
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json)
Hash identifier: cYt69/FYaHzRZDpI3iPZV1+MNNkJpPKSHAvIN7+KHLo=
Subject key identifier: 1D:3E:D2:9A:12:89:BA:57:5F:59:F0:F2:DD:B3:B7:54:9C:C0:84:36
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial: 09F19473A6A4A3B72716D3C16547AD2CD73A7861
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
Manifest number: 0200
Signing time: Thu 26 Mar 2026 03:10:46 +0000
Manifest this update: Thu 26 Mar 2026 03:05:46 +0000
Manifest next update: Sun 29 Mar 2026 13:45:46 +0000
Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: 0IkBKyvRORPa37bcioZmy1lPfTK8uCLZXlIS5Un/uKM=)
2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 13:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f1:94:73:a6:a4:a3:b7:27:16:d3:c1:65:47:ad:2c:d7:3a:78:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Validity
Not Before: Mar 26 03:05:46 2026 GMT
Not After : Mar 29 13:45:46 2026 GMT
Subject: CN=1D3ED29A1289BA575F59F0F2DDB3B7549CC08436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:33:72:4b:0e:5b:30:09:19:c7:a5:f0:5a:
7a:05:3a:b5:c1:91:d6:9a:aa:ea:90:21:0c:61:db:
e8:e4:10:4a:05:dc:ac:07:68:54:80:1f:f6:92:a1:
68:51:80:1c:1d:f6:77:81:22:71:95:b7:ab:8a:f1:
71:5a:8e:33:60:fe:52:18:5b:53:ee:25:d8:f2:26:
2d:a8:c5:e9:1d:30:fe:79:fa:f7:c9:7b:4d:8f:01:
41:3c:d9:3b:ff:c6:e0:43:a2:9b:a9:4e:6c:ec:d3:
fe:fa:7f:b4:b8:01:0e:46:56:61:0f:7d:35:06:7c:
fb:e5:9c:32:8c:ac:c8:48:c2:22:6d:b5:e9:f0:2f:
93:f9:7a:b0:39:1e:bb:e3:e4:9f:49:d1:d0:31:04:
35:24:b6:24:9e:61:bb:a7:c9:d3:a2:fb:d8:ca:cd:
ef:97:21:5e:4f:2d:76:94:58:49:f7:89:7b:24:26:
38:56:f9:53:09:58:3d:ef:c5:e2:87:ae:cf:14:01:
72:af:88:51:cd:14:8a:48:d8:15:12:94:b1:b1:9c:
47:76:32:2e:46:81:ee:c8:2c:f4:00:65:42:2b:fb:
35:45:80:f0:09:e4:ca:38:e6:2d:de:ca:8a:62:2e:
2a:71:d5:4c:3f:99:73:13:c9:58:a9:13:54:ba:bb:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:D2:9A:12:89:BA:57:5F:59:F0:F2:DD:B3:B7:54:9C:C0:84:36
X509v3 Authority Key Identifier:
keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:22:d6:7b:44:d5:23:57:d2:4c:32:7b:03:42:97:36:ae:
59:8c:36:5e:b7:a7:a9:88:c8:12:d9:50:ad:2c:75:f6:3f:8a:
c6:25:ea:0e:52:1a:06:e0:64:ea:cb:f7:db:ea:b5:da:d4:49:
9b:ac:c3:68:b4:0a:94:d9:2e:85:23:b3:52:97:d9:4c:16:6d:
89:3a:b3:93:ae:58:72:ff:e5:79:04:b3:c5:c0:43:74:a5:3c:
9b:ca:ce:f9:07:18:eb:a3:2f:e0:d6:3a:08:39:30:b6:c7:b2:
6c:d8:34:93:e5:e1:9a:e7:84:1e:3b:a9:27:dd:bd:93:ab:44:
f2:ca:2c:6b:47:68:19:43:bd:9f:78:ed:2f:86:ef:b2:9a:ad:
9a:e9:96:54:e9:56:f8:ab:38:01:7b:a3:9c:ab:a1:16:de:d1:
7e:d1:74:a8:82:74:1b:57:3e:e7:f3:0b:d8:a6:2f:dd:46:13:
fb:92:58:42:18:54:b3:e1:52:cd:4a:f0:fb:b6:97:88:b1:41:
87:ab:38:17:40:5a:6f:f6:94:8a:14:01:3e:2e:9c:00:5a:08:
c9:e5:fa:1b:7c:7d:83:10:84:f8:c7:7a:03:c6:07:2c:a1:d1:
0b:e8:db:68:67:f1:a8:12:b2:15:97:40:4e:25:ae:88:6f:bb:
01:e2:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:14 2026 by rpki-client