
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json)
Hash identifier: hLIrIianvjgV83WnI5hyr8gHjgHyUBysb0z568Mvtbk=
Subject key identifier: F9:03:5A:33:07:54:F8:B9:5E:EA:C7:4F:F0:57:CA:E1:0F:85:9A:E1
Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04
Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
Certificate serial: 66A68D0FD5A6D13B5F9B2388F80D961CA8D715F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
Manifest number: 012A
Signing time: Sat 07 Mar 2026 17:31:12 +0000
Manifest this update: Sat 07 Mar 2026 17:26:12 +0000
Manifest next update: Wed 11 Mar 2026 04:02:12 +0000
Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=)
2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: 8BpuYvFgJ1yGY0zfJ/2RYR9EiT5aegP8xNJ+rMs2Kco=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl
rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a6:8d:0f:d5:a6:d1:3b:5f:9b:23:88:f8:0d:96:1c:a8:d7:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
Validity
Not Before: Mar 7 17:26:12 2026 GMT
Not After : Mar 11 04:02:12 2026 GMT
Subject: CN=F9035A330754F8B95EEAC74FF057CAE10F859AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:e9:96:24:8c:31:3d:62:c8:56:e8:1c:41:
92:86:4c:a5:c9:aa:de:60:e7:be:2a:e7:ce:f6:e2:
35:82:41:d8:4f:4b:52:1a:09:84:0a:00:fb:0c:4d:
5c:01:8b:9f:eb:f9:d4:53:f3:a0:f1:8d:0c:a4:c5:
31:d8:eb:23:73:e3:2d:e8:69:e5:7c:9f:ee:a0:40:
8d:7c:40:17:22:6f:29:13:00:00:9d:d4:99:6f:6f:
4c:64:ee:1a:8a:1b:a3:c4:80:f5:55:15:3a:09:fe:
90:1d:9d:34:a4:8e:7d:76:68:c2:2e:2f:08:c3:23:
df:1f:73:fc:82:f0:6a:a2:0a:1b:f9:b8:20:23:58:
26:c2:7f:fe:3d:79:d8:d3:c8:67:49:1f:0a:8b:90:
3f:4e:f5:af:3d:39:68:1b:20:cd:1b:eb:b6:6a:ce:
17:a0:f2:74:e4:d1:2d:91:ef:94:de:15:3b:87:bd:
ab:dd:f2:7b:5e:05:0a:8b:90:e4:20:f3:a4:09:63:
8a:1d:41:61:7e:d1:2b:6b:4c:24:f6:c7:b8:96:87:
d2:65:61:f2:b9:22:c0:30:f9:ba:6a:43:8a:e6:38:
82:5b:a8:9a:97:ec:db:6e:b6:45:48:3e:6d:4d:83:
4b:0f:af:14:37:a0:99:f6:d7:4a:70:9e:f5:fd:1b:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:5A:33:07:54:F8:B9:5E:EA:C7:4F:F0:57:CA:E1:0F:85:9A:E1
X509v3 Authority Key Identifier:
keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:6d:15:a8:48:6d:6f:0b:3c:f9:14:7f:a7:69:d1:05:9a:
78:96:73:bc:6d:72:b2:6c:b2:68:d1:28:55:be:26:48:4c:9a:
be:c3:10:7a:1e:2d:0d:d0:61:e3:09:9d:aa:67:76:1f:d7:c0:
83:14:db:2e:48:ba:07:53:f6:c8:1b:36:06:12:f4:89:c7:42:
29:e6:02:03:5a:28:83:36:68:68:37:fe:e4:93:7a:d8:07:12:
60:63:ba:78:05:63:95:d6:11:39:02:88:b3:a5:79:58:49:a4:
3c:06:e3:7f:9b:b0:a8:21:47:6f:5a:12:2b:69:2d:fb:ea:4d:
2f:5a:bd:08:14:e0:92:d2:79:a7:8f:a4:74:8c:06:08:bb:87:
d9:78:d8:eb:ae:0c:5d:f5:d4:5e:9c:09:cd:7b:55:9e:0c:3a:
70:c6:e2:65:e4:ed:bb:92:80:12:22:8f:cc:4b:79:57:73:26:
51:b9:5d:23:da:ce:02:89:d1:a4:8e:e0:c0:5a:d7:24:ed:01:
f5:94:3c:86:ad:f2:18:7d:99:fb:47:6d:20:4c:c9:cf:cf:51:
68:88:e5:0b:97:38:02:20:47:a2:04:5a:c4:3b:35:66:f6:1b:
ec:0f:af:0b:87:e3:9b:aa:98:f3:d2:7c:a1:63:8a:c2:6b:a6:
c8:36:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:38:45 2026 by rpki-client