
$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json)
Hash identifier: 7S5eoKkL/KuYxo9ziXcxJBbbgLOBWHnqafJzl64DGfU=
Subject key identifier: CD:E3:0F:C6:A1:CB:AE:C9:A6:66:76:2C:3A:34:33:7A:E7:D4:5C:5A
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial: 361147153E7099BF5890E70402FA0A8175AC3C8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
Manifest number: 0125
Signing time: Sat 07 Mar 2026 01:31:17 +0000
Manifest this update: Sat 07 Mar 2026 01:26:17 +0000
Manifest next update: Tue 10 Mar 2026 05:57:17 +0000
Files and hashes: 1: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=)
2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=)
3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=)
4: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: N/tyunQCYUubcdrLBXqBHzFH7kpVPgLwFpxP89IBeac=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:11:47:15:3e:70:99:bf:58:90:e7:04:02:fa:0a:81:75:ac:3c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Validity
Not Before: Mar 7 01:26:17 2026 GMT
Not After : Mar 10 05:57:17 2026 GMT
Subject: CN=CDE30FC6A1CBAEC9A666762C3A34337AE7D45C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:a8:fc:35:4a:c5:e3:4a:97:21:0f:74:b2:
42:49:59:9a:6c:da:0b:0d:b1:43:aa:b4:4f:e1:26:
b5:28:bb:26:90:47:88:ad:65:ab:45:6d:bb:7e:e8:
78:bd:1d:42:65:2e:cb:2f:55:6e:6e:f8:e3:ac:c2:
84:6e:31:b6:64:1d:a2:9d:5e:c1:31:59:81:a9:1d:
ed:7a:85:7a:be:81:a7:6e:14:4c:d9:58:df:9d:63:
03:6b:54:ee:b7:b4:bd:92:63:2b:81:8f:85:eb:89:
ed:e5:e3:5b:cf:3e:8c:b1:d0:07:eb:71:32:d2:3b:
29:31:95:e4:b2:43:f3:ab:09:43:e6:cd:81:d9:ca:
85:5a:1e:51:60:00:c6:bc:f5:e9:6c:e9:e8:d8:28:
a2:b0:f4:51:41:aa:0d:7b:17:97:9e:7f:c7:f8:bf:
51:c9:89:b2:df:89:79:06:b0:18:99:3f:ec:16:18:
e1:80:39:75:07:a8:b6:52:43:03:29:42:9e:71:26:
30:7b:78:bf:61:74:90:d6:ed:d9:62:26:a4:6a:7c:
c3:1d:83:b2:f1:89:f2:5d:a6:df:12:81:8e:dc:45:
af:d7:6f:da:2c:62:39:15:b5:4e:d0:b4:85:f3:ac:
03:6f:57:10:6f:80:32:1d:ad:5e:c4:a3:c9:72:68:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E3:0F:C6:A1:CB:AE:C9:A6:66:76:2C:3A:34:33:7A:E7:D4:5C:5A
X509v3 Authority Key Identifier:
keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9b:ff:f2:15:3c:8a:26:b9:8a:6a:4a:f4:1f:2e:de:01:f7:
37:0f:44:a1:5a:ad:c2:30:10:3a:8b:f4:c3:e7:94:87:16:9c:
8f:f5:71:dc:87:f8:3b:c6:30:bc:24:c5:49:1b:74:0a:5f:7f:
d7:3e:20:3a:87:92:21:ee:f8:12:7d:1e:0c:cf:61:40:4b:b2:
c1:b6:b5:26:67:cd:eb:11:5e:57:3b:7b:6f:f8:6f:a5:65:10:
c1:9d:6a:d1:22:0d:07:19:f3:76:52:4a:7d:f2:79:ed:aa:2e:
05:5f:13:3e:40:41:9b:e3:8f:5c:24:23:94:cd:d2:10:92:08:
61:53:12:92:48:6d:d1:f5:5a:e1:84:1a:01:8a:19:c5:83:ea:
67:50:d5:c4:25:4a:18:11:a0:a8:8a:33:7c:e3:29:02:4b:ff:
54:60:68:f1:8e:fc:81:d3:12:78:e9:89:2e:c5:dd:84:5a:f1:
c9:3a:01:f9:af:53:d4:d8:29:4d:56:61:b3:f3:cb:ff:a6:51:
a7:1d:d1:3b:4f:7f:2a:9b:5a:22:4f:21:27:a1:c5:ac:8f:ef:
81:d1:ff:af:ce:cb:e9:72:bc:ac:b8:ce:56:40:0a:ed:b0:3b:
f4:b0:f1:09:d5:4d:21:5b:cf:f5:3a:a3:2c:5f:8e:77:6a:68:
4e:18:d0:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNhFHFT5wmb9YkOcEAvoKgXWsPI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx
MTNGNUREMTAeFw0yNjAzMDcwMTI2MTdaFw0yNjAzMTAwNTU3MTdaMDMxMTAvBgNV
BAMTKENERTMwRkM2QTFDQkFFQzlBNjY2NzYyQzNBMzQzMzdBRTdENDVDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8q6j8NUrF40qXIQ90skJJWZps
2gsNsUOqtE/hJrUouyaQR4itZatFbbt+6Hi9HUJlLssvVW5u+OOswoRuMbZkHaKd
XsExWYGpHe16hXq+gaduFEzZWN+dYwNrVO63tL2SYyuBj4Xrie3l41vPPoyx0Afr
cTLSOykxleSyQ/OrCUPmzYHZyoVaHlFgAMa89els6ejYKKKw9FFBqg17F5eef8f4
v1HJibLfiXkGsBiZP+wWGOGAOXUHqLZSQwMpQp5xJjB7eL9hdJDW7dliJqRqfMMd
g7LxifJdpt8SgY7cRa/Xb9osYjkVtU7QtIXzrANvVxBvgDIdrV7Eo8lyaAV5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzeMPxqHLrsmmZnYsOjQzeufUXFowHwYDVR0j
BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0
RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG
NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll
NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1
QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI6b//IVPIomuYpqSvQfLt4B9zcPRKFarcIw
EDqL9MPnlIcWnI/1cdyH+DvGMLwkxUkbdApff9c+IDqHkiHu+BJ9HgzPYUBLssG2
tSZnzesRXlc7e2/4b6VlEMGdatEiDQcZ83ZSSn3yee2qLgVfEz5AQZvjj1wkI5TN
0hCSCGFTEpJIbdH1WuGEGgGKGcWD6mdQ1cQlShgRoKiKM3zjKQJL/1RgaPGO/IHT
EnjpiS7F3YRa8ck6AfmvU9TYKU1WYbPzy/+mUacd0TtPfyqbWiJPISehxayP74HR
/6/Oy+lyvKy4zlZACu2wO/Sw8QnVTSFbz/U6oyxfjndqaE4Y0DU=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:02 2026 by rpki-client