
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json)
Hash identifier: U8rCFS/ctGDcqHBfI1KKKdMIlfmsUfdAlUByuZaNCj8=
Subject key identifier: 69:FC:C4:6D:C4:EC:12:E0:4E:A3:8E:BE:58:E4:85:88:0E:AA:E2:34
Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Certificate serial: 42ACA6746B95A1251D4B29A5D409C9C4A58BE427
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
Manifest number: 0107
Signing time: Tue 24 Mar 2026 23:30:01 +0000
Manifest this update: Tue 24 Mar 2026 23:25:01 +0000
Manifest next update: Sat 28 Mar 2026 09:58:01 +0000
Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=)
2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: k1aC2EtOls/UONmJWKbeOYqoSIOQIbt1Ry+klz7dWqw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 09:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ac:a6:74:6b:95:a1:25:1d:4b:29:a5:d4:09:c9:c4:a5:8b:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756
Validity
Not Before: Mar 24 23:25:01 2026 GMT
Not After : Mar 28 09:58:01 2026 GMT
Subject: CN=69FCC46DC4EC12E04EA38EBE58E485880EAAE234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:1d:01:08:5a:57:25:bd:21:02:05:9b:a0:
2c:d5:5b:8f:db:d8:6b:e1:66:73:c8:83:3f:1b:1a:
ac:90:7c:e4:ed:a4:84:72:81:6a:ba:6e:7c:ae:b9:
4d:c9:27:7c:b4:c3:bc:0a:15:ca:bb:07:bc:98:a1:
90:11:00:e5:1c:1c:30:1c:90:10:32:de:c8:ff:bc:
55:74:3d:db:44:0e:7a:29:0d:b3:56:f9:ea:07:12:
b1:24:71:54:69:4f:1a:45:6a:ab:71:6c:12:5d:8b:
af:97:ea:5d:f4:8d:06:a9:bf:66:ac:38:86:0e:66:
e8:b2:73:ba:93:2c:95:66:c8:6d:47:af:0f:1b:44:
72:a5:e1:d7:d6:24:75:d4:66:0a:66:97:ee:eb:c4:
b2:1d:95:9a:30:66:4e:a5:d6:f8:ec:ac:b9:76:06:
e4:95:72:52:de:41:ca:35:c6:07:65:03:1e:77:83:
d5:05:65:3a:e5:ca:62:9d:82:12:d6:51:7c:03:6c:
f4:6f:2c:9c:19:e5:36:fb:0c:ca:b7:9a:51:7c:c9:
97:86:b6:19:48:b7:fb:0c:f6:fd:ee:ca:8f:6f:a4:
0a:eb:83:37:53:f3:92:a3:72:eb:13:db:5d:c0:e1:
a4:7a:99:23:f5:b2:10:a5:25:fd:bb:25:d6:a7:97:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:C4:6D:C4:EC:12:E0:4E:A3:8E:BE:58:E4:85:88:0E:AA:E2:34
X509v3 Authority Key Identifier:
keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:95:51:5e:d6:1b:8e:2f:b5:21:7b:61:ec:a3:cd:9d:65:a9:
02:7c:b0:a3:60:08:2c:03:44:89:a8:98:cf:69:a5:b3:44:df:
5c:58:51:08:8d:a0:76:c6:ac:6c:f1:a6:df:fe:dd:ea:f0:b3:
4d:95:23:7f:e7:89:68:0b:34:9e:12:18:e0:a5:78:f2:45:52:
f9:80:a9:8c:5c:eb:54:20:92:b6:9a:17:f3:8e:c8:74:fc:76:
c6:15:09:bf:e0:0e:ee:6c:2f:64:82:b4:a2:ff:22:10:d9:2e:
96:f4:5d:87:35:53:8b:3a:85:71:6e:3a:c4:bd:42:f8:42:6a:
57:8e:c9:41:4e:8c:05:19:8e:fe:8c:18:37:da:fb:a5:b8:52:
1a:5f:c0:8d:a7:e4:49:94:50:4e:e7:fa:42:70:60:28:f1:6a:
6c:b0:92:50:91:34:f7:e4:d6:96:44:7b:d0:2e:9e:46:9a:bf:
73:89:64:74:0d:7f:a5:4c:1d:6f:7f:f2:d1:d7:b3:84:c5:27:
57:1b:82:3c:3a:e6:d9:c7:7d:47:db:4e:ac:8f:aa:cf:b0:ee:
f5:98:73:1e:66:af:7c:9f:33:44:c3:7b:2b:e9:97:4e:24:eb:
c5:e9:bc:93:a2:7b:f6:3f:5d:15:a9:84:f8:6f:d3:36:8a:5a:
9f:27:37:ea
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQqymdGuVoSUdSyml1AnJxKWL5CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx
NjY4NDc1NjAeFw0yNjAzMjQyMzI1MDFaFw0yNjAzMjgwOTU4MDFaMDMxMTAvBgNV
BAMTKDY5RkNDNDZEQzRFQzEyRTA0RUEzOEVCRTU4RTQ4NTg4MEVBQUUyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOx0BCFpXJb0hAgWboCzVW4/b
2GvhZnPIgz8bGqyQfOTtpIRygWq6bnyuuU3JJ3y0w7wKFcq7B7yYoZARAOUcHDAc
kBAy3sj/vFV0PdtEDnopDbNW+eoHErEkcVRpTxpFaqtxbBJdi6+X6l30jQapv2as
OIYOZuiyc7qTLJVmyG1Hrw8bRHKl4dfWJHXUZgpml+7rxLIdlZowZk6l1vjsrLl2
BuSVclLeQco1xgdlAx53g9UFZTrlymKdghLWUXwDbPRvLJwZ5Tb7DMq3mlF8yZeG
thlIt/sM9v3uyo9vpArrgzdT85KjcusT213A4aR6mSP1shClJf27Jdanl3sRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUafzEbcTsEuBOo46+WOSFiA6q4jQwHwYDVR0j
BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF
RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4
NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj
MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw
NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGSVUV7WG44vtSF7YeyjzZ1lqQJ8sKNgCCwD
RImomM9ppbNE31xYUQiNoHbGrGzxpt/+3erws02VI3/niWgLNJ4SGOClePJFUvmA
qYxc61QgkraaF/OOyHT8dsYVCb/gDu5sL2SCtKL/IhDZLpb0XYc1U4s6hXFuOsS9
QvhCaleOyUFOjAUZjv6MGDfa+6W4UhpfwI2n5EmUUE7n+kJwYCjxamywklCRNPfk
1pZEe9Aunkaav3OJZHQNf6VMHW9/8tHXs4TFJ1cbgjw65tnHfUfbTqyPqs+w7vWY
cx5mr3yfM0TDeyvpl04k68XpvJOie/Y/XRWphPhv0zaKWp8nN+o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:25 2026 by rpki-client