
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json)
Hash identifier: cSpR/QRDfJgS38iJh9P2Exd50SzZxGNlbcBlpgVnhAM=
Subject key identifier: 91:74:2D:E7:9E:8A:3D:36:58:09:F5:59:10:F3:C3:DE:03:45:CA:BE
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 5915964D962280F34ACEBACDE51198401D4F135E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
Manifest number: 024F
Signing time: Wed 25 Mar 2026 05:32:44 +0000
Manifest this update: Wed 25 Mar 2026 05:27:44 +0000
Manifest next update: Sat 28 Mar 2026 12:33:44 +0000
Files and hashes: 1: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=)
2: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=)
3: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: +OQNvRY2gCAu+HTfJco21gmswUwixJaU8JgGjyZTBmY=)
4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 12:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:15:96:4d:96:22:80:f3:4a:ce:ba:cd:e5:11:98:40:1d:4f:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Mar 25 05:27:44 2026 GMT
Not After : Mar 28 12:33:44 2026 GMT
Subject: CN=91742DE79E8A3D365809F55910F3C3DE0345CABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:a7:f1:55:f6:cf:8b:05:91:d0:0d:e4:df:
c4:7f:34:b1:3b:1d:ca:cf:48:a6:40:db:89:d0:ca:
15:52:29:fb:59:0d:6a:fc:6e:a0:08:ff:c8:a7:ff:
3b:97:cc:4e:63:aa:f2:36:17:2a:a6:a3:23:15:5a:
77:48:e0:61:44:9d:45:6b:65:4b:d6:4b:40:e6:48:
78:d8:fa:e8:23:c4:14:4a:e8:51:28:2b:08:d1:ab:
81:81:1e:a1:69:3e:b1:00:36:bf:03:7a:ec:00:1c:
f1:d8:dc:84:f8:d1:27:a0:8e:89:77:e6:2a:07:90:
f2:37:11:ed:83:df:2c:c3:68:f2:cf:44:a3:a5:03:
14:3b:72:6f:d4:2f:9b:2b:7b:05:9e:c8:00:e8:6d:
1f:1d:4e:06:28:0a:78:c8:35:e7:77:42:b8:80:14:
c2:d7:43:39:15:8b:21:85:64:1a:f0:39:1a:93:7a:
af:00:52:41:96:95:ff:9d:ab:12:aa:56:63:e9:8a:
44:e4:f9:d8:19:83:0b:71:02:f0:58:44:e6:66:f0:
68:01:00:9f:40:38:dc:9d:95:39:ec:ac:29:8d:73:
57:8e:ee:b9:33:04:4c:26:9e:1e:82:f3:89:66:8c:
02:8d:49:37:58:17:02:c4:18:d5:18:81:10:ca:97:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:2D:E7:9E:8A:3D:36:58:09:F5:59:10:F3:C3:DE:03:45:CA:BE
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:e4:53:dd:52:bf:da:4f:d1:89:6c:9d:fc:b2:27:fc:58:
43:9d:0f:9b:34:b5:db:9d:af:27:07:b6:99:b5:28:f2:73:ba:
f5:a4:bd:6f:bd:bc:82:3a:e0:1a:67:9c:7e:c7:a6:6f:c6:1e:
07:fa:68:2a:6f:a9:20:28:09:52:7d:6c:2e:16:91:d1:df:b8:
e2:c5:75:4a:98:e0:0c:8c:6d:b9:23:e2:47:65:12:96:a1:d3:
ff:ca:c4:45:e0:c0:09:9d:90:53:ec:ef:5f:f9:01:0c:49:b4:
15:d5:cc:92:a3:31:b2:10:5a:cd:2c:58:1b:2f:9e:37:75:64:
e1:83:1f:69:72:89:76:07:d8:0f:65:51:35:a2:44:64:5b:c2:
3a:22:25:da:76:0c:6f:ce:c5:85:41:ff:de:00:1f:79:f9:be:
5c:5f:0b:d6:ee:82:fa:57:a7:19:5f:59:ec:37:e2:a7:43:22:
88:b5:58:82:84:01:24:bd:0f:bc:ee:dd:93:25:70:24:3c:ee:
28:5a:e9:93:7f:9a:2a:bb:e3:3a:ad:f0:51:cc:64:a8:62:47:
8d:73:50:ed:ce:82:e6:eb:ac:18:08:60:62:85:75:02:1f:03:
ee:5f:89:90:9b:a3:e5:a6:cb:1a:fd:f1:1a:78:38:dd:ba:da:
78:73:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:26 2026 by rpki-client