
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json)
Hash identifier: FQEqKJDz9yMeIzgRVTxegYbSpXW4ropz97WxmbVMS7A=
Subject key identifier: 91:29:AB:3E:F7:34:9C:68:F5:CE:FB:37:F0:AB:C8:F6:BC:77:85:F5
Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5
Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5
Certificate serial: 3A3886333E86E95E1D235ADD605A442AE1B5B843
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
Manifest number: 0115
Signing time: Fri 06 Mar 2026 12:00:44 +0000
Manifest this update: Fri 06 Mar 2026 11:55:44 +0000
Manifest next update: Mon 09 Mar 2026 15:48:44 +0000
Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=)
2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: /WhG9IitoaXvdtSlJsnMzrSlpI8HkVSUViQ5zy5pcQA=)
3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=)
4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl
rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:38:86:33:3e:86:e9:5e:1d:23:5a:dd:60:5a:44:2a:e1:b5:b8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5
Validity
Not Before: Mar 6 11:55:44 2026 GMT
Not After : Mar 9 15:48:44 2026 GMT
Subject: CN=9129AB3EF7349C68F5CEFB37F0ABC8F6BC7785F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:31:0c:a9:73:b3:40:3e:cf:9b:70:23:ab:
ea:47:cb:e8:3e:59:83:1b:c5:be:ec:41:6d:ac:1f:
3b:d4:88:56:84:b0:58:12:6f:61:ed:be:e4:9f:fb:
ef:ba:e7:2d:3c:70:51:a9:23:34:17:94:d4:cb:ff:
22:f3:94:c8:4a:cb:48:14:f1:04:d2:4c:d0:61:ee:
de:60:b6:27:e5:19:b4:55:cc:b6:18:5b:42:b8:45:
5d:44:dc:e3:0b:39:b0:be:d3:35:7a:0b:94:55:29:
8f:31:33:7e:46:70:88:a9:b6:eb:81:a7:58:2f:df:
bd:4c:9a:15:06:53:aa:c4:1b:e9:39:a6:e2:65:07:
ce:ad:d4:63:62:95:bf:5d:fe:3a:8b:2e:68:28:68:
0a:bd:15:2c:fd:a2:53:94:50:d2:3d:7e:13:23:60:
0c:9d:ad:84:8b:17:7f:47:2d:8f:8a:3a:0e:2d:8e:
83:82:94:0e:fa:83:c1:ba:88:ec:c1:05:33:b1:11:
9d:fd:cb:1c:b0:62:4e:bc:4c:75:aa:1d:f5:ed:b9:
ad:0d:bd:f8:ba:97:78:25:0f:ba:cf:f3:86:8d:24:
1e:27:d3:c9:04:bc:5b:cb:a8:50:cd:c6:41:d5:d9:
f4:10:a9:fe:e8:c5:f3:84:6f:d2:63:fd:bc:80:77:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:AB:3E:F7:34:9C:68:F5:CE:FB:37:F0:AB:C8:F6:BC:77:85:F5
X509v3 Authority Key Identifier:
keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:29:02:d4:98:2c:d4:65:de:ff:da:b2:cd:03:0f:16:41:e5:
f6:27:a5:91:de:65:92:2e:60:e9:c4:56:c8:0f:56:42:46:af:
a8:16:33:f7:8d:09:a5:5b:01:ab:cc:7f:6c:b7:e0:7d:ed:1d:
8e:cd:3d:59:e2:69:89:d7:4a:9c:be:d0:56:71:3e:a4:19:c8:
ee:bb:d5:92:45:ad:3b:0f:24:79:51:e9:1e:98:23:86:51:0a:
4a:3f:2b:e8:fc:ed:80:bf:8f:71:f1:73:d0:a0:56:85:30:0d:
cb:96:1d:b6:a0:18:94:89:a3:5c:2f:11:8c:a4:82:5c:da:09:
e6:fc:1f:c5:9e:83:62:dd:f6:05:18:70:8c:a3:a4:e9:49:0a:
6f:3e:0f:2b:3b:bf:62:6d:94:39:f5:f6:7f:b1:4f:93:88:a4:
94:5b:a0:4c:04:6f:9b:ba:87:64:f6:64:82:3b:db:79:83:6c:
9d:9e:62:7a:07:ff:87:6a:51:50:79:3b:ee:d5:62:0a:02:bd:
a0:dc:6c:1c:01:c6:ef:03:07:ba:f1:2a:5e:15:fa:84:b2:18:
a5:e3:f5:77:32:4a:99:36:f7:b1:fd:dd:53:ad:c8:5e:3a:7a:
8d:0c:e8:82:f6:a1:5c:57:86:ec:46:90:cd:cb:50:85:92:be:
b0:45:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:41 2026 by rpki-client