
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json)
Hash identifier: M9Z+QRK2vcBZk7gOUp7fjP8DbO+RNCO2dyMhXl1ZzkU=
Subject key identifier: 9C:41:03:76:A5:8C:F1:8C:62:B8:B0:FA:1F:E8:C9:33:A3:84:23:AA
Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6
Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6
Certificate serial: 76D85037213A448E560A7250DEB3B8F084B07A51
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
Manifest number: 86
Signing time: Thu 16 Apr 2026 20:12:30 +0000
Manifest this update: Thu 16 Apr 2026 20:07:30 +0000
Manifest next update: Sun 19 Apr 2026 20:43:30 +0000
Files and hashes: 1: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: E48xbT0ce5QSLI8GSG/ImgHbRgidHkazIEIQFLxJMzY=)
2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl
rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d8:50:37:21:3a:44:8e:56:0a:72:50:de:b3:b8:f0:84:b0:7a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6
Validity
Not Before: Apr 16 20:07:30 2026 GMT
Not After : Apr 19 20:43:30 2026 GMT
Subject: CN=9C410376A58CF18C62B8B0FA1FE8C933A38423AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:63:3d:8f:89:1a:c7:6f:81:9c:01:e1:1b:
16:ef:33:fd:57:68:57:8d:75:25:7b:7a:5b:f8:04:
a1:ac:21:e7:8d:ca:7a:5b:c5:3d:a4:71:1d:ae:0e:
57:f0:c5:a4:4c:e8:dd:51:b5:f8:33:db:65:cb:23:
c8:3d:52:9f:89:89:9e:14:f5:52:19:00:b2:77:a5:
de:f6:17:22:22:6e:2d:f0:2b:62:13:71:09:50:69:
c0:c4:f2:14:6d:b5:20:f5:bb:6c:42:e4:a7:45:2c:
d9:cb:88:29:0d:cd:1b:4e:a6:93:ec:86:dd:11:5c:
f0:d0:36:3a:20:49:32:fe:bf:0c:34:d6:8b:d6:a9:
08:5c:72:3a:c4:20:a4:d9:51:75:40:d0:3f:3a:50:
4c:f5:2d:90:ea:8c:4c:1d:87:4d:b2:41:eb:12:20:
97:d0:64:fc:93:03:d1:1e:66:76:34:20:82:4d:6a:
4a:17:26:ba:df:85:2f:9b:7a:07:25:9d:a1:54:80:
2a:eb:70:84:eb:fb:07:6f:e7:bd:3c:80:3f:49:26:
96:b9:69:77:e1:47:1a:b5:8d:db:d2:e2:05:c7:a8:
94:d5:87:6e:57:b7:90:3b:29:2c:76:08:e8:90:36:
f1:4e:36:4e:c7:6c:53:7e:61:9f:ea:f3:e5:7c:0e:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:03:76:A5:8C:F1:8C:62:B8:B0:FA:1F:E8:C9:33:A3:84:23:AA
X509v3 Authority Key Identifier:
keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:ac:c3:0a:44:80:e1:95:62:41:06:d8:61:c9:98:f1:89:
50:7d:50:b1:e2:97:80:b2:53:ff:84:e5:1f:87:64:8a:2e:25:
4e:84:8d:10:df:40:93:92:75:f2:63:c0:d2:5d:a4:bd:d9:12:
b3:47:0f:6b:ce:4a:2f:d9:4b:5d:d3:e9:c9:76:3b:4c:d7:c1:
b1:dd:68:a5:bc:5e:ef:83:a7:0a:e3:c6:f8:69:d8:36:59:00:
48:1a:9a:99:8f:dd:e0:0f:5c:36:6c:f7:e7:f3:39:36:f8:69:
b6:19:fe:3e:e8:f6:fe:fb:31:64:45:80:94:34:64:f1:c2:ec:
32:9f:9f:f8:3e:1f:a1:13:a4:3e:ec:00:9c:51:f1:55:46:b7:
cd:41:d8:28:ca:5e:2e:b3:e8:fe:30:90:23:08:ba:7b:6c:1f:
97:9a:6a:a1:3c:68:35:14:5c:c9:e0:86:f3:c4:70:f9:2a:3c:
56:4d:82:51:39:8c:75:15:76:be:08:c7:15:4b:23:80:d3:68:
2d:54:66:e8:e3:7c:43:84:a3:2e:a3:5d:62:ba:7a:9c:22:7d:
ae:17:cf:2e:32:e9:74:4f:7f:9e:8f:e1:93:46:be:71:78:b8:
6a:1f:86:ad:e9:d6:32:68:60:be:d8:a3:09:62:a8:61:70:c1:
0f:0d:53:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdthQNyE6RI5WCnJQ3rO48ISwelEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC
MjQ4ODFBNjAeFw0yNjA0MTYyMDA3MzBaFw0yNjA0MTkyMDQzMzBaMDMxMTAvBgNV
BAMTKDlDNDEwMzc2QTU4Q0YxOEM2MkI4QjBGQTFGRThDOTMzQTM4NDIzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUWM9j4kax2+BnAHhGxbvM/1X
aFeNdSV7elv4BKGsIeeNynpbxT2kcR2uDlfwxaRM6N1Rtfgz22XLI8g9Up+JiZ4U
9VIZALJ3pd72FyIibi3wK2ITcQlQacDE8hRttSD1u2xC5KdFLNnLiCkNzRtOppPs
ht0RXPDQNjogSTL+vww01ovWqQhccjrEIKTZUXVA0D86UEz1LZDqjEwdh02yQesS
IJfQZPyTA9EeZnY0IIJNakoXJrrfhS+begclnaFUgCrrcITr+wdv5708gD9JJpa5
aXfhRxq1jdvS4gXHqJTVh25Xt5A7KSx2COiQNvFONk7HbFN+YZ/q8+V8DpXzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnEEDdqWM8YxiuLD6H+jJM6OEI6owHwYDVR0j
BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC
OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4
ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5
NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4
M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJl9rMMKRIDhlWJBBthhyZjxiVB9ULHil4Cy
U/+E5R+HZIouJU6EjRDfQJOSdfJjwNJdpL3ZErNHD2vOSi/ZS13T6cl2O0zXwbHd
aKW8Xu+Dpwrjxvhp2DZZAEgampmP3eAPXDZs9+fzOTb4abYZ/j7o9v77MWRFgJQ0
ZPHC7DKfn/g+H6ETpD7sAJxR8VVGt81B2CjKXi6z6P4wkCMIuntsH5eaaqE8aDUU
XMnghvPEcPkqPFZNglE5jHUVdr4IxxVLI4DTaC1UZujjfEOEoy6jXWK6epwifa4X
zy4y6XRPf56P4ZNGvnF4uGofhq3p1jJoYL7YowliqGFwwQ8NU+8=
-----END CERTIFICATE-----
Generated at Sat Apr 18 09:33:23 2026 by rpki-client