
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File: 9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier: Bo2oqEcbMqyzcNxOB9wvUWZPJk8rba65puisNFiTwcU=
Subject key identifier: 88:37:90:D3:DC:ED:52:D5:3F:51:76:A8:B0:22:55:3D:12:8D:BF:5A
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial: 64D1DA0CE538319D3EBB9ABF4F047817789A3C6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number: 0561
Signing time: Tue 24 Mar 2026 18:02:32 +0000
Manifest this update: Tue 24 Mar 2026 17:57:32 +0000
Manifest next update: Sat 28 Mar 2026 03:58:32 +0000
Files and hashes: 1: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
2: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
3: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: mMGZsm6q2Cz9y5dWG/zQD6+ULZz3IpMnOmvYJyKBkxU=)
4: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
5: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
6: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
7: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
8: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=)
9: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
10: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
11: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
12: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
13: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
14: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: S9ld3t2nMO5gpPBlylQnwkFYC3ZAayOlyxw/5OCGVoE=)
15: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
16: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d1:da:0c:e5:38:31:9d:3e:bb:9a:bf:4f:04:78:17:78:9a:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Validity
Not Before: Mar 24 17:57:32 2026 GMT
Not After : Mar 28 03:58:32 2026 GMT
Subject: CN=883790D3DCED52D53F5176A8B022553D128DBF5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:14:59:11:71:e4:ac:39:40:9a:d7:0f:64:
d5:c4:b8:58:84:30:92:8a:69:90:37:a5:d3:a3:72:
28:91:41:ed:a4:d5:07:f5:49:e5:61:2b:bc:80:3e:
bc:c6:0e:85:ce:d5:aa:70:2d:db:71:09:99:75:19:
82:f1:95:1f:d1:af:ed:d4:45:1e:53:bf:5c:22:2b:
00:0b:62:5e:85:cb:60:16:2d:4b:cf:5b:67:b5:cd:
5b:12:f2:4b:6f:c0:02:37:9e:cb:4c:23:ff:e0:9a:
95:47:d9:76:bd:d1:c0:4c:2c:14:e7:c6:a1:79:c2:
b5:33:47:22:ad:dc:e5:b8:bd:cc:5b:3e:a3:34:7e:
87:a9:c0:70:5a:7c:44:a5:82:0f:9a:01:84:89:ec:
2a:8b:8d:34:a9:aa:6e:28:84:e6:c6:5e:29:1e:4f:
ee:7b:ad:fe:51:3d:01:d1:74:1a:51:27:6b:27:17:
5d:a0:30:11:aa:ff:09:88:e1:b9:aa:21:d8:44:b1:
01:30:9d:43:d7:04:b9:f1:d3:91:6a:05:35:e6:55:
b8:84:67:9a:37:90:13:94:11:6d:94:64:81:de:05:
63:bf:0d:88:d1:a9:df:83:9b:c3:60:f5:dd:3d:32:
1c:ac:8d:39:a6:af:3e:70:a1:a5:30:1a:46:67:82:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:90:D3:DC:ED:52:D5:3F:51:76:A8:B0:22:55:3D:12:8D:BF:5A
X509v3 Authority Key Identifier:
keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7b:fc:dd:8d:8f:e1:76:bc:dc:a4:2b:09:96:83:83:53:84:
9c:58:71:87:3f:93:61:3f:fc:c5:01:29:5e:80:ae:ea:96:30:
93:7d:1a:02:cd:06:d3:03:d9:44:5a:d1:a3:18:70:34:ec:64:
3b:9d:3c:b0:f3:d4:d7:3b:f1:5b:5e:34:8b:3a:1a:71:1a:6b:
d4:22:98:5c:b0:3f:60:1f:fc:be:03:1d:4e:c1:67:3a:88:08:
89:b6:c0:04:9e:b6:ea:f1:68:d2:4c:58:0f:7a:37:63:cf:55:
ad:5b:c8:61:c0:25:ab:12:94:61:ba:8a:10:ef:89:d9:b5:25:
f1:7a:4c:64:b9:18:4f:fc:50:d5:da:fc:ac:ad:6c:25:8f:70:
c3:cf:9e:b1:e3:b4:12:90:c8:e7:a2:a5:cd:93:7f:42:01:9b:
5a:a2:fe:81:d9:13:11:f1:59:78:1a:58:31:34:6e:44:b1:04:
d0:4e:ad:95:0f:c6:bc:ea:06:01:3b:dd:80:99:17:a7:1a:60:
12:30:5b:cc:3d:4b:53:87:24:27:20:94:55:7e:5b:ae:08:cc:
0a:70:ce:9d:1e:ee:5b:dd:4b:f2:e7:c2:3c:c9:b4:c3:03:70:
59:37:9f:9f:db:46:72:db:d5:af:3f:de:a1:04:0e:00:94:62:
82:9c:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:01 2026 by rpki-client