
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json)
Hash identifier: Mj9dHRV+Gqv9cGnVhLo4vjFVaOXHRMK/ma2P4zCObTY=
Subject key identifier: 1E:8C:EE:FE:E3:FD:1C:86:4A:E2:DC:61:DA:87:E2:0E:79:85:2A:D9
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 75A4539BC9C10EB412FFC3CCCD5F086AF68595DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
Manifest number: 038E
Signing time: Sat 28 Feb 2026 20:10:45 +0000
Manifest this update: Sat 28 Feb 2026 20:05:45 +0000
Manifest next update: Wed 04 Mar 2026 00:56:45 +0000
Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=)
2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: HaiE3tBoeF6aVO8fSmd+AIm0AH2tKaIIEgU9EvWSGa8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a4:53:9b:c9:c1:0e:b4:12:ff:c3:cc:cd:5f:08:6a:f6:85:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Feb 28 20:05:45 2026 GMT
Not After : Mar 4 00:56:45 2026 GMT
Subject: CN=1E8CEEFEE3FD1C864AE2DC61DA87E20E79852AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:e8:b5:ed:56:79:81:fa:cf:b5:12:88:ef:
9e:bd:dd:81:cc:b1:0f:42:33:86:e3:2d:4c:f7:cf:
25:bd:af:a6:35:32:30:e5:5d:41:e2:72:cb:58:49:
e2:c1:2a:4a:47:06:5f:d3:fc:91:ef:e7:de:dc:81:
a5:54:31:b3:55:8d:1c:a9:33:d9:d9:31:62:c5:f2:
9b:2b:ff:00:c9:9f:45:a0:90:3a:e5:4c:8c:e1:ad:
97:5c:9a:d6:43:79:ea:c5:4b:b1:6e:97:50:53:b4:
c7:9c:ed:bb:84:45:bb:1d:5a:d2:26:95:96:89:14:
51:21:25:f0:81:b1:73:f9:8e:4a:5e:55:b1:18:f4:
4e:4b:5e:7f:0a:59:71:6e:fd:26:09:4f:87:84:63:
39:b6:ca:74:89:9b:58:da:61:14:18:b3:49:34:fe:
a4:e1:57:6d:f3:c1:f8:87:92:29:0a:f6:9b:65:06:
c0:d3:a5:99:61:bf:58:e3:83:9c:e8:b3:90:a0:d6:
cc:ea:00:94:6f:15:1e:4f:6d:c8:c8:e2:5e:98:b8:
8a:28:48:51:9f:0b:30:0e:52:b3:4c:99:60:63:2f:
93:7b:52:eb:96:c2:3d:9e:1b:8e:18:10:48:a9:65:
3b:be:71:0a:92:33:88:fd:c3:fc:5d:f5:51:bd:13:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8C:EE:FE:E3:FD:1C:86:4A:E2:DC:61:DA:87:E2:0E:79:85:2A:D9
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:6b:22:52:5e:28:10:fe:43:e9:18:69:9d:64:2c:21:56:a3:
32:11:88:43:8b:f7:72:28:bc:d2:ec:65:e1:91:ed:5e:b5:c7:
a3:f7:bd:10:8e:9e:10:98:c7:f9:1e:c5:22:ea:64:d7:6c:50:
c7:e5:ce:4a:40:19:12:3f:b4:bf:40:ef:da:5e:b5:b5:f4:5c:
de:d2:b3:78:a1:f6:cd:90:47:7a:d6:fb:91:df:47:ba:9c:2b:
d1:6e:b0:e4:d7:4f:dd:81:53:69:21:25:c2:80:be:d4:50:3b:
e9:6a:2c:bd:0f:47:37:78:e1:3d:81:d5:7c:14:d7:2f:8a:80:
ef:5d:c1:87:ea:9d:06:ed:69:0e:de:59:aa:8d:1c:c9:bb:06:
aa:66:6e:2b:26:ec:61:92:f8:c4:49:64:c3:f5:44:93:e6:84:
f7:7f:57:a0:75:c4:98:58:3f:23:66:5e:4c:c0:c0:8c:48:fb:
e0:ee:c1:92:10:49:e6:6f:ba:03:1c:8b:ac:f9:7c:3f:02:93:
c4:44:33:1a:db:86:af:6c:db:11:01:ea:2c:9a:d9:9e:80:77:
36:9a:11:7e:0b:d8:47:cf:21:06:cb:b6:9b:ed:b4:50:57:70:
c9:ec:fc:33:18:cf:79:ef:ed:80:45:5b:bd:3d:70:92:d2:85:
4d:7c:a3:b6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdaRTm8nBDrQS/8PMzV8IavaFldowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4
OTI1RkY2RTAeFw0yNjAyMjgyMDA1NDVaFw0yNjAzMDQwMDU2NDVaMDMxMTAvBgNV
BAMTKDFFOENFRUZFRTNGRDFDODY0QUUyREM2MURBODdFMjBFNzk4NTJBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHui17VZ5gfrPtRKI75693YHM
sQ9CM4bjLUz3zyW9r6Y1MjDlXUHicstYSeLBKkpHBl/T/JHv597cgaVUMbNVjRyp
M9nZMWLF8psr/wDJn0WgkDrlTIzhrZdcmtZDeerFS7Ful1BTtMec7buERbsdWtIm
lZaJFFEhJfCBsXP5jkpeVbEY9E5LXn8KWXFu/SYJT4eEYzm2ynSJm1jaYRQYs0k0
/qThV23zwfiHkikK9ptlBsDTpZlhv1jjg5zos5Cg1szqAJRvFR5PbcjI4l6YuIoo
SFGfCzAOUrNMmWBjL5N7UuuWwj2eG44YEEipZTu+cQqSM4j9w/xd9VG9E32HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHozu/uP9HIZK4txh2ofiDnmFKtkwHwYDVR0j
BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx
QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1
RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi
MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG
RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANprIlJeKBD+Q+kYaZ1kLCFWozIRiEOL93Io
vNLsZeGR7V61x6P3vRCOnhCYx/kexSLqZNdsUMflzkpAGRI/tL9A79petbX0XN7S
s3ih9s2QR3rW+5HfR7qcK9FusOTXT92BU2khJcKAvtRQO+lqLL0PRzd44T2B1XwU
1y+KgO9dwYfqnQbtaQ7eWaqNHMm7Bqpmbism7GGS+MRJZMP1RJPmhPd/V6B1xJhY
PyNmXkzAwIxI++DuwZIQSeZvugMci6z5fD8Ck8REMxrbhq9s2xEB6iya2Z6Adzaa
EX4L2EfPIQbLtpvttFBXcMns/DMYz3nv7YBFW709cJLShU18o7Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:41 2026 by rpki-client