
$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json)
Hash identifier: I3d76i5jEtqJqCIJXnoY2kBArdqO+KZhuTz8OhwskLA=
Subject key identifier: 7F:58:18:81:D9:22:D1:6A:02:BF:1C:F9:EA:3B:5A:0F:B9:54:BB:7A
Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Certificate serial: 18D3233F34A5124098C49AE0C2FA958764F283EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
Manifest number: 011B
Signing time: Tue 24 Mar 2026 08:31:53 +0000
Manifest this update: Tue 24 Mar 2026 08:26:53 +0000
Manifest next update: Fri 27 Mar 2026 18:00:53 +0000
Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=)
2: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: uLojztKZgfbt4AA6TGO3pp71Cw8+wVePXLx9xs9sex0=)
3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d3:23:3f:34:a5:12:40:98:c4:9a:e0:c2:fa:95:87:64:f2:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Validity
Not Before: Mar 24 08:26:53 2026 GMT
Not After : Mar 27 18:00:53 2026 GMT
Subject: CN=7F581881D922D16A02BF1CF9EA3B5A0FB954BB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:ef:c8:82:6c:83:a3:3a:11:19:dd:22:5c:
fc:7b:6d:fc:3c:4e:a8:9b:3c:00:ec:dc:48:48:a8:
70:93:f0:96:34:fe:a8:61:47:b9:d0:0c:5a:64:81:
cd:8f:3f:de:a4:62:27:32:1f:35:88:b3:1e:b2:b7:
91:69:df:94:92:d0:c9:d1:a2:9f:c8:b2:7f:36:b7:
7d:99:e8:dd:13:5e:cf:ab:96:b6:42:f7:30:ca:5a:
5c:4b:c1:8e:71:63:56:a1:21:74:ed:6f:0d:c7:56:
a7:f1:8b:bc:40:89:ac:e5:db:f9:8b:f8:45:99:9e:
55:e5:5b:1d:d3:e4:e5:ee:6b:b3:b9:4b:d1:66:8a:
35:4f:62:01:f7:ed:ee:76:2e:f1:ad:de:b4:a2:a3:
21:41:33:ab:03:8d:54:f1:08:26:39:cb:af:80:c7:
9a:d4:3f:00:f8:fb:2c:dc:b1:81:da:cb:46:57:01:
23:77:1c:5a:b6:28:fc:bc:03:af:2e:16:3c:dd:81:
06:df:33:23:32:3e:e2:93:8a:c5:f7:b5:92:62:1b:
87:e1:ed:a7:c7:3b:45:10:3a:a7:0d:aa:41:12:14:
09:7d:2e:d3:94:2d:e1:6c:6d:31:40:c6:c2:13:e9:
70:9d:8d:3a:42:44:96:87:51:79:b4:41:59:42:91:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:18:81:D9:22:D1:6A:02:BF:1C:F9:EA:3B:5A:0F:B9:54:BB:7A
X509v3 Authority Key Identifier:
keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:74:f9:ce:7a:37:05:42:d2:0f:c8:af:ef:8b:46:d9:64:
c4:31:19:42:9a:9c:94:8b:78:fb:47:d1:13:ec:53:af:ad:74:
7a:47:b6:cc:07:b6:85:d1:b8:68:76:94:43:14:3b:90:13:6f:
5c:37:41:44:d5:c4:ba:06:8f:4d:e8:5c:b2:4f:77:6d:d5:1c:
77:96:96:fd:0a:4a:20:18:1b:12:90:78:48:65:48:71:83:ce:
c1:df:75:53:17:9d:8a:8c:e8:e3:93:cb:94:66:65:db:8c:76:
00:4f:9c:ed:df:88:80:2c:75:e7:ec:cd:54:7a:5c:f5:85:29:
35:08:2a:c5:ad:02:11:cb:ca:a7:17:bf:98:89:3a:2d:b6:2b:
0b:dd:96:9e:66:e6:7b:fd:31:17:7c:82:f7:b9:57:7d:30:02:
d1:ce:b7:97:58:34:32:f2:d6:6d:98:51:22:a4:0e:bd:92:52:
e0:a5:22:74:9e:d5:8b:94:ed:94:b6:52:d2:3c:c9:87:3f:d0:
89:de:43:e4:df:b1:3d:c8:54:ff:60:52:ca:86:88:62:a9:f5:
99:e1:e8:1c:9d:03:74:6c:cb:49:e1:3d:e3:29:15:89:a6:b6:
db:06:3a:5b:a2:83:e5:12:45:e4:dc:0b:ec:49:ba:e1:77:aa:
4e:63:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:33 2026 by rpki-client