
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json)
Hash identifier: F4AQp+O3iWZ3a6uctlGiXQavVLvGwJ1TfK08ezZgETo=
Subject key identifier: 57:A8:E1:2C:57:8B:21:CD:62:F4:27:A3:A5:22:09:17:E7:27:9B:E0
Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C
Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C
Certificate serial: 1D2B4E938C8D2BDA9576C3F6DC1FC7E1E1E6BC31
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
Manifest number: 055F
Signing time: Thu 26 Mar 2026 14:32:22 +0000
Manifest this update: Thu 26 Mar 2026 14:27:22 +0000
Manifest next update: Sun 29 Mar 2026 16:24:22 +0000
Files and hashes: 1: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: C/Dq7sLE2BV/Hl+gaPtnGkQLcUQbQSLinu4uhgrRbnI=)
2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: Wy1p+wFvKd0UV6WEx9T22l9SfAuvHRIy4T5+zN8yMc4=)
3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl
rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 16:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2b:4e:93:8c:8d:2b:da:95:76:c3:f6:dc:1f:c7:e1:e1:e6:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C
Validity
Not Before: Mar 26 14:27:22 2026 GMT
Not After : Mar 29 16:24:22 2026 GMT
Subject: CN=57A8E12C578B21CD62F427A3A5220917E7279BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:84:4e:2e:ba:81:75:22:4a:cd:96:d3:b4:
70:99:6e:4f:74:e6:9a:42:d6:9d:32:17:a7:61:0e:
df:ef:86:bd:7b:b4:df:4f:7e:47:f5:ce:a3:6e:7a:
60:a6:9b:4a:28:15:a1:fc:36:29:3f:24:98:83:57:
d8:91:d0:b0:55:b1:10:db:87:fb:ba:92:aa:65:8b:
51:fa:cb:52:44:3d:d4:f3:32:4c:d0:b2:25:28:88:
e0:e1:1d:de:1e:d3:4a:10:65:d0:33:07:3d:16:c4:
ac:8f:b0:a2:8f:ac:47:d9:14:57:67:e0:53:9e:b8:
2d:0f:26:f8:73:c8:e0:3c:21:ff:b5:38:ec:58:a9:
96:8b:5a:b4:19:31:aa:24:90:dd:21:a7:b3:69:29:
dc:a5:0d:f4:cc:ff:d0:a9:82:fe:57:cb:02:06:b3:
f9:18:ac:74:ac:90:f1:46:e7:a2:b9:0c:fb:4b:db:
3a:84:51:29:d6:03:db:4a:e1:9f:84:05:dd:b9:37:
f6:3a:3e:3d:0e:da:29:01:0e:7b:1e:bc:71:54:8e:
93:e1:20:6d:79:68:fe:31:01:95:89:f1:0a:f3:cd:
53:c4:f5:9e:b0:96:2a:09:8f:7f:1c:a3:80:f5:cd:
20:d6:3f:1b:a8:a6:f2:2d:f7:ea:4a:a2:bb:19:ea:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:E1:2C:57:8B:21:CD:62:F4:27:A3:A5:22:09:17:E7:27:9B:E0
X509v3 Authority Key Identifier:
keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:2c:71:a7:ca:6f:f5:e2:46:38:10:83:46:b9:24:92:51:
2b:5e:56:41:19:d6:27:c4:da:eb:a4:08:40:00:85:54:a3:91:
3d:e3:2a:fd:2e:84:b5:86:6b:1f:59:72:60:73:fd:2b:43:93:
21:f2:4d:51:50:10:82:73:b0:5c:21:12:95:88:e8:63:b7:df:
19:ef:05:17:c3:33:6c:a5:4f:92:1c:51:ea:44:b6:b4:2a:0e:
53:2f:e4:15:7a:57:df:61:cc:64:33:55:7e:c8:03:f8:4a:b3:
06:c3:cb:db:d0:1e:ad:0f:53:3c:dc:87:a4:08:b0:bc:7a:8e:
45:b2:55:0f:15:4b:e9:35:19:01:2b:79:29:31:8e:3c:5b:fa:
60:79:cf:35:8a:d2:55:9a:21:27:35:a1:37:22:20:e0:79:6a:
b4:70:f8:00:d9:89:ed:ab:a6:6c:52:e4:6e:6f:00:db:59:6f:
49:c1:72:a5:8c:38:7f:fd:60:ae:19:76:51:ff:a8:1f:20:fb:
29:5b:ef:41:f8:ca:b7:1e:fc:28:e0:3a:aa:75:03:37:97:85:
cf:da:a1:5f:55:ee:d7:c2:fe:42:21:64:5f:e0:4c:79:ee:af:
25:4e:c4:c3:16:7a:a0:0d:f9:14:e5:2f:53:6c:2a:95:b8:87:
96:68:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:32 2026 by rpki-client