
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json)
Hash identifier: mzDpUOS/Jw+C8LowzaHsizekV9CPpIO0PCsO18OSUr0=
Subject key identifier: 31:5C:32:6B:A7:29:4F:C9:2D:AC:89:E2:2C:A6:48:34:3A:97:03:3F
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial: 11ADE92479F45C1708BCE9C6149E6AF2C48877DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
Manifest number: 061B
Signing time: Sat 21 Mar 2026 00:31:47 +0000
Manifest this update: Sat 21 Mar 2026 00:26:47 +0000
Manifest next update: Tue 24 Mar 2026 11:05:47 +0000
Files and hashes: 1: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: GpHeYpvaVC/5oOX6wWuHDYESBYSbBH+8yC72lqYbCWs=)
2: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=)
3: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: rG7dqYKT5nt6ouasj9v32371Q08WX8SI0GPAVSyDUks=)
4: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=)
5: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: +IIJxBpeN9s39BMtYHb6s35QyWRYbIZNR8USGg37234=)
6: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 94uZfDP3/cmZBGyV4igX6qKqeZFUHxxCGuoH16tPVQk=)
7: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: YSMhsGgSxUexXfUzO8M+1dzvbXdKTz+R7UgsWo9f99w=)
8: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=)
9: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: 5PGTQ82qm10iiqwqCu9KXGx2jDotpMpVFWV8OCWnbmY=)
10: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Mar 2026 11:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ad:e9:24:79:f4:5c:17:08:bc:e9:c6:14:9e:6a:f2:c4:88:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Validity
Not Before: Mar 21 00:26:47 2026 GMT
Not After : Mar 24 11:05:47 2026 GMT
Subject: CN=315C326BA7294FC92DAC89E22CA648343A97033F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:5f:c8:a1:37:6c:0a:b7:db:8c:4c:ac:ca:
95:24:21:26:11:0c:cd:b8:2e:bf:68:85:eb:9a:49:
a0:b0:38:e1:21:b5:b4:2d:46:6a:a9:6a:08:2c:b8:
5a:24:b3:52:45:1e:47:11:f6:da:11:c9:40:c4:5a:
27:11:2a:8a:64:fd:a3:d5:7b:af:74:35:d5:a4:13:
e5:cd:13:1b:ed:64:96:96:bd:5e:12:ca:a1:53:1e:
01:e3:d6:5f:e2:e8:51:68:16:af:2a:84:db:49:da:
10:68:65:2c:2a:e1:55:dc:e1:de:7a:db:78:5f:57:
26:b1:09:ca:7a:40:11:04:19:3f:19:bb:4a:ed:89:
90:69:a7:a8:f3:5c:a8:10:91:b9:36:63:b3:ce:bd:
28:2c:97:7f:77:2a:1e:61:67:0c:83:68:ff:34:80:
66:aa:d7:b8:14:19:c5:a5:91:d5:c5:f4:94:ee:aa:
40:f9:f2:a9:f8:44:1e:29:b4:e3:4f:6b:f3:6b:c8:
0e:7a:67:a2:6d:dc:45:f8:34:b2:d1:ec:ab:a0:34:
af:34:3e:d2:41:b0:3f:b2:ed:c8:5f:08:12:d1:d6:
c7:95:28:95:ef:e7:f8:94:03:4f:e3:3a:ce:2b:81:
3b:73:a6:9a:0d:75:85:e2:82:10:13:37:ad:30:93:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:32:6B:A7:29:4F:C9:2D:AC:89:E2:2C:A6:48:34:3A:97:03:3F
X509v3 Authority Key Identifier:
keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f2:7f:d0:fb:72:09:76:c7:77:b8:57:b5:46:46:47:b3:6b:
e8:ff:f7:b6:19:e3:db:fa:3b:7f:92:48:fd:df:19:1e:12:64:
bd:f2:b6:e2:e6:d6:8e:dc:79:5f:af:5a:05:bf:fd:41:b6:64:
bd:53:2e:7c:ac:a0:a2:42:f6:d6:24:e4:e6:9b:6a:47:37:fb:
bd:eb:f5:c6:33:b3:2c:3a:94:99:bd:ba:e6:9b:56:87:e3:31:
f4:bb:7a:8c:20:86:3f:44:cc:6e:46:04:c3:38:44:2a:a6:44:
9f:01:4b:d3:be:e3:80:35:89:5b:dc:da:3c:34:26:8a:df:53:
7b:a2:e9:db:58:db:02:3a:b3:87:0f:2b:1e:b7:fd:28:27:25:
85:ee:9f:ec:70:6c:0b:10:42:c8:ae:c2:cf:ac:1b:28:5e:dc:
fe:2e:9f:10:58:b5:c2:20:5d:dd:bb:c5:f5:46:cb:0f:3e:a1:
90:37:ba:d9:33:73:bd:dd:f7:1f:04:0a:e8:f0:52:ee:63:ea:
40:ec:e4:c2:c5:8d:ae:45:60:53:90:b9:90:af:e6:62:61:bc:
f4:2f:e2:5c:ed:b7:5f:bd:5a:3e:34:ce:ee:d3:84:d9:82:fe:
bf:ae:31:56:9a:b2:1e:a7:40:3d:45:07:cd:70:c8:f4:07:62:
d9:1d:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:01:31 2026 by rpki-client