
$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft
File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json)
Hash identifier: Oqsyu0iO4u+auJbRdIAON+9NiTL3FcLWfR4qcjiqxzg=
Subject key identifier: 28:27:74:CA:8C:8E:26:CC:55:78:6B:00:D9:7F:F6:90:3D:CD:7A:C3
Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F
Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F
Certificate serial: 6ACEBA05853CC3FDD0971E2CCD638B52C4FCB4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft
Manifest number: F0
Signing time: Mon 02 Mar 2026 02:00:03 +0000
Manifest this update: Mon 02 Mar 2026 01:55:03 +0000
Manifest next update: Thu 05 Mar 2026 05:16:03 +0000
Files and hashes: 1: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=)
2: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=)
3: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=)
4: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: o5VPbr7xcSYTGrhz0iB8rxjYNPu9pw3y6zYOmgI0XdI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl
rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ce:ba:05:85:3c:c3:fd:d0:97:1e:2c:cd:63:8b:52:c4:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F
Validity
Not Before: Mar 2 01:55:03 2026 GMT
Not After : Mar 5 05:16:03 2026 GMT
Subject: CN=282774CA8C8E26CC55786B00D97FF6903DCD7AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:fa:f4:a1:9a:5c:50:a1:3b:d9:77:1b:dc:
21:24:ed:47:2a:f9:8f:f8:2e:4b:ed:7e:eb:9e:0f:
2e:8b:ae:2a:70:e0:e1:e0:69:0e:d7:1d:91:28:7a:
f9:b2:3d:e9:20:9a:c9:3f:83:22:cd:ac:e8:2a:e1:
e0:89:b5:73:e0:12:29:2e:c8:c7:62:01:51:ec:63:
05:0a:f3:74:5a:10:6e:59:4d:39:f9:4f:8a:7b:92:
63:40:55:6c:cb:3c:c6:ab:f4:9a:13:17:fc:61:04:
a1:52:7f:f0:49:3a:a1:cf:db:70:0d:ca:7c:56:5e:
61:28:b8:9b:92:45:19:40:bd:7f:57:67:0e:cb:56:
72:5e:6e:55:0f:78:79:cb:72:5b:7c:d5:3d:0d:9a:
84:89:a3:32:56:58:91:54:e3:45:70:62:5f:15:e9:
1b:42:eb:bd:45:2d:7b:f4:3d:17:db:40:7d:2a:04:
82:1f:32:91:e4:e7:6b:73:67:99:aa:7d:57:16:f6:
9c:7d:e2:86:e6:38:95:9a:7a:22:bb:68:bc:d9:b4:
40:1f:21:8f:1e:f5:68:63:69:da:32:3c:66:e9:15:
4b:6e:d6:0a:1d:1d:cf:d2:54:7a:18:84:14:7c:57:
76:ab:2a:a2:44:c5:cd:e6:0e:10:98:92:4a:9b:6c:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:27:74:CA:8C:8E:26:CC:55:78:6B:00:D9:7F:F6:90:3D:CD:7A:C3
X509v3 Authority Key Identifier:
keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:65:3a:24:d2:c2:72:9c:c6:c9:aa:d8:bf:ee:e2:9a:88:
e0:c9:2a:76:1a:5d:e7:fc:2f:e6:4e:5c:4a:17:26:92:81:38:
91:08:01:95:90:5c:63:20:f4:c5:1d:4e:b5:d5:59:a6:1e:7e:
61:35:69:ff:44:23:70:3b:0b:45:62:21:48:0a:49:74:b5:0e:
da:06:48:be:10:d2:b0:c5:a7:5e:7d:b2:6b:eb:64:4a:56:3b:
53:6b:a7:87:73:e8:84:95:8f:2b:7d:81:bd:98:15:14:ab:88:
28:c3:7d:2c:d9:62:24:4c:81:df:3a:a6:bc:26:b6:02:c4:cf:
0b:b6:9d:0f:65:c4:83:34:89:71:e3:e7:4a:d4:7a:b7:02:9d:
54:77:28:c0:47:36:ae:69:e3:df:1f:ea:26:93:4f:ba:fc:e4:
be:3a:96:f7:7f:08:62:cf:15:5a:57:be:90:8f:20:7a:24:c8:
b7:5b:7b:b1:fe:6c:90:0c:03:ba:59:3c:84:55:eb:af:77:d8:
57:43:f4:1e:b2:ae:6c:b6:13:3e:96:dc:0d:8a:d0:e7:15:5b:
91:b2:45:ac:1a:46:79:40:cd:de:7c:f7:c7:8c:59:3b:43:b3:
e1:3c:2b:9c:a5:7e:a6:15:03:23:83:82:fa:68:00:aa:4f:c5:
a8:b8:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:30 2026 by rpki-client