
$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json)
Hash identifier: 5AvwCLxOyv3KvBA+3x69mnNNF/NJnbNBtQhhxuaZc3w=
Subject key identifier: 50:08:D5:B2:37:FA:00:C9:63:01:52:B0:EA:DC:C2:7B:BA:98:78:EE
Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769
Certificate serial: 5EE8BD44E9EDF523F54DF57BF3D0DEF89B9193B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
Manifest number: 010B
Signing time: Wed 25 Mar 2026 23:21:33 +0000
Manifest this update: Wed 25 Mar 2026 23:16:33 +0000
Manifest next update: Sun 29 Mar 2026 05:01:33 +0000
Files and hashes: 1: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: oXGgH/Mf0k71u6Mi10+J6UOXGZAKhGUw/UEXEupiLwo=)
2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: zK90jmviS5skAn/jDcVMI3Aok7WFlX9b62aRW8Ax9FY=)
3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e8:bd:44:e9:ed:f5:23:f5:4d:f5:7b:f3:d0:de:f8:9b:91:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769
Validity
Not Before: Mar 25 23:16:33 2026 GMT
Not After : Mar 29 05:01:33 2026 GMT
Subject: CN=5008D5B237FA00C9630152B0EADCC27BBA9878EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:38:dc:c1:e1:1d:bc:97:3d:4c:ba:b0:9a:
9f:01:bf:f6:19:0e:b6:6e:e1:da:15:61:2a:2a:04:
e7:fa:f2:11:51:d8:de:82:e1:61:9b:32:88:5b:0f:
0e:64:21:38:03:a3:28:29:33:0c:fe:3a:78:39:43:
3f:c0:5f:09:49:d9:1f:93:0a:30:37:a9:da:17:00:
fe:54:34:88:91:42:0b:e6:6e:03:ee:ab:57:50:89:
b6:f5:43:6a:f6:68:68:3a:10:ef:eb:9c:bf:e1:4a:
5d:49:23:fb:38:13:db:f7:d0:63:c3:b9:a8:75:71:
a5:23:17:0e:14:77:fa:c3:64:6a:49:44:5a:d8:64:
3f:d4:5a:af:81:2f:74:f5:72:1a:f1:cd:24:d2:3b:
06:7a:19:36:7d:0d:ba:36:a6:60:01:2d:e2:53:17:
5c:8b:fa:ec:fe:0b:c4:cf:aa:0e:ad:1c:e5:d3:85:
cb:02:fc:a6:d8:ab:f8:04:5a:89:a0:fa:70:7d:55:
7d:ac:ee:a1:9b:66:fa:f0:f2:b2:5d:14:a3:b3:3b:
c4:27:32:63:8c:dc:70:aa:4b:f7:83:de:04:bd:e0:
3a:0e:6e:7b:71:b5:95:95:5e:a5:4e:54:ab:6c:9a:
58:9b:55:19:f2:85:bc:17:ab:36:43:95:1f:ca:be:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:D5:B2:37:FA:00:C9:63:01:52:B0:EA:DC:C2:7B:BA:98:78:EE
X509v3 Authority Key Identifier:
keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b0:31:9b:c7:6c:f5:ea:fe:87:9d:a5:fd:f3:c8:42:39:46:
14:95:ae:7d:e4:5c:50:a2:5e:3a:a2:14:e0:37:58:22:91:8f:
78:a1:38:45:96:c8:bc:08:2d:e6:f8:76:dc:b7:a8:76:a9:3b:
f3:f1:45:08:de:ae:19:ce:e2:30:ee:89:e3:48:e1:c9:bf:6b:
b9:93:c2:ec:a2:27:ca:1e:da:4a:9d:15:b6:bd:83:0f:53:42:
e8:75:3c:7f:91:8f:40:aa:db:ff:d6:1f:bb:75:5b:48:e2:3c:
19:0e:19:00:a2:a6:5d:3b:c1:af:31:46:de:63:c4:5b:b9:12:
40:67:e8:e6:92:c2:7b:84:d8:16:e2:a3:df:13:75:ac:10:9c:
72:87:b2:9f:b8:8b:12:1f:cf:ec:ad:37:27:cf:b8:1b:fa:9e:
26:e8:55:d6:13:d5:10:51:a3:41:3e:68:08:a6:c7:49:ed:79:
0f:18:ae:96:a7:44:8f:c6:2d:65:da:ee:ab:31:e5:d4:9a:ab:
ac:6d:a2:a8:66:3c:f5:be:b1:2d:6b:b1:64:0f:25:9e:c7:97:
ef:e2:6e:d7:16:56:6f:c8:38:53:9e:53:9f:e9:dd:91:0b:fb:
e8:3f:a9:cc:67:c7:02:7a:71:95:5f:5a:93:86:51:a2:d7:c2:
99:68:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:53 2026 by rpki-client