
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json)
Hash identifier: Oyns6eY8eaHvjOHwha4TQ1LDrWunraIqb+UWsZ4IQlM=
Subject key identifier: 61:DA:CF:4E:F3:E7:0F:72:FF:34:06:A9:7C:92:52:82:78:E2:F0:AC
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 09D50B89E3F8845AB8BD17D55CDD4A040815AD18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
Manifest number: 0274
Signing time: Wed 25 Mar 2026 10:40:02 +0000
Manifest this update: Wed 25 Mar 2026 10:35:02 +0000
Manifest next update: Sat 28 Mar 2026 13:36:02 +0000
Files and hashes: 1: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: Irsu32jDZm299z5h+3CIdjXUmfbtNzSk9PZa4IdiAoM=)
2: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: 4nWo7gzjpp7jklSMLIixLr1TaB1y584nrDoRVx33zEk=)
3: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: IKAfsw1j387Yb0drrGpyPybMoQr76zYYKlaLJwJ/nPo=)
4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: oYSrvBY6t5O7aLmZMgG93NzR9Kg2HGBDTBbJyH9LHhc=)
5: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: b6oWETPAdWSTs2U94m5Fni4xEj1CKc77e+9vDwX4m1k=)
6: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: P7Q50rkVGT+AyU73qRq9OrZJXv3luvKw8IaqC6IlSn8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:0b:89:e3:f8:84:5a:b8:bd:17:d5:5c:dd:4a:04:08:15:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Mar 25 10:35:02 2026 GMT
Not After : Mar 28 13:36:02 2026 GMT
Subject: CN=61DACF4EF3E70F72FF3406A97C92528278E2F0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:d3:14:4a:a9:d2:50:f1:3a:09:8d:e5:f1:
f7:67:34:17:25:e5:af:cf:4a:b3:15:04:5a:af:59:
6e:42:48:5e:9d:ac:f0:10:0b:be:d1:89:d9:3c:65:
93:ad:f9:60:48:fe:f1:0b:a1:87:c8:ee:36:9a:c9:
6a:00:a7:df:9f:55:7d:0a:d3:3c:55:8a:97:ba:e8:
f1:d6:7a:16:c5:90:f2:55:9e:72:b8:6b:9d:b4:bf:
ba:f5:56:3f:2d:0c:a0:0a:de:b4:bf:fe:5b:bc:72:
74:06:4c:55:56:ed:8a:a2:20:95:c9:2e:91:af:da:
c9:72:b4:2c:ae:52:89:27:30:56:45:6d:3c:bd:cc:
ac:cc:96:22:91:22:10:80:35:41:6a:dd:27:02:d8:
e1:aa:c1:3d:f2:47:fd:da:3f:84:3c:17:fd:ef:6c:
2b:57:62:ac:7e:cc:c9:b5:6b:67:01:81:6b:36:fb:
d6:95:14:d7:4d:d0:e0:16:2b:8f:32:ed:73:46:97:
d1:72:62:11:b8:e0:5f:d4:66:06:64:7b:2a:59:51:
07:9c:42:51:fe:ca:af:99:35:d2:15:b4:b7:95:2b:
32:4c:c0:85:e9:eb:d1:fb:f1:7a:4c:8e:85:0e:c2:
e1:e8:64:38:86:fb:f8:04:b2:61:95:76:d9:65:b2:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:CF:4E:F3:E7:0F:72:FF:34:06:A9:7C:92:52:82:78:E2:F0:AC
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:95:a7:70:23:8c:fc:87:b9:3d:7b:fb:da:37:a1:1c:46:
2c:0d:dd:b4:58:73:62:87:0d:1c:a2:4e:e6:de:54:4c:e1:be:
72:58:2d:df:91:39:16:02:0b:e0:25:59:9e:c0:e5:1a:04:8b:
65:23:17:2b:36:40:ca:29:e9:52:53:32:cb:37:2d:e8:1a:38:
08:6b:22:8d:3b:68:cb:0d:99:0d:84:cf:df:18:b4:1a:df:3d:
42:5c:70:18:e8:8d:1d:f1:2b:7a:2e:41:38:05:ec:42:1b:de:
60:95:e2:57:0d:69:f4:21:df:2b:99:23:0c:68:2d:dc:b0:cd:
1c:a9:9f:c2:2d:a2:a3:0e:a5:c3:06:5c:16:f0:00:14:d8:17:
29:2c:96:f3:56:a0:80:c1:d3:22:eb:21:45:7e:db:95:d1:f7:
e9:f3:b7:2a:d8:97:95:27:25:18:c1:3b:15:c5:c5:ac:e3:a1:
ad:19:9e:98:1f:b8:35:31:7a:4e:76:9b:e6:f5:7f:d7:7f:05:
67:77:2b:82:be:b6:8e:91:a5:57:2e:6a:24:84:c4:1e:ff:7f:
a1:26:4f:cd:e6:60:86:01:92:4f:f7:12:0c:b9:3d:f9:da:3e:
b0:82:8c:62:c2:ff:32:b5:bc:70:c7:54:8d:95:00:5b:35:09:
98:5e:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:57 2026 by rpki-client