
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
File: F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json)
Hash identifier: XZUceEpNyI/CAoo9LsrMsKBLqzrhjDmX0Nc+cDcrrzg=
Subject key identifier: EA:69:55:DC:9D:89:14:B0:85:6F:2D:02:77:EA:3D:AD:8E:E1:A9:AD
Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF
Certificate issuer: /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
Certificate serial: 4A5A2E2A34E5823D66D9C5B718E3AFCD71F630A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
Manifest number: 0114
Signing time: Wed 25 Mar 2026 23:52:39 +0000
Manifest this update: Wed 25 Mar 2026 23:47:39 +0000
Manifest next update: Sun 29 Mar 2026 02:58:39 +0000
Files and hashes: 1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: hlyiikH5O1DWiU34vbldUGdGVElbXxf1jo+0fEH/kJs=)
2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl
rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5a:2e:2a:34:e5:82:3d:66:d9:c5:b7:18:e3:af:cd:71:f6:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
Validity
Not Before: Mar 25 23:47:39 2026 GMT
Not After : Mar 29 02:58:39 2026 GMT
Subject: CN=EA6955DC9D8914B0856F2D0277EA3DAD8EE1A9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:e6:5a:ca:e2:f7:ca:8e:7f:31:4a:3c:a2:
c5:4f:4a:4e:6f:fa:e7:56:50:17:8d:5e:5e:66:82:
66:ba:b4:df:bb:5d:60:88:6d:bf:21:55:4c:a5:f1:
d9:91:36:40:45:cc:eb:63:ac:b9:69:33:dd:45:bc:
ab:a0:d5:71:37:73:c1:76:76:bb:7b:b6:27:08:57:
6e:b9:c3:9d:89:26:77:ba:7d:a0:83:b3:30:2f:e1:
65:de:e1:10:d6:cc:f2:d2:f4:1e:6f:29:3a:04:86:
3a:fc:34:0b:32:a4:d3:7b:57:30:84:9d:7c:b8:c5:
0d:18:35:ce:a3:0b:56:68:3b:c4:8c:bb:37:45:18:
ae:63:97:bb:f9:37:2b:7f:e2:25:f6:37:9e:9d:ce:
bf:fb:15:a3:06:5a:e4:82:ec:36:ae:54:99:4b:03:
3e:0a:72:af:bd:a2:a4:c9:78:90:5e:f1:ef:c3:77:
f4:7e:f2:f6:1f:9b:b7:bc:4d:7c:01:f9:45:05:c7:
4e:b6:3c:bc:88:92:85:ab:d1:d8:4c:8c:0e:96:92:
3c:88:fa:2d:ad:d1:15:23:4b:5a:30:8d:dd:68:4d:
c7:2d:cf:b2:23:b6:11:01:b0:b8:63:2f:f1:5f:61:
9c:a8:d0:ca:fe:07:aa:96:7a:dd:13:17:b3:f4:3a:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:55:DC:9D:89:14:B0:85:6F:2D:02:77:EA:3D:AD:8E:E1:A9:AD
X509v3 Authority Key Identifier:
keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:43:34:3a:d0:bb:f0:e0:c5:fc:d0:60:ee:4b:87:65:dd:94:
8f:90:f7:00:14:4b:5c:72:eb:df:d1:7c:92:12:21:9d:90:17:
75:15:46:05:77:a5:d3:7c:aa:c1:17:c4:84:6f:b7:e0:33:c8:
0a:e0:be:4b:94:3b:94:ce:cf:38:9a:30:10:5f:dc:42:20:72:
ff:e1:1d:c2:23:08:f9:a5:68:c0:38:43:69:8a:ea:0a:4f:bd:
50:35:bb:34:c2:7f:65:ba:c7:19:9a:d8:0d:99:a0:94:eb:15:
3b:a2:60:39:92:5c:f1:84:af:42:a1:be:46:30:37:3f:6d:f7:
43:e1:56:8b:a9:36:79:48:58:5e:b9:c2:0e:57:0d:c4:15:99:
a2:90:3f:d9:eb:41:14:50:78:7f:5e:0e:89:ea:08:83:dc:a9:
2c:44:1c:17:25:0b:0a:8a:6f:46:9e:f9:22:3b:43:da:3d:8a:
7d:15:61:0b:32:ed:3e:19:12:bf:5e:2e:17:bc:35:73:43:d1:
fc:68:5d:97:9a:5d:6f:5b:72:a9:19:f9:ff:47:08:36:5e:67:
85:8a:b0:f9:98:17:73:92:15:44:eb:86:ab:19:9c:2d:17:8c:
1e:8f:1e:10:26:ec:69:cd:17:f3:d2:39:60:6d:84:f7:7b:60:
94:f8:86:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSlouKjTlgj1m2cW3GOOvzXH2MKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3
NjY4MEFFRjAeFw0yNjAzMjUyMzQ3MzlaFw0yNjAzMjkwMjU4MzlaMDMxMTAvBgNV
BAMTKEVBNjk1NURDOUQ4OTE0QjA4NTZGMkQwMjc3RUEzREFEOEVFMUE5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kOZayuL3yo5/MUo8osVPSk5v
+udWUBeNXl5mgma6tN+7XWCIbb8hVUyl8dmRNkBFzOtjrLlpM91FvKug1XE3c8F2
drt7ticIV265w52JJne6faCDszAv4WXe4RDWzPLS9B5vKToEhjr8NAsypNN7VzCE
nXy4xQ0YNc6jC1ZoO8SMuzdFGK5jl7v5Nyt/4iX2N56dzr/7FaMGWuSC7DauVJlL
Az4Kcq+9oqTJeJBe8e/Dd/R+8vYfm7e8TXwB+UUFx062PLyIkoWr0dhMjA6WkjyI
+i2t0RUjS1owjd1oTcctz7IjthEBsLhjL/FfYZyo0Mr+B6qWet0TF7P0OsGjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6mlV3J2JFLCFby0Cd+o9rY7hqa0wHwYDVR0j
BBgwFoAU9pS8nPW1cMxiAU64uHdEinZoCu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZTcyNTdiYi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC9GNjk0QkM5Q0Y1
QjU3MENDNjIwMTRFQjhCODc3NDQ4QTc2NjgwQUVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0OEE3NjY4
MEFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU3MjU3YmItMjE5NS00ZmQ3LWJj
YzUtOTAxOWFiNDlkYmE1LzAvRjY5NEJDOUNGNUI1NzBDQzYyMDE0RUI4Qjg3NzQ0
OEE3NjY4MEFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABFDNDrQu/DgxfzQYO5Lh2XdlI+Q9wAUS1xy
69/RfJISIZ2QF3UVRgV3pdN8qsEXxIRvt+AzyArgvkuUO5TOzziaMBBf3EIgcv/h
HcIjCPmlaMA4Q2mK6gpPvVA1uzTCf2W6xxma2A2ZoJTrFTuiYDmSXPGEr0KhvkYw
Nz9t90PhVoupNnlIWF65wg5XDcQVmaKQP9nrQRRQeH9eDonqCIPcqSxEHBclCwqK
b0ae+SI7Q9o9in0VYQsy7T4ZEr9eLhe8NXND0fxoXZeaXW9bcqkZ+f9HCDZeZ4WK
sPmYF3OSFUTrhqsZnC0XjB6PHhAm7GnNF/PSOWBthPd7YJT4htU=
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:10 2026 by rpki-client