
$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json)
Hash identifier: IfL1tuDNyCrGeEklU8+D9C4kmcbIK6Xm/8hEKpBKNnw=
Subject key identifier: ED:13:FC:5E:74:A2:1E:F5:D8:54:3D:F8:36:1C:1F:88:BD:23:B8:4A
Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Certificate serial: 634F28AAE385E59062C5FC848DB8FC992E22FA15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
Manifest number: 0187
Signing time: Tue 24 Mar 2026 09:41:38 +0000
Manifest this update: Tue 24 Mar 2026 09:36:38 +0000
Manifest next update: Fri 27 Mar 2026 17:27:38 +0000
Files and hashes: 1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: a7FDi65MW/9htYRlct0rchGpmP/+oM3LXehE0fK7UI4=)
2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl
rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4f:28:aa:e3:85:e5:90:62:c5:fc:84:8d:b8:fc:99:2e:22:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Validity
Not Before: Mar 24 09:36:38 2026 GMT
Not After : Mar 27 17:27:38 2026 GMT
Subject: CN=ED13FC5E74A21EF5D8543DF8361C1F88BD23B84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:de:d3:0f:26:a6:dc:cd:04:21:61:22:c1:
12:14:2a:8a:8d:f7:a2:c8:32:51:99:06:16:36:6d:
f7:54:bf:2f:16:48:66:30:fe:63:9a:3b:7b:96:56:
15:da:94:0f:83:4b:6c:3d:e7:9b:03:ae:36:79:0d:
ce:3c:03:ac:cf:5c:d9:0e:ee:bf:a7:93:b0:fa:f2:
c5:d6:90:61:d7:65:4d:dc:8b:e4:e9:d4:85:1c:41:
98:68:30:b0:58:3c:86:b8:8f:9c:55:b2:a9:c3:1f:
78:20:72:cb:d8:70:17:d1:05:67:7b:fb:77:9a:1c:
db:43:58:4d:ae:bd:47:61:5c:23:4c:9d:32:c9:74:
3b:3b:05:44:47:d3:88:42:e1:49:66:b3:90:03:59:
08:ce:69:f3:9e:bd:63:67:86:d3:4d:ab:c4:15:45:
67:b9:01:d2:54:38:aa:db:e5:2f:0f:e9:2a:b8:6d:
0b:ee:31:c9:12:ac:ae:da:6e:e3:e6:b0:65:71:a0:
3c:5c:51:01:17:21:ea:b1:3d:46:df:39:79:e0:2a:
a1:c5:3a:87:cf:2a:15:96:d3:03:61:f2:0d:c9:b6:
a3:35:82:99:c3:1a:02:a0:24:6e:9d:ca:59:f9:8a:
a3:99:84:22:13:9f:60:26:b6:6a:a2:18:12:ab:f2:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:FC:5E:74:A2:1E:F5:D8:54:3D:F8:36:1C:1F:88:BD:23:B8:4A
X509v3 Authority Key Identifier:
keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:cf:2a:52:39:4a:23:5e:3b:9e:07:b4:70:06:bd:5d:38:
23:d8:55:c8:0d:63:88:b6:26:96:2b:99:fd:0d:c8:fc:16:80:
0d:20:84:a7:bf:2a:32:e3:f8:07:98:25:ce:b9:c6:4b:88:26:
5b:7a:26:0c:2c:2d:ad:61:d9:6e:55:6c:57:fb:31:41:96:53:
1a:a5:8a:ba:a3:68:8d:e6:af:cd:11:14:00:67:67:f7:f5:06:
78:20:90:3c:42:56:38:14:b6:80:0d:40:62:e5:a2:bd:68:76:
15:a6:27:d5:fe:04:a5:6d:91:27:1e:91:e6:89:bf:8b:51:19:
f5:55:d7:f9:2b:24:9c:09:1f:0b:3b:5d:8f:f9:ec:de:95:a4:
5e:fd:a9:12:23:9d:94:87:96:1f:06:78:0e:b3:f8:96:f0:d0:
a0:0e:c8:90:87:97:ea:1c:f2:27:fb:c3:3a:86:bc:42:ee:7b:
42:8c:d3:b1:85:9e:a9:79:22:8b:bb:7b:b9:8c:78:5f:3d:2a:
52:1d:ac:42:5f:b0:d1:59:b2:21:d8:3b:c4:ad:66:8f:fd:4d:
0f:54:72:27:91:9e:15:4f:a7:19:f7:16:18:f2:bf:65:8b:5a:
7c:d5:5a:20:58:70:06:c5:cb:05:fa:a5:4c:47:07:d0:21:79:
0d:c8:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:04 2026 by rpki-client