
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier: 4RsB9aXtJiJen2vDDGtbce7IN+uTeHVGNWokCl3t7ds=
Subject key identifier: F5:A0:C6:59:6F:61:B9:C3:23:E5:D5:A1:26:E4:87:44:ED:2A:33:E2
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial: 4075E8DCBB9E52F1F9DFC498294D573695D5D893
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number: 055C
Signing time: Wed 25 Mar 2026 18:01:59 +0000
Manifest this update: Wed 25 Mar 2026 17:56:59 +0000
Manifest next update: Sat 28 Mar 2026 21:59:59 +0000
Files and hashes: 1: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
2: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
3: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
4: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
5: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
6: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
8: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
9: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: z5jMKpF3jS3m+ZVjoBzznxnsBwnpx0f5sG3iDQHBrhc=)
10: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
11: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
12: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
13: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 21:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:75:e8:dc:bb:9e:52:f1:f9:df:c4:98:29:4d:57:36:95:d5:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Validity
Not Before: Mar 25 17:56:59 2026 GMT
Not After : Mar 28 21:59:59 2026 GMT
Subject: CN=F5A0C6596F61B9C323E5D5A126E48744ED2A33E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:99:d9:ac:8e:1c:c4:25:16:10:7e:1a:3b:
c9:9f:37:00:6a:53:6d:a3:fa:5c:8f:39:ff:76:7f:
09:45:29:a6:07:21:c2:32:56:55:d7:26:48:44:1f:
ae:db:f9:00:85:f1:2b:88:3d:48:56:1d:35:3e:ca:
77:0d:1a:19:b4:07:e2:84:05:3a:5c:f5:d4:58:6a:
3e:05:34:c0:e1:92:a9:65:e4:79:15:25:f1:de:c4:
f3:4c:b0:e5:e5:04:95:57:2f:6e:2a:79:1e:d7:3a:
8e:35:2c:87:b4:a7:32:94:b3:96:6a:e7:d4:9c:a0:
ab:a7:34:0f:b1:54:13:76:ad:c4:6e:9f:0e:7b:a3:
14:c8:8d:a7:95:4f:ce:36:42:d4:51:77:94:28:ac:
7e:a1:01:9a:9b:0d:b5:91:f3:9d:da:a6:b8:58:cd:
21:74:f9:7c:01:2b:99:4f:01:08:2d:b3:aa:74:2c:
89:12:3b:5a:d8:ef:31:d7:82:e6:b5:78:b9:e7:92:
80:3a:b4:d3:a2:c2:90:90:f1:6c:b5:2b:00:42:f8:
46:17:e8:e2:63:7d:97:bc:3a:4a:f8:94:d7:b2:99:
0a:89:93:77:75:2a:b6:81:d7:3a:8a:7f:44:bf:ce:
79:0f:40:33:27:6b:0e:b7:67:d8:52:35:09:18:92:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:C6:59:6F:61:B9:C3:23:E5:D5:A1:26:E4:87:44:ED:2A:33:E2
X509v3 Authority Key Identifier:
keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d5:bb:fb:7c:3a:90:b9:cf:22:61:b2:79:e1:75:e1:bd:01:
2c:d7:6f:7d:ef:e2:1a:2c:55:72:4f:af:38:22:98:3a:dd:eb:
0c:45:39:a5:45:7d:85:31:29:6e:ca:6f:1c:9a:60:f4:3c:29:
75:e1:44:e1:67:a9:50:6a:91:02:c3:cf:6d:80:59:31:94:17:
27:b6:00:d7:d8:53:95:63:82:9a:dc:f1:4d:43:67:9f:1b:19:
7f:0b:b5:8e:c1:9a:8c:04:83:0d:5b:26:3f:6a:f0:5e:c1:66:
d0:20:0b:32:0f:61:bf:60:63:70:bc:c5:51:ad:90:f5:28:c2:
2f:16:0c:69:21:d5:66:99:e2:f0:e2:70:52:c2:cf:1a:b7:93:
f4:6a:23:73:c0:bc:bd:2b:24:62:90:2e:ba:b7:25:f6:e4:75:
fe:68:82:08:7f:c1:31:ad:82:54:bd:fc:e0:93:42:3a:ba:93:
96:b4:10:3a:0a:e1:e4:d4:02:ba:35:b2:7d:b0:02:be:5d:05:
fa:00:0a:ed:5b:d4:b9:da:a8:bf:8b:53:52:db:9d:be:ab:7e:
24:d0:4a:aa:f7:59:24:83:8a:b9:38:58:34:be:8a:0b:da:fb:
12:76:cb:17:ea:43:9b:d9:12:79:cb:d2:d2:84:21:11:19:f8:
ae:36:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:06 2026 by rpki-client