
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier: eKT9cKdAts2/jSXax9HYK+SEL/evf+xqVEo2yLQd2RI=
Subject key identifier: 49:01:81:C3:7D:7D:A4:E2:FA:10:5D:C0:FA:4B:96:39:1B:0B:8B:24
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial: 0E8FA5C6F87BABD8E5A26C3224A5AF52AA42AF56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number: 02E6
Signing time: Wed 25 Mar 2026 19:42:23 +0000
Manifest this update: Wed 25 Mar 2026 19:37:23 +0000
Manifest next update: Sun 29 Mar 2026 00:26:23 +0000
Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=)
2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: AjUtfP73aNHAA5QxzLwVAPwCf+XpuL3+ccyUAgfQfwY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 00:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8f:a5:c6:f8:7b:ab:d8:e5:a2:6c:32:24:a5:af:52:aa:42:af:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Validity
Not Before: Mar 25 19:37:23 2026 GMT
Not After : Mar 29 00:26:23 2026 GMT
Subject: CN=490181C37D7DA4E2FA105DC0FA4B96391B0B8B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:6c:08:3d:3a:3f:67:e5:61:6a:ff:e2:47:
c7:8c:1b:be:ce:f0:44:19:6d:64:11:20:2e:d5:58:
ff:4a:3d:49:6a:d6:0e:44:04:ff:69:d0:87:a4:17:
8c:50:91:9f:a7:03:d1:a4:d7:cc:bf:cf:21:9e:aa:
19:d6:14:0b:da:b8:7b:8f:f3:89:5d:71:6d:e1:9f:
78:15:84:a3:1e:06:7f:fa:c4:00:b8:2c:be:62:23:
04:92:23:f4:35:38:f5:be:61:94:10:d8:4a:1f:ab:
29:f5:32:5c:8f:16:6e:34:fe:5c:57:20:c0:8e:05:
b5:a3:8c:4e:96:99:a0:d7:69:b0:1c:28:ac:20:5b:
95:3e:aa:6e:97:fb:ad:60:18:1f:ce:c8:e2:20:80:
36:a0:d3:a6:76:04:73:ca:b9:b5:1c:17:80:95:55:
d6:e8:17:7c:53:88:5f:dc:16:95:33:5a:2e:0e:6f:
e2:d7:c0:c6:dd:f0:c0:31:c5:8c:b4:a7:2d:e6:6a:
13:27:52:b0:ea:64:61:97:b1:8d:50:6d:ea:c2:b4:
bf:58:3f:24:17:05:8d:ec:0c:c2:0d:32:8e:76:21:
f9:46:b2:c9:cb:ba:fc:70:bb:e8:85:b1:3a:2e:30:
ef:ca:2e:78:63:b2:64:40:bf:ef:0d:d9:9f:c3:78:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:81:C3:7D:7D:A4:E2:FA:10:5D:C0:FA:4B:96:39:1B:0B:8B:24
X509v3 Authority Key Identifier:
keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:e3:df:ba:d4:57:a6:68:62:8f:e5:45:52:aa:02:cc:78:
4f:ab:b3:d8:81:e5:a7:75:a1:b3:e6:d0:9e:96:a9:d1:d2:79:
7f:61:7d:1f:a6:16:f7:07:29:ec:fe:84:04:84:17:98:44:04:
a6:9e:cf:30:cf:ec:22:dc:6b:ee:96:02:55:d7:7b:10:60:b6:
91:1d:8d:4e:93:25:4c:17:dd:19:56:c1:2b:52:43:8e:e4:c1:
b5:3b:b5:ca:98:08:c9:85:4c:7e:cd:3f:d9:17:b7:29:62:6a:
0f:9b:e7:0b:73:a9:3f:ea:54:d2:eb:c0:83:14:61:93:65:d5:
50:02:e2:c1:c6:fe:fb:e6:57:8d:96:ee:c0:d7:e4:dd:af:99:
55:70:1e:c5:e4:69:d7:06:dd:32:05:ab:95:27:b9:3b:f2:87:
42:aa:df:28:12:09:17:eb:af:91:a3:41:ed:0a:6c:9f:30:2a:
de:c2:df:19:5f:72:49:28:65:04:47:63:86:07:9b:b6:b8:6c:
7f:b5:55:67:b0:3b:98:73:b4:3a:2d:5a:44:6e:9b:79:1c:95:
c4:28:c8:90:6a:65:2e:a9:73:55:0a:5c:4e:ad:a2:aa:ba:f2:
52:76:0f:0d:67:fe:bb:15:eb:c3:b6:63:7d:d2:89:e0:49:43:
6f:5c:69:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDo+lxvh7q9jlomwyJKWvUqpCr1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE
RTEyODQwMzAeFw0yNjAzMjUxOTM3MjNaFw0yNjAzMjkwMDI2MjNaMDMxMTAvBgNV
BAMTKDQ5MDE4MUMzN0Q3REE0RTJGQTEwNURDMEZBNEI5NjM5MUIwQjhCMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC552wIPTo/Z+Vhav/iR8eMG77O
8EQZbWQRIC7VWP9KPUlq1g5EBP9p0IekF4xQkZ+nA9Gk18y/zyGeqhnWFAvauHuP
84ldcW3hn3gVhKMeBn/6xAC4LL5iIwSSI/Q1OPW+YZQQ2Eofqyn1MlyPFm40/lxX
IMCOBbWjjE6WmaDXabAcKKwgW5U+qm6X+61gGB/OyOIggDag06Z2BHPKubUcF4CV
VdboF3xTiF/cFpUzWi4Ob+LXwMbd8MAxxYy0py3mahMnUrDqZGGXsY1QberCtL9Y
PyQXBY3sDMINMo52IflGssnLuvxwu+iFsTouMO/KLnhjsmRAv+8N2Z/DeE+VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSQGBw319pOL6EF3A+kuWORsLiyQwHwYDVR0j
BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy
NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy
ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj
ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3
NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHjB49+61FemaGKP5UVSqgLMeE+rs9iB5ad1
obPm0J6WqdHSeX9hfR+mFvcHKez+hASEF5hEBKaezzDP7CLca+6WAlXXexBgtpEd
jU6TJUwX3RlWwStSQ47kwbU7tcqYCMmFTH7NP9kXtyliag+b5wtzqT/qVNLrwIMU
YZNl1VAC4sHG/vvmV42W7sDX5N2vmVVwHsXkadcG3TIFq5UnuTvyh0Kq3ygSCRfr
r5GjQe0KbJ8wKt7C3xlfckkoZQRHY4YHm7a4bH+1VWewO5hztDotWkRum3kclcQo
yJBqZS6pc1UKXE6toqq68lJ2Dw1n/rsV68O2Y33SieBJQ29caRY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:25 2026 by rpki-client