
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier: pSblaJbBRKjXy5Gij2w5LGO7K1bmFiOOl1DpwK04DVY=
Subject key identifier: B7:CD:65:5E:E3:30:67:4E:F1:F4:08:E9:90:85:FF:A6:E3:9A:9F:31
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial: 656D2EC931433AF36370A94B8D62A8C9D8B0C80B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number: 055D
Signing time: Tue 24 Mar 2026 11:02:05 +0000
Manifest this update: Tue 24 Mar 2026 10:57:05 +0000
Manifest next update: Fri 27 Mar 2026 14:36:05 +0000
Files and hashes: 1: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
2: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
3: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
4: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
5: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
6: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
7: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
8: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
9: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
10: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
11: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: TtljGbjZ9788D8Ol0auAFEh5PRvYN52hEpaU3I1zZFg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 14:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6d:2e:c9:31:43:3a:f3:63:70:a9:4b:8d:62:a8:c9:d8:b0:c8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Validity
Not Before: Mar 24 10:57:05 2026 GMT
Not After : Mar 27 14:36:05 2026 GMT
Subject: CN=B7CD655EE330674EF1F408E99085FFA6E39A9F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:15:ba:70:1a:4c:13:ec:c7:de:ab:b1:c0:
f1:69:30:06:f3:6b:50:7b:20:67:ac:ab:ca:c5:15:
4a:2e:7f:bc:7c:1a:48:82:91:8a:c7:8d:5d:ca:58:
ed:90:7c:39:92:8e:0f:b3:dd:f1:eb:85:f1:43:a8:
da:0d:48:a7:30:eb:8c:cf:6a:4f:97:18:80:e9:b1:
c3:32:7f:79:da:e4:34:a2:05:05:38:3b:f9:c5:dd:
c3:a3:15:14:57:34:4e:8a:82:90:d0:62:1a:1c:29:
34:f3:cd:5d:4f:8b:1c:60:67:b7:e7:f6:0f:6a:9e:
89:3d:37:04:a5:96:9b:dd:43:3a:88:f2:d9:45:c9:
d9:30:67:0f:64:1a:ea:55:91:3e:58:b9:82:4c:92:
7a:a1:18:0c:8e:10:46:6b:a6:5e:96:86:b6:aa:1a:
5c:59:24:a3:e3:1c:e1:d1:37:ef:ed:8e:9b:4c:82:
07:6c:5b:5b:22:c7:83:3b:14:8c:e7:25:1b:94:51:
28:bd:cd:be:66:9c:3a:fd:ed:f1:cb:86:70:5c:e6:
7d:2a:b3:3b:ac:3d:b5:4e:40:68:28:e2:d1:65:c4:
ae:d1:e3:5f:7d:34:4c:00:51:81:90:86:d3:7f:ae:
7b:d8:1a:65:59:2d:7b:e5:47:f7:27:a0:fe:89:9e:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:65:5E:E3:30:67:4E:F1:F4:08:E9:90:85:FF:A6:E3:9A:9F:31
X509v3 Authority Key Identifier:
keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:fd:7f:75:c4:bd:68:64:bd:66:4c:7e:59:67:79:a0:4f:
87:bb:ce:cd:88:c0:e4:8c:8d:e7:e1:9e:e3:58:72:72:85:27:
3c:f5:b1:69:c0:80:ec:8f:85:3a:44:e4:d2:e6:88:63:ec:05:
d9:30:97:fb:01:8b:6e:e1:02:c7:a3:34:17:b1:24:49:61:8b:
62:86:8e:49:dd:b9:55:ea:da:ac:70:5c:5e:53:aa:82:67:c0:
44:0c:22:b4:99:a7:f4:07:dd:bc:0e:da:f9:f9:0f:24:40:18:
64:cf:c4:a7:f0:4b:1f:d5:35:b7:c3:2f:8b:3d:06:60:0a:a4:
9d:ca:89:f9:e1:57:d5:0d:c0:ad:9f:a5:ee:ec:12:3c:2e:85:
8c:15:5d:47:67:10:b0:2d:30:bc:b1:7a:4d:7e:68:e7:8e:3d:
42:7f:64:6d:ac:9e:63:37:b0:39:c3:21:0f:ac:af:ec:45:30:
d1:0e:72:06:89:ac:66:98:08:fe:ef:5f:e1:a1:00:43:04:88:
db:da:bd:74:a6:7e:bd:e8:91:59:b4:c2:0b:f5:20:cb:67:f2:
bd:4c:8a:bf:7b:03:a7:84:03:b9:1d:a7:7b:04:a5:05:93:a4:
e2:91:e2:62:4d:65:97:c1:37:15:14:f6:46:3e:6e:86:8b:e3:
68:2b:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:13 2026 by rpki-client