
$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft
File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json)
Hash identifier: 70P5f6jeTRfJXrUhhhbzXFH38+p2uk8SCBIuBvi35LQ=
Subject key identifier: A8:7C:DA:F7:3D:50:30:83:CA:76:5C:44:2B:B0:F7:52:67:4C:37:6E
Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C
Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C
Certificate serial: 74643EBA075F7833820EF558EA0AABE25228009F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft
Manifest number: 0109
Signing time: Sat 07 Mar 2026 13:30:48 +0000
Manifest this update: Sat 07 Mar 2026 13:25:48 +0000
Manifest next update: Tue 10 Mar 2026 22:02:48 +0000
Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=)
2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: dawl7yOs4aG9xA7/R0ect/co08Yzj0zFMf+RLXMv3Jc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl
rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:64:3e:ba:07:5f:78:33:82:0e:f5:58:ea:0a:ab:e2:52:28:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C
Validity
Not Before: Mar 7 13:25:48 2026 GMT
Not After : Mar 10 22:02:48 2026 GMT
Subject: CN=A87CDAF73D503083CA765C442BB0F752674C376E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:d7:9a:e9:9e:88:68:dc:b7:bb:19:2b:07:
3f:d4:1d:1e:59:24:f0:13:0b:c4:e1:e7:53:a7:22:
88:26:90:2a:ec:90:f0:15:9b:63:bc:9d:d7:9d:5a:
62:86:6c:69:61:de:61:1d:d9:7e:31:24:b7:cc:5f:
a5:b4:6e:4d:a7:cd:6c:e7:37:a1:43:5c:cf:46:23:
a0:19:4e:57:7f:73:52:d8:e3:85:c0:87:ec:08:0a:
d7:81:b5:62:96:52:04:5a:23:fd:67:00:3a:4b:24:
b1:80:c9:5b:cb:c4:c5:5c:07:19:bc:9e:35:f2:74:
83:63:21:d9:5d:ec:b9:66:d6:0b:5c:46:a1:70:c9:
d7:84:91:77:ac:9b:86:1b:3a:0d:6c:8d:c4:ca:d7:
c8:f9:63:24:8b:b0:48:67:3c:17:8d:db:71:21:b0:
0a:e4:aa:ab:0f:dc:93:20:be:ee:23:cb:f2:83:d9:
6b:0b:4a:cc:08:4e:85:7f:ae:d0:e1:2a:5a:3b:99:
47:ea:dc:ab:cf:72:bf:27:9c:52:c8:91:4e:57:9e:
d7:ed:1e:74:bd:e7:25:4b:7e:4c:d7:2a:c3:24:4f:
53:af:ce:32:03:f8:a8:d9:e9:2a:d7:f0:47:22:6e:
9c:0f:8d:8f:fc:17:2e:76:35:41:d4:d8:c7:3f:54:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:DA:F7:3D:50:30:83:CA:76:5C:44:2B:B0:F7:52:67:4C:37:6E
X509v3 Authority Key Identifier:
keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:0a:63:fe:d5:ee:8c:f0:cf:eb:fb:ff:e2:1c:2d:2c:00:
3c:f0:27:61:3d:83:29:34:0c:38:55:bf:d8:cc:75:6a:64:db:
fc:bb:a8:31:17:61:dd:53:26:44:8b:4d:21:c7:8f:49:00:a2:
99:e7:0e:3b:8a:86:e1:1e:ee:d0:7b:f4:5b:30:fe:1c:28:25:
3e:05:27:72:72:68:43:65:22:00:a1:07:f1:cd:22:15:ef:f9:
12:a8:3e:d5:ae:d4:01:e3:20:f2:94:8e:e7:b0:b6:5b:6d:03:
a6:9f:27:e7:64:f9:8b:7e:a1:6d:81:8e:b1:6e:fc:e0:6a:26:
09:8a:5f:5e:e9:e3:82:f7:d3:a1:93:40:d5:9f:e4:a4:fe:86:
a4:23:48:83:28:5f:e7:34:77:0c:1c:f2:81:c8:3e:b0:51:cc:
1e:a2:ae:09:ab:8c:7a:ba:0f:ad:82:0e:0c:a6:c0:07:17:49:
77:f0:af:5d:65:e6:20:c3:25:90:2a:30:e4:59:26:36:82:52:
69:08:09:88:27:fe:11:49:73:96:46:4a:c5:dd:94:9a:62:9c:
2d:c5:ec:a9:2d:b7:44:54:13:2e:bc:94:5b:a7:23:0b:e6:68:
12:5f:99:ef:a7:4b:15:a7:80:be:c9:48:dc:fe:c9:dd:b3:d8:
73:54:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:31 2026 by rpki-client