
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json)
Hash identifier: 6zscJ++ExwLqFoPqjiHkCgCV+deyQdS7PKBi7o6T144=
Subject key identifier: F6:33:78:D1:E1:3F:26:C7:7C:B5:F4:B8:45:88:BC:DD:C7:02:35:B0
Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Certificate serial: 61C6BCE29587478F5C64F7C63B92A6F97F585409
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
Manifest number: FD
Signing time: Mon 02 Mar 2026 07:40:01 +0000
Manifest this update: Mon 02 Mar 2026 07:35:01 +0000
Manifest next update: Thu 05 Mar 2026 12:45:01 +0000
Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=)
2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: i+VmlAV5PjCsM4UaOiddeXnWyYky5ekxpQyPx3snrGY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c6:bc:e2:95:87:47:8f:5c:64:f7:c6:3b:92:a6:f9:7f:58:54:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Validity
Not Before: Mar 2 07:35:01 2026 GMT
Not After : Mar 5 12:45:01 2026 GMT
Subject: CN=F63378D1E13F26C77CB5F4B84588BCDDC70235B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:f4:0b:54:fc:84:c9:ca:8a:c8:5b:d1:4a:
67:61:8f:d6:13:d7:4a:98:c3:89:f5:e9:30:4a:7e:
18:2f:46:6d:3b:3d:d7:38:79:8c:c0:9e:e1:4e:9f:
da:eb:9f:b9:14:cd:e5:9c:48:7a:d3:04:ca:74:e1:
b5:73:23:17:25:2e:77:0a:4d:10:58:6a:c3:94:b2:
51:18:c6:dc:7c:ff:81:e5:0c:7e:82:4d:3c:83:b6:
cc:f0:28:33:2b:95:15:0a:8f:96:31:f0:51:27:e2:
d3:0e:65:7d:8a:e1:0b:4d:4a:c4:16:40:64:05:9f:
e8:46:6d:f9:cf:2e:2e:a2:df:47:a0:f7:31:5f:59:
4c:62:d3:1f:42:8d:f5:77:84:25:06:c8:dd:d8:5f:
ca:45:94:d2:d6:cf:25:ce:04:bf:38:55:af:11:ff:
b6:03:53:b5:26:c3:ad:21:26:22:86:7b:34:af:23:
ce:bc:c9:14:d7:3d:26:02:94:92:22:51:6c:9d:f9:
24:73:89:45:69:79:a4:be:3e:5e:57:f9:36:33:e4:
f0:a0:cd:f2:bd:b9:ac:88:39:97:7a:7c:2d:ff:f5:
23:ef:2a:0f:55:75:e6:fc:b3:f7:f6:60:3f:f1:97:
24:46:30:5d:e4:fa:19:3a:bb:41:e3:17:7d:48:18:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:78:D1:E1:3F:26:C7:7C:B5:F4:B8:45:88:BC:DD:C7:02:35:B0
X509v3 Authority Key Identifier:
keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:48:d8:12:20:51:89:8f:b7:b2:d5:58:6f:46:4f:d4:42:
3d:41:24:da:66:5f:2f:c5:86:2c:7c:06:34:94:28:60:31:1d:
00:15:99:f2:39:f9:17:e9:33:95:64:9c:bc:89:0d:20:89:99:
1a:7e:e5:f9:5a:06:5a:ce:91:fb:06:e8:3f:b4:ad:c3:a4:ef:
8a:65:c2:e9:80:53:56:75:bc:d8:25:71:34:39:8a:92:c8:4b:
cd:95:5b:55:24:cf:bc:d4:54:c2:42:03:4c:e3:2a:28:24:84:
a9:1d:01:89:f0:f0:d8:7a:24:91:20:49:53:b8:1d:c2:22:a0:
f1:1a:c0:d7:b9:0e:7c:59:4c:5e:35:60:18:64:28:0a:5d:e6:
49:60:a5:af:48:3b:50:3a:81:5d:ae:8c:56:5c:4d:a7:b6:61:
78:39:5e:67:a2:9f:e8:67:af:85:a5:dc:86:6a:68:aa:aa:22:
3b:9f:5e:55:91:fe:c3:6c:16:98:6c:a3:22:9c:21:c4:3a:8f:
92:c5:97:d8:27:89:de:84:79:11:25:b6:82:a2:13:27:5f:f1:
4e:88:1d:ec:22:b9:32:1f:ed:a0:9e:7a:97:ac:16:76:77:b5:
0b:a2:92:e7:4f:96:8a:61:07:a5:6f:41:52:6c:a8:69:60:38:
b5:f0:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:33 2026 by rpki-client