
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json)
Hash identifier: Uw4x3T12/jukpeBOEnz6//5m5efmSF9n8DReHTEmdCU=
Subject key identifier: E2:9A:E9:8F:25:E6:EC:AA:44:A8:7A:27:8B:91:7D:3F:1C:AF:3C:71
Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
Certificate serial: 13859864A411DBDA8F1A922391B8ACABEA4877F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
Manifest number: 0285
Signing time: Fri 27 Feb 2026 21:53:24 +0000
Manifest this update: Fri 27 Feb 2026 21:48:24 +0000
Manifest next update: Tue 03 Mar 2026 09:04:24 +0000
Files and hashes: 1: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: hzXcfGja+gltYRA0vKbbdLjFjrAEYzzJbnXyK4uLyuU=)
2: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl
rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:85:98:64:a4:11:db:da:8f:1a:92:23:91:b8:ac:ab:ea:48:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70
Validity
Not Before: Feb 27 21:48:24 2026 GMT
Not After : Mar 3 09:04:24 2026 GMT
Subject: CN=E29AE98F25E6ECAA44A87A278B917D3F1CAF3C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a7:1c:9f:e0:0b:78:dc:0a:b7:f6:2b:80:bc:
36:7a:0f:3f:d4:56:63:49:af:10:c8:1e:30:e3:74:
8e:22:f5:b6:98:fb:af:0d:9d:7a:20:43:5b:57:6a:
5f:11:8c:15:db:b6:56:a3:e8:a7:22:28:b0:2e:c2:
10:38:45:96:42:1a:98:2a:a1:35:6f:56:cc:63:bc:
31:c1:1e:a2:30:8b:8a:41:c8:2b:20:58:14:59:4f:
f0:e5:02:ba:c8:95:05:2d:bf:54:44:ec:87:34:ec:
ed:bf:f6:9d:da:c4:d0:c0:69:57:86:45:6f:85:0e:
f0:4d:05:e1:26:20:09:bd:4b:ea:3d:d5:99:cc:fc:
5e:41:28:0e:b6:b7:3e:98:33:6e:c6:76:5a:97:55:
d1:6f:17:95:6f:7d:9c:7b:d2:a4:e3:8e:33:0b:c3:
df:c9:99:08:07:c8:2b:4b:70:a2:bd:8e:36:91:8d:
ea:55:f4:fc:33:9c:ac:b8:08:57:14:0d:b3:4e:c3:
7d:96:93:04:2e:25:5f:e2:69:22:67:52:7e:f8:c4:
35:22:21:71:9d:1d:86:67:8d:c1:fd:5c:ef:67:dc:
bf:cf:28:08:6b:8a:d5:8f:e7:ad:38:0f:c6:0b:08:
98:e4:9c:83:6f:9f:75:d0:a9:dc:0a:10:6c:84:bf:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:E9:8F:25:E6:EC:AA:44:A8:7A:27:8B:91:7D:3F:1C:AF:3C:71
X509v3 Authority Key Identifier:
keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:d2:6e:4e:89:34:07:5c:90:dc:39:98:21:0e:66:6f:ce:
b7:63:24:0c:3b:45:c3:17:68:76:c7:70:3f:9c:d2:09:79:8a:
02:3f:b4:77:3e:ef:98:5e:7f:7d:6e:17:ba:3d:9d:38:96:b0:
ac:35:62:8f:74:33:2c:66:05:e6:26:b2:6c:82:8d:5e:14:75:
33:72:6e:bd:31:29:f2:22:8e:74:4f:3d:c0:fc:67:43:d6:7e:
2e:c7:10:d5:aa:50:60:4e:32:5c:12:c8:ab:4d:b5:5f:c8:c6:
3c:c0:27:59:21:1a:84:2c:34:53:40:55:29:66:bb:5c:6a:41:
07:e7:71:d9:bb:d6:b7:1e:8d:75:0c:84:28:d7:85:35:c2:b6:
02:94:e2:f0:be:1f:f1:d1:09:ea:0c:a5:dc:c8:e6:cf:b7:a1:
a8:9e:e7:e1:fb:08:c0:0d:92:34:fe:e8:ca:70:0e:de:a6:33:
da:4c:d5:fe:10:c4:1e:78:db:60:f1:2e:d9:30:90:75:4d:7b:
67:e0:f3:22:ea:01:ab:cd:c9:71:3d:2c:52:e8:a0:3b:7f:7b:
a6:7f:28:0e:76:04:38:6e:c5:95:38:18:8c:cf:63:9e:16:95:
34:8a:ee:98:8f:58:f8:02:c2:6d:56:ea:4d:ed:fc:e8:aa:35:
0c:49:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:32 2026 by rpki-client