
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File: 1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier: NP2b+d/estUk6CBuyk4EzLVdim1ILk1kU8lVPGvgz/E=
Subject key identifier: B7:0C:7B:AA:51:34:E0:04:DD:51:A6:A1:62:D8:D7:6A:C8:6C:C0:3D
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 1E0FA7E5DBE5537D0DD3613E3E073C8CAD4865AB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number: 02B8
Signing time: Thu 19 Mar 2026 07:42:06 +0000
Manifest this update: Thu 19 Mar 2026 07:37:06 +0000
Manifest next update: Sun 22 Mar 2026 10:26:06 +0000
Files and hashes: 1: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: lW/jt6Bkd0gTSiHJs4iRdSaon+OvMnG+r5CfkADVOcg=)
2: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=)
3: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=)
4: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
5: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=)
6: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=)
7: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
8: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: HB4BEaVD5xfGQGvt67YetoiSjWiGFie2TAF+weL5UPc=)
9: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
10: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
11: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 10:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0f:a7:e5:db:e5:53:7d:0d:d3:61:3e:3e:07:3c:8c:ad:48:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Mar 19 07:37:06 2026 GMT
Not After : Mar 22 10:26:06 2026 GMT
Subject: CN=B70C7BAA5134E004DD51A6A162D8D76AC86CC03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:85:f6:d4:c4:c7:d6:28:72:14:71:96:d4:
36:f0:bb:e0:df:89:12:d9:54:46:02:65:1d:9e:11:
8c:89:24:22:b8:66:72:af:dd:e8:52:94:03:1b:2c:
07:c7:76:c3:05:49:c5:ae:f2:ad:47:86:89:9e:ca:
c9:15:86:68:37:84:41:2e:70:19:02:bb:66:d5:98:
ba:e0:a4:b8:ac:fa:1a:9a:b7:d0:a9:3a:46:35:41:
4c:ba:2a:91:2c:46:12:e4:e8:07:f5:18:ef:4c:5f:
65:d8:1e:07:76:8a:e8:59:31:b4:1a:29:2f:15:fc:
3a:4c:26:e3:c0:8f:d6:02:ab:51:12:28:88:c6:e1:
9d:fd:2e:ab:a7:21:65:55:33:5b:fb:be:98:ee:ac:
6e:ab:98:30:87:78:a9:80:ff:85:1b:a8:b1:a2:49:
3e:16:37:b8:59:e5:57:30:ae:1a:55:97:c6:ba:78:
2f:6a:b5:6a:6d:3e:f0:59:29:8d:b1:e5:31:35:57:
db:b6:49:16:3a:c6:47:cc:a7:3c:47:c0:0f:eb:40:
83:38:8a:d0:50:e3:e0:66:8f:92:3f:63:9a:5b:5f:
d8:93:51:3a:89:c9:2f:90:ab:c1:8c:bb:e7:25:06:
f8:70:0e:53:61:cb:6c:23:74:20:f8:01:50:41:d2:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:7B:AA:51:34:E0:04:DD:51:A6:A1:62:D8:D7:6A:C8:6C:C0:3D
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:a5:8a:75:29:f7:96:e3:31:8d:f6:ff:c5:29:b8:1c:03:
d8:c2:b0:17:08:10:25:65:97:76:1d:c6:31:8d:07:84:d3:aa:
c1:aa:ed:c9:66:b2:0b:a9:51:75:08:53:6a:c4:8b:75:99:73:
83:09:24:29:60:41:ab:d4:6b:04:69:8a:ba:f9:ba:ba:03:6f:
9a:3e:ee:e5:2a:90:b2:94:22:7f:87:4f:48:23:a5:68:14:12:
bb:b4:8e:d8:eb:ab:3f:bd:89:ce:8e:14:a8:c1:0e:8d:6f:6c:
69:5c:6a:b4:10:72:2b:f0:43:7f:e8:94:84:e0:73:c9:99:d5:
c1:70:9e:05:a2:e1:69:d4:b2:d4:f7:63:fa:d1:3a:d2:75:b9:
17:79:d2:74:0a:c2:d5:b6:fd:f1:f9:91:b6:1f:84:7b:e5:70:
33:9b:1c:62:d1:a8:b9:e3:0b:f7:e6:19:4d:07:bd:8f:28:f7:
a8:17:ee:cb:ab:be:33:25:39:c4:ca:ff:04:0d:00:3f:7d:26:
1d:03:82:d0:72:6a:6a:b4:d1:59:12:78:26:69:9a:39:9c:1b:
2e:48:29:65:30:ff:7d:c3:de:28:36:a5:d6:2f:7d:53:36:77:
2c:33:20:e7:bd:b9:f8:1e:55:d0:2a:3e:f7:2e:e3:9e:21:66:
e4:21:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:13:37 2026 by rpki-client