
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft
File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json)
Hash identifier: UaYv9uv5jyIL7gzxNANb8mHNOMqJPAThwt68D9h9j/8=
Subject key identifier: E3:65:51:07:14:D1:47:8B:BB:51:74:37:80:AF:78:26:43:8E:95:54
Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8
Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8
Certificate serial: 3F9025B6A55253E92A418040D9941D11E4909F49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft
Manifest number: 013F
Signing time: Sat 28 Feb 2026 15:51:45 +0000
Manifest this update: Sat 28 Feb 2026 15:46:45 +0000
Manifest next update: Wed 04 Mar 2026 00:21:45 +0000
Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: auTxlOGyUx1cy5HvSX5DnWx3cFTubm306blClFP2M7g=)
2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: G7Eh9QreckqfM5EgJD0mjj+sWXwCBNXO+hr95eIn/uA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl
rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:90:25:b6:a5:52:53:e9:2a:41:80:40:d9:94:1d:11:e4:90:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8
Validity
Not Before: Feb 28 15:46:45 2026 GMT
Not After : Mar 4 00:21:45 2026 GMT
Subject: CN=E365510714D1478BBB51743780AF7826438E9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:54:19:30:56:e8:24:ee:f4:b6:e7:0c:86:
d6:26:89:79:c4:a2:e4:3a:cb:03:a0:07:84:ed:e3:
e4:d5:68:fb:00:5e:a9:d3:cc:42:80:b8:fc:71:9d:
12:2e:4b:45:8e:2b:0a:10:53:4d:fe:de:33:6f:3b:
03:3a:b7:96:ba:9a:c6:4e:b0:e3:78:d5:f4:31:19:
4a:0e:77:b7:a7:ca:85:bd:f2:df:cb:b7:2b:af:57:
02:74:d8:c4:07:b8:91:e9:d7:cf:ea:a0:fc:8d:02:
7f:ff:cb:05:3c:83:59:37:70:60:2b:c9:b8:84:42:
23:c6:0f:46:64:26:34:62:21:27:b5:dc:f9:d0:5d:
b1:80:6d:c9:4e:42:1e:97:ad:9e:dc:66:95:5a:bc:
24:9a:ea:40:18:9c:bc:7b:38:e7:38:e3:4d:36:51:
cc:af:be:43:78:1c:54:f0:e3:6e:5b:aa:c5:77:40:
16:ff:b0:04:18:4a:c1:82:92:a8:ec:db:3e:b1:6c:
c1:61:be:b3:aa:ee:0d:78:20:f9:f1:5a:fe:dd:07:
32:74:fd:96:c3:bf:cf:7e:d0:b5:46:92:e1:e6:64:
95:11:06:1f:c5:6e:ce:64:17:b2:50:d3:a3:a2:c7:
74:77:85:26:85:52:61:07:0f:2f:d6:97:f8:1d:5e:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:51:07:14:D1:47:8B:BB:51:74:37:80:AF:78:26:43:8E:95:54
X509v3 Authority Key Identifier:
keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:4b:58:a9:65:98:ca:35:47:60:9f:7d:ac:29:b6:73:0a:
89:79:22:72:74:46:82:d6:5e:70:67:52:c7:ec:81:36:10:35:
73:cb:a4:ef:7a:14:8c:51:98:e5:fe:e5:2a:66:4e:5a:bf:ce:
1e:1b:e5:ff:92:75:ac:48:2c:ad:89:b2:2c:42:cb:3a:94:30:
d4:fd:11:09:fb:2f:db:f6:18:1e:45:a4:d2:bb:f2:c4:5b:33:
e8:dd:24:84:3c:e3:7e:fd:71:88:8d:d5:da:3d:98:de:07:54:
c3:ab:ba:ed:97:1f:97:18:86:b0:f6:7a:bc:b0:ac:6d:08:9a:
a0:9c:d9:ec:98:42:92:bd:eb:f0:17:67:62:41:66:6d:e6:51:
f3:59:43:5a:a8:45:9d:c2:e6:28:0c:80:f5:46:0d:9c:c2:74:
c2:b4:03:94:b3:28:69:c7:15:f1:d3:95:07:d1:10:09:69:4e:
ef:ad:35:63:25:fe:0a:d9:f4:0e:42:f2:7c:7a:c4:2a:d1:a9:
de:bc:9e:6a:d0:65:be:4c:3c:79:2b:e1:af:56:b2:e9:e5:2b:
25:ba:76:ea:c3:99:97:fd:98:6f:85:39:62:6e:cf:4f:41:33:
0e:3d:9b:22:c1:fd:49:a7:99:48:46:b4:36:7f:94:89:4d:80:
46:95:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:03 2026 by rpki-client