
$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json)
Hash identifier: 5kG54SoZBjyLqFbu9TUWvWlvc808kL3hBIeYEvIXiI0=
Subject key identifier: 06:F0:52:55:7D:16:B4:41:C8:F1:4B:29:DA:0B:0B:59:B9:C0:03:8A
Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Certificate serial: 34EE556E0CFB037428A09A1719478DD90962CCB2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
Manifest number: 01D9
Signing time: Sat 28 Feb 2026 16:21:43 +0000
Manifest this update: Sat 28 Feb 2026 16:16:43 +0000
Manifest next update: Tue 03 Mar 2026 16:50:43 +0000
Files and hashes: 1: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: wCZWbAjJPtQcKFp1JKxaYjJuomYzMH8RA8CoXB4RQCA=)
2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: QAv8L/SfO4pmTvlOrUOe85CRHhQ8zH/NkbLzEqjzAes=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ee:55:6e:0c:fb:03:74:28:a0:9a:17:19:47:8d:d9:09:62:cc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Validity
Not Before: Feb 28 16:16:43 2026 GMT
Not After : Mar 3 16:50:43 2026 GMT
Subject: CN=06F052557D16B441C8F14B29DA0B0B59B9C0038A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:7a:04:61:9b:a6:2d:f9:a4:5f:d6:82:18:
12:af:0e:72:df:ef:73:5b:7f:0d:90:e2:d5:08:8f:
c1:3d:5e:c5:66:11:cc:c9:de:35:9b:53:a1:8c:a2:
0f:46:f5:84:9e:3b:c0:c9:d9:df:72:5c:03:a7:12:
99:f6:b8:c4:e9:05:be:2f:8d:56:85:1c:d4:39:0a:
23:5a:5a:c7:13:d6:88:5e:a9:43:39:3c:26:8d:a3:
be:94:ce:46:75:4a:66:0a:4f:07:82:99:05:fd:97:
44:b2:76:6b:1b:ab:bd:62:f4:a6:27:2b:7f:6e:c6:
50:b3:5e:82:03:a7:81:31:46:75:48:89:a4:3c:ab:
5b:b9:10:87:39:b5:bd:23:8f:a9:c1:6d:a7:14:af:
2c:61:e7:91:f9:ba:37:f6:c0:ab:af:4d:be:62:db:
8c:18:fd:9c:0d:53:be:50:17:f5:fa:d3:41:47:27:
1e:70:10:60:09:fa:80:75:a0:27:2f:d5:57:c4:36:
f8:e5:18:1b:1b:f6:ad:a5:b1:db:37:28:67:a2:ad:
5d:11:b0:61:7c:46:30:1e:85:cf:76:0e:52:4f:8d:
14:bb:ae:00:2c:91:29:27:68:76:2d:8b:70:d2:fb:
ad:68:33:44:cd:9a:78:a0:91:27:5f:1a:4f:3b:6f:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:52:55:7D:16:B4:41:C8:F1:4B:29:DA:0B:0B:59:B9:C0:03:8A
X509v3 Authority Key Identifier:
keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:01:99:c3:49:2a:9f:c1:c3:7f:73:94:f9:b7:b4:ba:10:
5a:3f:fe:96:a6:dd:ae:4b:35:2d:fa:27:c1:3e:78:45:70:6c:
a6:e1:af:bb:6e:bf:dd:22:1a:e7:f6:48:cc:32:66:6e:3f:ab:
a8:11:4f:8a:07:9f:68:e9:ec:94:30:f0:45:fc:4f:5d:7b:31:
3a:ff:c0:e3:79:36:5d:7d:b5:1a:19:3d:44:98:85:86:27:ef:
35:19:43:c0:97:9c:ac:37:e9:ed:b7:d2:96:4e:44:bf:9c:59:
9e:89:8c:5b:c1:09:42:d3:40:ed:b1:62:6d:c1:00:cd:ab:bf:
a5:40:9c:a0:bf:e8:e6:c4:c0:56:24:69:b3:54:65:2d:85:03:
b4:2d:af:16:0b:c5:89:72:5c:7a:5a:dc:18:ae:62:73:2e:9a:
5a:74:3d:8d:95:44:41:e4:93:2e:47:ca:bc:f0:38:42:94:26:
3d:74:d3:97:c4:e1:0a:48:46:ba:36:12:0c:c1:7c:01:48:ee:
04:37:d7:d1:50:ef:09:be:67:29:76:1d:95:75:92:60:48:15:
b0:22:f7:d8:bc:25:41:ee:8d:44:de:02:78:17:cd:38:93:de:
65:6c:49:9c:64:76:42:e1:98:e8:6f:21:1c:9a:7c:1c:b3:f2:
8d:01:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:17 2026 by rpki-client