bb:d5:cb:91:9b:af:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF
Validity
Not Before: Mar 1 06:17:33 2026 GMT
Not After : Mar 4 17:36:33 2026 GMT
Subject: CN=77ECBFD03DDEDA6AB8AC68A7453AB236B5FF60ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:21:68:5b:a2:f6:08:e6:46:69:71:83:7e:
5c:03:63:1b:eb:1d:e7:3d:cb:4f:f9:21:72:e7:1d:
49:2f:56:a1:94:aa:65:64:22:de:75:51:0c:58:9b:
2c:09:36:7e:d5:a8:aa:5e:b1:26:b4:07:b7:3e:b8:
c7:e4:43:43:8a:4b:d4:e6:8a:ff:9d:38:96:40:55:
84:b2:f5:83:e1:27:13:b2:b1:b9:c5:20:43:f6:30:
20:34:1d:22:d6:49:dc:9d:1b:1c:8d:61:70:e5:df:
24:91:55:ec:75:04:9c:9a:6e:5a:1b:05:00:c7:88:
ea:1c:a3:51:48:2f:21:f4:43:df:2d:77:58:38:0f:
63:3d:78:72:3f:e0:c8:b5:61:04:75:d4:41:49:c7:
55:69:19:a6:06:75:31:e6:6e:6f:8e:06:78:1d:6f:
6a:98:30:8f:49:ac:d9:cf:00:e5:c2:be:d6:83:39:
3a:1a:de:79:9f:f4:5f:22:83:39:56:68:81:96:b1:
35:45:ca:b2:95:de:0f:e9:a9:2e:17:39:d1:ae:2b:
ad:38:f6:8b:44:5b:9c:c9:ae:3e:18:c4:ca:3d:e3:
80:3f:4f:04:53:e3:90:ee:6a:dd:4f:57:ca:e6:8b:
3c:9c:d3:23:d1:e9:c4:4b:b6:38:ce:ac:38:62:e4:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EC:BF:D0:3D:DE:DA:6A:B8:AC:68:A7:45:3A:B2:36:B5:FF:60:ED
X509v3 Authority Key Identifier:
keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:cf:db:59:7d:b3:20:19:9d:42:da:6b:74:89:60:15:ad:
3d:69:42:e0:00:7d:1a:80:78:ef:7e:57:bb:b9:c0:dd:93:5b:
b2:68:0a:89:0e:be:a4:69:e1:e6:9d:d9:de:ed:7b:f9:14:fd:
de:80:b3:79:79:5e:ca:02:90:c3:73:05:fe:c1:48:ce:1d:3c:
88:8e:b9:46:31:2d:22:a9:3b:db:b4:70:20:ad:e0:da:5b:5d:
6e:34:99:5d:c0:4b:e6:a6:dc:2f:78:12:50:8d:6a:af:c9:bc:
0a:18:0a:80:2b:56:4a:3d:97:80:cc:be:15:a0:2f:9e:a2:74:
f1:2e:09:17:99:ec:5e:41:65:f3:6c:e1:33:d0:76:20:af:80:
c3:53:b8:48:7f:7b:1d:ba:82:4b:71:6a:98:ba:f4:0d:53:1d:
60:bc:aa:08:1e:f7:1f:08:07:2a:2f:97:24:93:e8:47:95:48:
7b:76:28:d0:dc:47:8a:5b:9b:fa:0c:39:27:69:6e:eb:26:f0:
c4:72:b5:a3:7e:1f:ee:1a:3c:65:7e:78:f0:5a:8f:28:af:6f:
8e:7c:f3:59:23:f1:f1:7c:84:3f:f8:96:04:fe:2c:ee:ae:dd:
5c:d7:23:3e:62:fc:27:81:ff:50:d4:aa:47:5b:ed:57:38:ae:
ea:da:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:36 2026 by rpki-client