
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json)
Hash identifier: FqlocPY7HZYR0YC9vQVDMbRqulI5vfT1gfvz56mK5hs=
Subject key identifier: 7F:90:D6:0C:D9:33:26:EC:C1:20:9C:E6:28:A1:A2:03:B1:0E:A8:C3
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial: 638EC64A30B1795DDC996EC8CB8855798F62354B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
Manifest number: 014E
Signing time: Fri 06 Mar 2026 10:40:54 +0000
Manifest this update: Fri 06 Mar 2026 10:35:54 +0000
Manifest next update: Mon 09 Mar 2026 16:02:54 +0000
Files and hashes: 1: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=)
2: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: AaPw5WGK1pxmKCUp8zVNoH29hU+VgwrGxC1jzZB9HOs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8e:c6:4a:30:b1:79:5d:dc:99:6e:c8:cb:88:55:79:8f:62:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Validity
Not Before: Mar 6 10:35:54 2026 GMT
Not After : Mar 9 16:02:54 2026 GMT
Subject: CN=7F90D60CD93326ECC1209CE628A1A203B10EA8C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:2e:eb:b0:bb:c4:3f:d7:54:13:05:4e:94:
95:52:40:44:01:ef:ac:b6:95:f7:55:8b:d7:be:e9:
cc:5a:dd:6a:0a:13:41:16:bc:bb:e4:42:94:df:be:
41:22:df:cb:87:a6:29:77:19:1a:da:48:39:ec:bd:
1a:5c:9f:61:bf:64:79:58:f3:6f:0a:6f:6c:21:37:
b0:a2:d1:b2:44:ad:a3:5d:4a:76:5c:2a:be:a8:b2:
ee:1a:72:7e:05:a7:66:37:d6:82:37:72:fb:25:a6:
d1:7d:12:df:82:c0:a6:1e:b9:7c:01:6d:22:31:0a:
d4:d5:9f:9c:15:32:5b:07:3e:64:82:86:e4:05:54:
26:d7:01:13:96:a3:53:0a:b8:83:52:50:f9:9d:5d:
04:50:e1:63:e6:85:24:97:66:74:88:fd:7a:6c:75:
1c:95:4b:7e:9d:a4:09:00:25:26:c0:60:16:bf:30:
ea:33:ed:3f:30:8f:8e:2b:ac:67:82:3a:e9:77:0e:
a5:05:d7:ea:38:b5:46:0c:85:86:eb:78:20:37:45:
77:a9:3b:87:10:fe:ba:f0:41:c7:01:09:72:66:31:
b8:e7:94:33:2b:a2:b3:bb:92:f8:60:e2:31:54:30:
b3:77:fb:9a:49:7d:5d:80:70:1d:63:e9:1f:c0:02:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:D6:0C:D9:33:26:EC:C1:20:9C:E6:28:A1:A2:03:B1:0E:A8:C3
X509v3 Authority Key Identifier:
keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cd:9f:01:f8:3a:11:ab:d5:b5:e6:57:62:2d:54:fd:5e:58:
13:75:71:98:22:fc:66:3e:f0:ba:c2:11:3d:02:8e:46:fe:0b:
4c:8f:94:fe:f0:a8:b4:c1:20:3b:3c:b4:af:01:c0:fd:91:e9:
09:26:f2:28:bd:a4:95:fd:01:30:24:d8:70:92:36:9c:1e:76:
71:34:85:74:92:5f:4f:6d:31:5f:c6:a4:2b:15:f1:50:a0:21:
36:69:75:a4:98:cf:18:cc:42:14:df:52:2a:5c:4a:2f:0f:1d:
c6:73:2e:46:8d:ed:fc:3d:af:f5:a5:99:22:df:eb:c7:b4:47:
0e:74:ec:02:c1:f7:89:c3:ee:34:a5:27:f7:ce:e4:19:96:c4:
d8:28:c0:5c:9e:3f:f2:79:52:8f:92:9a:5f:38:aa:bd:2a:83:
f6:c8:ab:2f:50:23:75:70:97:61:f2:b6:fb:4b:f3:8e:a1:41:
41:35:3e:f8:4c:5f:d2:ec:cb:dc:7e:e9:63:28:9a:9a:aa:db:
08:0d:3d:41:f3:be:de:31:f9:ad:9d:3f:fd:f4:ef:b7:4e:ba:
2f:f3:54:37:80:98:24:56:cc:e0:24:08:67:52:c8:3a:2d:51:
6d:c2:47:4d:eb:e5:74:79:38:74:be:70:0e:81:e1:48:1b:d9:
44:a4:39:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY47GSjCxeV3cmW7Iy4hVeY9iNUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz
MzFCODY2OTAeFw0yNjAzMDYxMDM1NTRaFw0yNjAzMDkxNjAyNTRaMDMxMTAvBgNV
BAMTKDdGOTBENjBDRDkzMzI2RUNDMTIwOUNFNjI4QTFBMjAzQjEwRUE4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/C7rsLvEP9dUEwVOlJVSQEQB
76y2lfdVi9e+6cxa3WoKE0EWvLvkQpTfvkEi38uHpil3GRraSDnsvRpcn2G/ZHlY
828Kb2whN7Ci0bJEraNdSnZcKr6osu4acn4Fp2Y31oI3cvslptF9Et+CwKYeuXwB
bSIxCtTVn5wVMlsHPmSChuQFVCbXAROWo1MKuINSUPmdXQRQ4WPmhSSXZnSI/Xps
dRyVS36dpAkAJSbAYBa/MOoz7T8wj44rrGeCOul3DqUF1+o4tUYMhYbreCA3RXep
O4cQ/rrwQccBCXJmMbjnlDMrorO7kvhg4jFUMLN3+5pJfV2AcB1j6R/AAi7hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUf5DWDNkzJuzBIJzmKKGiA7EOqMMwHwYDVR0j
BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1
QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC
ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw
YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4
QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHHNnwH4OhGr1bXmV2ItVP1eWBN1cZgi/GY+
8LrCET0Cjkb+C0yPlP7wqLTBIDs8tK8BwP2R6Qkm8ii9pJX9ATAk2HCSNpwednE0
hXSSX09tMV/GpCsV8VCgITZpdaSYzxjMQhTfUipcSi8PHcZzLkaN7fw9r/WlmSLf
68e0Rw507ALB94nD7jSlJ/fO5BmWxNgowFyeP/J5Uo+Sml84qr0qg/bIqy9QI3Vw
l2HytvtL846hQUE1PvhMX9Lsy9x+6WMompqq2wgNPUHzvt4x+a2dP/3077dOui/z
VDeAmCRWzOAkCGdSyDotUW3CR03r5XR5OHS+cA6B4Ugb2USkOeI=
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:26:02 2026 by rpki-client