
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json)
Hash identifier: mAk8qhAO6F3VKN/GmrvmPDueIA9J3+53Tu6ogwsryoY=
Subject key identifier: 55:FB:52:A3:BA:C4:F7:B6:41:8C:7D:26:B6:DC:29:B6:E2:E4:86:E2
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial: 62A2536A99A30878F6268DA12A288D533AB6DB2B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
Manifest number: 0216
Signing time: Sun 01 Mar 2026 12:21:25 +0000
Manifest this update: Sun 01 Mar 2026 12:16:25 +0000
Manifest next update: Wed 04 Mar 2026 15:39:25 +0000
Files and hashes: 1: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=)
2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: Omg/4JTLSUHTbEEbQ56hoPhObDfkyuMolpZt9Q+XXt8=)
3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=)
4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 15:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a2:53:6a:99:a3:08:78:f6:26:8d:a1:2a:28:8d:53:3a:b6:db:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Validity
Not Before: Mar 1 12:16:25 2026 GMT
Not After : Mar 4 15:39:25 2026 GMT
Subject: CN=55FB52A3BAC4F7B6418C7D26B6DC29B6E2E486E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7b:6b:79:80:34:50:f1:b2:1d:cd:b7:6c:5b:
23:3f:82:b5:2d:57:fe:b8:0d:15:09:70:f9:b1:60:
33:9b:5c:ea:5a:a2:5c:30:2b:76:98:58:c8:d5:a6:
a0:e1:98:9a:6f:80:a2:cc:53:73:fa:3f:43:f6:7e:
55:14:e5:a1:0a:a5:43:d4:20:b3:e1:79:8c:28:ff:
26:a3:b3:98:ae:db:d3:05:15:f8:a0:7e:54:e8:ca:
9f:46:97:47:d5:ec:44:fe:94:56:6e:2c:7a:0e:ef:
75:33:ea:34:fa:52:bd:ed:72:59:8c:92:fb:13:a1:
af:ea:fb:27:63:a3:ad:d5:68:7c:c8:e7:d9:a4:c8:
02:90:9d:27:87:f5:09:2f:b3:7c:75:1e:2e:ea:dc:
6c:3b:ec:a6:dd:53:d5:44:b7:fb:4f:92:6b:7a:a7:
3a:2b:aa:c8:6c:3c:52:b9:39:02:13:25:b0:85:62:
16:72:85:eb:08:a2:17:71:ef:65:f1:fe:20:ab:05:
13:5c:7a:38:25:c6:07:02:bc:4d:a9:be:96:a6:c4:
0f:e5:22:76:a2:3e:d5:8e:ae:03:f4:f6:b4:f5:4c:
93:43:d0:ff:c1:4a:01:47:27:43:61:dd:9c:7e:74:
88:b3:a8:fa:6f:71:fa:a4:3a:9e:52:24:76:47:87:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FB:52:A3:BA:C4:F7:B6:41:8C:7D:26:B6:DC:29:B6:E2:E4:86:E2
X509v3 Authority Key Identifier:
keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:be:18:ca:db:dc:46:b6:6f:bf:c6:35:16:46:89:aa:46:
a2:c7:47:5a:0d:85:7e:cb:aa:26:5d:bf:2d:bd:88:0f:d1:86:
2f:fc:7a:80:f0:1e:b4:6e:3b:b2:c1:b0:ed:dd:19:3f:1e:a8:
ed:12:32:73:ce:bf:4a:52:37:1b:dc:64:14:22:51:d7:10:9e:
85:b4:00:7e:da:db:fd:9e:a6:b3:9b:8e:07:64:7c:2b:59:e6:
0e:10:a6:11:06:cb:89:31:f4:2a:11:ae:8f:fe:11:2d:c3:5e:
91:84:09:88:a5:1a:78:27:72:29:55:7a:27:e1:4a:80:c1:1f:
f2:ec:64:0d:fe:71:0a:97:0d:f8:b3:7a:9f:1c:0a:1a:29:0e:
30:4a:ec:f4:21:39:ba:34:96:aa:46:aa:b2:ab:f8:f4:ab:5e:
44:f9:74:8e:0b:40:5b:fe:67:e1:04:04:11:a0:2d:3b:27:52:
d4:0c:5d:eb:06:d3:f1:00:b5:de:72:1b:2e:4f:d9:3c:7a:b1:
bb:e6:5a:64:ef:c3:65:62:71:b8:ff:72:ee:6f:c9:65:e4:14:
55:91:5e:50:c1:32:e5:d9:bd:5b:fa:ab:97:8b:57:61:ae:ac:
e6:b6:5c:4f:b2:4b:ee:d5:91:1f:fc:1c:6b:22:5c:5b:12:a4:
64:c5:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:01 2026 by rpki-client