
$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json)
Hash identifier: PacTjyEJKK5LG/7uvWG3/vBo8aPekvnoZikDR9k0Va4=
Subject key identifier: 15:46:CD:2F:04:F4:AA:B7:7F:5E:1F:5A:AC:C0:D9:C4:51:54:B7:57
Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25
Certificate serial: 69D58E5185FC437D5B4F4DE96DE5553A0B868DE9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
Manifest number: 01F2
Signing time: Tue 24 Mar 2026 20:11:22 +0000
Manifest this update: Tue 24 Mar 2026 20:06:22 +0000
Manifest next update: Fri 27 Mar 2026 23:35:22 +0000
Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: 7c5pGFXHnJF6p7mqvJmjexYeyhyNLtLNdfdI5NxGprM=)
2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=)
3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: 5qf4yfdtRFxDwTXbS5Sd8oS1lIYlWxfJ25SqGelkTSo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 23:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d5:8e:51:85:fc:43:7d:5b:4f:4d:e9:6d:e5:55:3a:0b:86:8d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25
Validity
Not Before: Mar 24 20:06:22 2026 GMT
Not After : Mar 27 23:35:22 2026 GMT
Subject: CN=1546CD2F04F4AAB77F5E1F5AACC0D9C45154B757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:c2:f1:59:0d:64:a4:51:7c:15:e0:30:1e:
cf:3c:a2:1f:33:30:57:44:a6:eb:1f:60:1b:5f:a7:
57:3c:79:9b:15:13:7d:39:2e:ce:a6:cb:35:4d:67:
7d:73:71:13:d1:53:7b:ce:81:a0:ba:bd:98:a3:3f:
c2:86:4a:c8:75:80:ac:02:a5:82:3e:07:5f:ac:8d:
6d:a5:99:79:35:c9:4f:ad:5f:eb:ee:1f:4d:fc:28:
b8:53:2b:0f:c6:f7:87:f8:e6:6d:58:55:61:6c:a8:
70:69:f0:74:b5:55:95:2d:2c:a9:dc:69:f2:58:66:
ca:ab:0b:2a:24:13:45:7e:b8:74:7a:bf:37:24:a3:
de:ab:5b:4f:e4:e5:5a:01:32:09:f3:fc:6a:4e:f3:
37:57:9e:2c:eb:47:c3:cb:03:ba:b8:bc:b4:f1:56:
b0:42:c7:08:1e:42:f0:f1:97:72:cd:4b:51:e8:a9:
33:b9:71:91:5e:39:98:72:e3:ee:64:1b:ed:cb:32:
44:a9:1b:6a:e3:08:d4:97:a5:92:e7:6d:ae:6f:f1:
34:5b:0d:80:17:47:0c:23:ab:43:20:c5:7a:ea:dc:
1b:18:67:ce:bc:b1:f2:08:17:7c:d8:32:6c:9b:95:
98:1b:61:57:22:52:d6:44:bd:05:1e:ef:2c:89:43:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:CD:2F:04:F4:AA:B7:7F:5E:1F:5A:AC:C0:D9:C4:51:54:B7:57
X509v3 Authority Key Identifier:
keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:44:34:fa:13:c3:68:f3:75:1d:1a:e1:18:5d:1f:eb:bb:fc:
11:39:44:3f:dc:7d:b1:79:68:4b:36:17:d5:8d:75:1a:27:84:
87:8e:bb:0f:67:9e:47:61:e7:e9:d2:9c:e0:d8:05:05:07:df:
05:b6:70:ba:bb:72:d8:95:80:92:5b:68:8e:e7:d9:7b:33:82:
6a:8d:12:15:85:54:85:65:ff:ad:37:98:e5:96:46:05:c2:19:
94:1c:20:68:74:3c:03:c8:1e:d8:1b:aa:99:f2:89:12:a4:c9:
f7:d8:ed:c2:60:a5:ad:2a:a3:52:27:01:7d:7e:71:54:61:f4:
a9:df:f7:6b:39:c4:92:b7:56:f8:8f:f9:57:44:62:03:97:8f:
79:8d:c7:93:eb:17:e7:5d:70:81:0e:52:17:94:66:16:fb:85:
ad:bc:de:3d:a7:a8:3f:08:e6:d1:bb:12:00:fc:04:87:d4:82:
4d:0f:77:30:a8:c1:0c:11:36:f4:0e:0d:8e:d4:e0:0f:11:51:
d8:b1:cc:15:1c:70:51:fe:15:ce:67:88:58:47:b7:e0:1d:8b:
2d:d3:b2:a6:1e:26:15:d2:ab:0f:39:41:a2:63:04:c3:19:57:
34:84:f6:e7:3b:71:80:dd:b4:e3:89:12:eb:2b:61:4a:e8:19:
04:04:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:51 2026 by rpki-client