
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File: 1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier: qbgA1VYZDPOKV8L6OcSm9gwTJVM5AByBJU/+8Pdkb5k=
Subject key identifier: 19:E2:1B:FF:6C:1F:F0:3D:1E:11:43:6F:2F:AC:40:E5:9D:3A:CB:BD
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 132BFADD54EF67A475E2937D7B0EABEAB8B4C4FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number: 0278
Signing time: Fri 31 Oct 2025 00:31:53 +0000
Manifest this update: Fri 31 Oct 2025 00:26:53 +0000
Manifest next update: Mon 03 Nov 2025 05:18:53 +0000
Files and hashes: 1: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
2: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
3: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: I2GxvF+hElG1yAh007aM/yMEViDm+JYfJmwRWj1ftM0=)
4: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
5: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: qNzsGiJwf7XGjGP4j+CDhg7oJnuuTy/kX7unl+wQ3hg=)
6: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
7: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: KyjP36QU2B5WmwOGj/w2MpttC7+1bk2GysORLqVSxsM=)
8: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: RIaxQt2BdMly6jZqFEt6v4+R9ZCRoPt0bRRhz87aHRQ=)
9: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: tVX60KIpnKMB23Pkr3pSMdVfDO+7BdFgyKjSfJSbpxU=)
10: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
11: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: zszkuvV/DGJtyi38SwI+iyz6P0zwyMAcKOGOc8uu7vs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 05:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2b:fa:dd:54:ef:67:a4:75:e2:93:7d:7b:0e:ab:ea:b8:b4:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Oct 31 00:26:53 2025 GMT
Not After : Nov 3 05:18:53 2025 GMT
Subject: CN=19E21BFF6C1FF03D1E11436F2FAC40E59D3ACBBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:cb:67:21:0f:e5:f2:ad:c1:8c:34:46:32:
a1:11:56:b9:2b:47:e2:81:0e:41:8c:79:cf:ac:6f:
2f:b8:10:1f:ab:86:70:ba:ca:41:8e:89:a7:f0:9a:
1b:4b:c8:24:a4:21:5d:de:85:92:7e:d4:df:78:1b:
e3:9d:c4:19:21:a9:ca:54:bd:fe:22:28:cc:c6:93:
6a:88:65:32:9b:15:a5:52:e1:99:a5:76:22:0a:fc:
06:c2:3a:fb:25:f6:e9:06:69:b4:af:0a:ec:ea:05:
0f:33:3a:04:2d:3e:e8:2f:7c:45:44:b6:7b:15:da:
7b:a7:67:1c:53:af:9c:51:a5:0d:46:32:dd:7b:ab:
b8:57:2e:56:91:88:35:ec:3f:81:d5:6e:b7:03:b9:
b9:a2:d3:bf:87:e9:36:aa:67:9a:2b:1e:e0:a2:12:
76:ad:a6:15:d5:27:5e:3d:94:8d:d2:3a:8f:39:50:
87:74:42:bf:8f:52:fc:12:bc:5f:ea:c3:4c:32:01:
93:6e:b7:b6:f0:31:ea:3c:cc:e1:e7:79:17:3e:32:
3a:20:b0:3e:86:be:c0:b7:5c:e8:4d:fa:c4:a0:76:
5c:82:25:52:08:8a:ef:9a:79:e8:4b:c1:9a:c7:71:
04:d4:d7:01:e6:8f:4b:95:ca:50:2f:ba:dc:41:b6:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:1B:FF:6C:1F:F0:3D:1E:11:43:6F:2F:AC:40:E5:9D:3A:CB:BD
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:11:49:4a:f1:1d:55:fc:e0:b2:91:0c:8e:f5:41:1e:84:
6d:c0:92:85:de:ae:81:c5:ab:06:84:34:e0:80:af:64:da:f2:
b7:bb:69:4d:2d:30:17:72:8a:fd:a6:9f:fe:28:9a:dd:ac:66:
a7:67:81:f8:31:4e:84:07:e5:e8:0e:13:9c:45:34:73:36:8f:
78:1d:d2:16:0b:48:c5:78:f9:92:54:8c:68:ca:e0:19:2c:07:
03:46:39:62:62:4f:95:3f:60:d8:0d:e9:5e:47:0a:f8:24:ae:
fd:3b:ce:55:30:35:b7:de:71:b6:3f:96:43:31:37:e3:02:f4:
e3:5a:77:21:71:36:89:26:57:0b:39:cb:82:d5:e8:1c:0a:13:
78:80:cc:5d:c1:0b:0f:1a:91:f4:b2:fe:62:d5:e6:64:0e:a0:
b4:b8:56:43:7b:b1:95:90:d8:01:89:54:6c:7e:ae:98:b9:73:
e5:b0:8e:aa:94:8b:48:55:8f:66:60:55:fc:5e:df:b4:d9:97:
bf:76:bc:6b:4b:55:d1:b3:bb:ce:56:aa:a6:90:c2:81:2a:7e:
59:64:03:da:c1:16:e7:2e:70:3b:aa:0d:22:16:fe:97:40:c7:
e1:36:b1:97:a2:0f:96:58:d9:bb:9b:54:53:6b:95:76:bc:a9:
ef:8b:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 13:30:22 2025 by rpki-client