
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File: 667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier: X5Dz2JPwVQG80GOCKpV/u2N9QEnO341UB5Zj7jc9Xwk=
Subject key identifier: 9F:CD:6D:01:77:29:4F:15:C6:48:16:CB:FC:1C:12:0D:5C:83:E9:AE
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 38E99753ACE893106E0AF26E2AC0775C33B88334
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number: 0309
Signing time: Wed 25 Mar 2026 10:41:34 +0000
Manifest this update: Wed 25 Mar 2026 10:36:34 +0000
Manifest next update: Sat 28 Mar 2026 21:09:34 +0000
Files and hashes: 1: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
2: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
3: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
4: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
5: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
6: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
7: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
8: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
9: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
10: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
11: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: jfNLz5I1NUzzC8VAcr7mVFNnI5O6YRB0qQpgkh83ElM=)
12: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 21:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e9:97:53:ac:e8:93:10:6e:0a:f2:6e:2a:c0:77:5c:33:b8:83:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Mar 25 10:36:34 2026 GMT
Not After : Mar 28 21:09:34 2026 GMT
Subject: CN=9FCD6D0177294F15C64816CBFC1C120D5C83E9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:57:7f:ec:46:cf:d0:03:1e:62:5e:34:ed:
a3:d2:2b:11:40:88:53:99:fd:9f:f9:61:bc:1a:1e:
3e:5f:f0:48:b6:db:22:7a:7f:72:98:c5:c9:80:55:
39:29:2c:69:2c:ba:52:b7:ff:52:9b:df:3d:3f:97:
c9:a1:37:9d:9c:3b:d5:42:58:32:9b:73:b5:2e:85:
a2:ab:c3:26:c1:77:80:72:2a:56:31:8c:a2:95:77:
bf:09:0b:41:b2:f2:5e:fb:99:cf:9d:c8:e6:b1:9e:
c8:c1:da:51:27:f6:45:09:53:f7:00:d4:6c:d0:98:
50:31:b3:7e:35:44:97:fb:62:1d:6a:9a:54:91:84:
08:43:79:76:94:f3:05:22:44:8f:69:b2:f1:87:a0:
e7:7a:d1:91:78:8e:1b:98:00:51:53:2a:59:76:98:
0a:05:e2:70:4e:c6:09:4e:6a:1e:88:0a:36:4e:95:
38:16:58:6a:c2:73:5d:2e:a8:19:37:d6:cb:91:7b:
76:d6:1b:10:8b:9f:3f:f7:57:05:be:29:28:39:f1:
db:23:6d:03:f6:ae:56:00:7d:5d:cf:e1:bc:dc:80:
91:eb:91:a5:4e:92:ca:59:f8:b7:4a:09:58:fc:2a:
ec:84:a0:8c:ce:52:c1:a7:ea:58:53:6d:8e:ec:58:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:6D:01:77:29:4F:15:C6:48:16:CB:FC:1C:12:0D:5C:83:E9:AE
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:7c:8f:52:99:29:cc:dc:b6:e2:02:15:3d:ae:bb:c5:d4:
46:94:84:f0:59:36:48:a5:94:f5:a5:3f:1b:4b:8b:79:ab:43:
39:de:fb:0c:f2:5e:35:ca:30:ff:71:d9:1f:62:fb:88:eb:3f:
cd:34:2e:4f:9f:4d:4d:65:13:18:9e:93:69:47:30:24:61:1a:
53:dc:b4:55:3f:06:63:22:8c:12:40:0b:df:93:05:0d:69:c2:
f1:52:8a:a8:45:53:ba:87:0a:0a:ce:64:20:5f:0b:6e:fa:1c:
4f:c7:f8:80:ff:3a:4a:8b:a6:4d:bc:c2:e4:1b:98:40:fa:97:
fb:16:60:5b:c7:a7:92:4c:b4:92:0b:cf:4c:01:45:ab:df:46:
d8:ae:55:de:12:63:62:88:11:69:9c:bd:b4:c4:f9:5e:60:ce:
47:74:71:5a:7c:02:70:e1:14:39:33:03:e0:73:16:e4:e6:e0:
a0:89:29:76:3a:2e:f3:9f:b6:13:53:a8:bd:ed:1f:86:04:ca:
d3:f9:5d:d1:33:49:ca:d8:30:a8:37:f4:4e:b8:da:64:bc:b8:
7c:1e:6c:ed:ad:3b:cb:06:05:25:73:3c:4e:fd:77:3e:36:36:
38:9d:1a:c4:24:fb:9a:04:b5:d8:c5:71:bc:43:ef:6a:0f:84:
28:0b:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:04:54 2026 by rpki-client