
$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
File: F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json)
Hash identifier: oJmttBeXUyfqHWsZ6g4pmo52FvPtlKcew0xyBMv+ajA=
Subject key identifier: 04:0B:32:B5:31:FC:46:83:43:01:B9:ED:EB:64:B2:8B:FD:58:E1:1A
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Certificate issuer: /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial: 4B71B42C640E74DA4F765C4C60CFA59EAA265A52
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
Manifest number: 0239
Signing time: Mon 27 Apr 2026 14:11:48 +0000
Manifest this update: Mon 27 Apr 2026 14:06:48 +0000
Manifest next update: Thu 30 Apr 2026 22:02:48 +0000
Files and hashes: 1: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: k1JZmlSGJxD3SiLKQY+pyua/HbRx/dN+4oPKj0ag060=)
2: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Apr 2026 22:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:71:b4:2c:64:0e:74:da:4f:76:5c:4c:60:cf:a5:9e:aa:26:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Validity
Not Before: Apr 27 14:06:48 2026 GMT
Not After : Apr 30 22:02:48 2026 GMT
Subject: CN=040B32B531FC46834301B9EDEB64B28BFD58E11A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:f8:e3:fd:50:4f:0d:67:30:d2:b9:b4:1f:
84:0d:5b:d5:ca:6d:9c:8e:a9:0c:c0:22:d5:4a:6c:
a7:95:d8:56:f6:d5:41:c3:bc:a5:46:32:78:b3:ef:
14:15:a0:1e:89:f9:7f:1b:ee:90:ec:1a:8e:9b:24:
2f:17:08:0f:74:56:d3:5f:74:a9:5b:ed:e9:e3:bf:
87:e1:4b:a9:bb:20:ae:32:1a:5f:de:5e:f7:8f:e1:
a5:60:91:eb:d9:1f:e7:69:55:2b:cc:fd:85:fb:49:
10:c9:e4:aa:9b:5f:a0:a6:5b:b9:91:46:8d:cc:ae:
32:27:73:e5:56:c0:db:96:b0:eb:68:dd:1d:09:68:
42:39:e6:32:d7:62:e3:e7:7e:5f:14:1f:c0:06:0c:
09:f8:f9:6c:86:0a:12:d1:32:72:fd:a7:fe:5d:84:
8d:e1:27:bf:c5:6b:7f:3a:62:25:0a:fe:83:39:96:
e0:84:31:6c:1d:ab:8c:9e:e1:9c:b6:de:e2:8a:a8:
73:60:b1:eb:2c:6b:b5:b4:f5:9d:cd:7c:18:d6:bb:
08:44:a5:92:3f:29:d3:39:54:51:40:7d:db:ef:83:
1a:e1:2c:82:fe:1f:c2:cb:44:52:b7:1e:24:15:29:
5a:f2:ff:82:03:fd:34:38:64:f7:14:f2:47:7c:34:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0B:32:B5:31:FC:46:83:43:01:B9:ED:EB:64:B2:8B:FD:58:E1:1A
X509v3 Authority Key Identifier:
keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:10:7a:fb:97:54:47:eb:cf:a2:c1:12:6b:4d:2a:34:88:
f3:f9:b5:5f:03:d1:e4:f5:76:f9:15:53:88:f7:09:e3:35:0b:
75:37:8b:da:a4:73:ff:6a:68:a8:3c:e7:3d:c8:75:2a:9b:47:
fe:88:34:1a:57:80:08:40:cc:b9:0c:3d:d8:dc:3b:ac:56:35:
86:da:31:be:c8:3d:07:ae:52:99:1a:db:51:eb:90:ee:3e:23:
88:8f:db:e0:97:1a:b2:6f:b4:9f:1c:59:f0:71:60:1c:f3:fd:
c0:95:9c:31:ce:db:cf:19:97:73:1e:a3:7c:ed:dd:63:af:9e:
9f:bb:67:8f:2c:b1:2b:b0:85:c0:85:5c:77:f3:fe:6b:34:33:
6d:ae:06:d3:0b:6d:48:8a:57:89:2c:d3:98:87:67:87:51:27:
ab:0e:e7:b2:7f:03:f8:d3:ba:79:0d:bd:62:33:67:0c:8f:08:
c1:e9:30:d9:da:17:0c:85:40:77:f2:2a:ba:33:df:ce:42:96:
34:cd:37:6c:e3:72:de:77:7c:96:3d:ef:61:1d:f2:ae:b4:cf:
78:a1:76:0a:f2:ca:99:5c:bc:17:5a:c4:85:96:e6:1d:bb:80:
1b:12:be:84:96:f0:5d:22:40:10:f7:a7:b9:a4:18:b2:f2:91:
81:07:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:19:41 2026 by rpki-client