
$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json)
Hash identifier: 0IqJPm1CjIouYKnAwNUulqLTgKEFSw0k/8sQRPD+HoM=
Subject key identifier: 6E:1A:AA:B2:71:FF:F7:AF:88:32:3A:84:B2:2D:EC:47:A8:86:FA:36
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Certificate issuer: /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial: 72BFB62C4AB3892C1E3DC54FACF964C2E6619E11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
Manifest number: 01B0
Signing time: Sat 28 Feb 2026 23:22:32 +0000
Manifest this update: Sat 28 Feb 2026 23:17:32 +0000
Manifest next update: Wed 04 Mar 2026 10:22:32 +0000
Files and hashes: 1: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=)
2: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: 9LuEqDtkY/MM7YCQKZ8uHMUg5XA3xpuJOps1o8/DIFY=)
3: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=)
4: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bf:b6:2c:4a:b3:89:2c:1e:3d:c5:4f:ac:f9:64:c2:e6:61:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Validity
Not Before: Feb 28 23:17:32 2026 GMT
Not After : Mar 4 10:22:32 2026 GMT
Subject: CN=6E1AAAB271FFF7AF88323A84B22DEC47A886FA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:d8:1c:8c:37:14:2c:8d:c3:6a:ec:06:ff:
87:b1:7c:c3:1c:42:db:44:97:bf:5e:17:31:ec:65:
d3:ac:21:61:d8:70:bc:53:1f:30:e5:86:08:3c:14:
e5:5b:1d:cc:41:30:e2:09:d8:f7:95:f0:54:16:27:
63:22:9b:e7:4e:3e:ba:b6:6f:4c:64:f7:70:53:7e:
d8:e3:c8:2b:2a:73:7f:91:3d:87:6d:49:f6:7f:cc:
9d:a7:31:5a:b5:38:73:ec:ab:69:70:96:ee:d4:a1:
f0:be:c4:a8:fd:3a:19:aa:08:52:28:c9:fa:01:1f:
19:62:a5:a1:c8:74:0b:01:e9:fb:d5:86:2a:83:a7:
28:a4:ad:50:ae:04:7c:12:5c:ac:5e:9c:ca:39:53:
c8:4d:e8:ab:2f:18:ce:67:ef:ce:88:a3:f7:33:6c:
49:3c:0e:0b:41:d0:d5:6c:9f:35:f6:e7:1e:95:b1:
92:c6:da:07:a0:a1:55:81:82:25:d8:98:f9:f6:ac:
54:c3:9e:73:60:02:cc:50:c3:b5:cd:ab:9b:eb:93:
9a:f8:37:d5:96:83:b0:ec:12:86:df:e9:8d:7c:1c:
18:4a:ff:55:33:af:c4:44:9b:6b:53:17:f7:b2:21:
01:db:04:5a:97:ef:da:6b:d6:e7:81:dc:8b:32:a9:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:AA:B2:71:FF:F7:AF:88:32:3A:84:B2:2D:EC:47:A8:86:FA:36
X509v3 Authority Key Identifier:
keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8b:c7:f7:ff:df:f1:4b:13:41:10:43:b3:81:1a:f9:52:31:
70:e3:11:90:9a:41:ec:4b:31:a9:3f:4e:70:44:e8:91:05:fd:
b9:ac:d4:ae:1c:18:55:52:07:fb:60:99:25:a6:9f:66:df:dd:
21:3e:c0:6c:02:2b:df:48:da:61:69:d7:53:5c:16:d5:b1:7d:
08:3a:68:2e:d9:d7:75:51:ad:45:0a:55:0f:30:54:75:c9:2b:
b6:01:f7:94:14:fe:f4:57:ff:0b:13:59:84:07:3c:d0:69:aa:
52:db:57:44:37:d3:c0:93:77:1f:b6:2b:31:64:63:84:3d:2d:
9a:f3:e6:c0:2f:82:60:d2:29:70:1a:c1:7e:2a:6d:66:fc:cf:
32:df:45:48:bb:00:2f:dd:3a:41:02:5b:8a:a5:15:21:c5:f3:
ca:f1:d2:27:de:5d:69:e3:6e:cc:8c:ea:ec:d3:da:55:5a:81:
04:d0:be:c2:b3:07:32:a4:a2:d5:e2:06:e2:64:5c:43:ee:35:
3a:6f:2f:c0:f1:02:fc:f2:df:57:e6:de:24:da:7f:99:29:35:
07:c4:1d:90:79:0f:51:16:d2:cd:d1:36:f3:7f:c3:d8:90:3b:
47:eb:14:58:1d:90:c1:48:69:ee:fe:fb:4b:46:2b:43:4e:d0:
5f:aa:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:45 2026 by rpki-client