
$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json)
Hash identifier: 4nsCGUoolnkMinJ8DbzcFAR8iHUDQgskf4y40bO6vlw=
Subject key identifier: 7D:FF:30:B8:6F:31:18:9D:61:88:F3:25:55:FC:EC:76:C0:E3:FB:4F
Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Certificate serial: 1D27314C77694FE4C62ACA22A6CCEA29A1823818
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
Manifest number: 011A
Signing time: Fri 06 Mar 2026 22:22:29 +0000
Manifest this update: Fri 06 Mar 2026 22:17:29 +0000
Manifest next update: Tue 10 Mar 2026 09:49:29 +0000
Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=)
2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: n4gh9ykTYyoB8fA9GelQocpKBDNYFdyjNh1iYTsLD0U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:27:31:4c:77:69:4f:e4:c6:2a:ca:22:a6:cc:ea:29:a1:82:38:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29
Validity
Not Before: Mar 6 22:17:29 2026 GMT
Not After : Mar 10 09:49:29 2026 GMT
Subject: CN=7DFF30B86F31189D6188F32555FCEC76C0E3FB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:15:97:4d:40:d8:7e:3b:62:5c:5c:dd:7c:
a3:81:8f:3e:03:4c:8e:28:90:6f:a0:5c:ed:fd:b0:
f8:dc:70:6d:e9:84:c7:a8:c1:35:fc:03:18:97:d1:
bb:87:d5:50:90:1a:fa:33:0e:3c:90:5a:b6:18:6a:
be:82:35:10:fb:df:8c:a0:1a:21:a0:d7:2f:70:fa:
62:36:8c:63:6e:d6:28:63:70:60:a1:5f:30:7a:e1:
93:26:15:0a:8c:d1:d9:ff:3f:42:0b:ae:06:9e:88:
83:cb:f4:a9:8e:ae:bf:6e:12:08:d0:83:2f:06:95:
81:50:ea:66:84:98:e1:78:65:04:43:35:43:75:c0:
cb:4a:80:c9:1b:05:f9:69:c1:79:c4:ec:55:ed:6f:
97:11:69:4a:d5:4d:b4:83:d3:db:51:d7:5d:33:6c:
39:c8:8f:47:d5:2a:29:50:ce:3f:13:6d:68:43:f5:
cf:c5:22:06:8d:23:c5:d5:7b:bc:f4:2b:08:0a:76:
43:b7:1f:7e:13:19:93:73:07:dd:6b:82:81:38:0d:
b4:08:95:03:88:da:36:53:39:85:db:9e:80:7a:35:
07:91:98:9e:3a:a5:19:da:77:cb:84:06:af:cb:a8:
08:30:f8:34:bb:3b:1c:a7:27:e5:68:7b:5e:27:65:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:30:B8:6F:31:18:9D:61:88:F3:25:55:FC:EC:76:C0:E3:FB:4F
X509v3 Authority Key Identifier:
keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5f:cc:48:03:cf:64:4e:a9:66:38:a7:51:6e:ed:6c:4e:ab:
5b:2f:ae:61:e5:5c:15:73:72:9b:de:33:55:44:39:9c:4b:7d:
8b:fb:ef:4c:d8:07:d4:b6:b5:b1:4d:77:23:e9:20:08:05:b4:
ce:00:1f:6f:6a:8a:ab:8d:f4:a2:b1:50:78:83:a1:f1:0b:fd:
fa:db:02:7f:80:f8:03:04:d5:3d:76:a6:23:60:66:a1:40:90:
c8:06:ee:9c:2f:a8:3f:93:8f:e4:bb:3c:9f:2c:fe:90:b6:3a:
61:68:9a:ba:e7:eb:fb:d3:c8:b4:f9:01:6c:e6:91:6f:0d:ce:
e3:b5:30:de:01:dc:4c:5b:3f:60:06:a9:47:53:b9:82:a8:2b:
15:4d:6f:30:a7:15:01:5f:e3:3c:e9:1a:51:58:c2:fc:79:09:
c3:a9:99:c3:90:44:fa:3e:95:56:09:1e:63:94:3a:0d:00:1e:
3f:93:f4:44:a5:2e:5b:c0:45:e7:5b:3b:18:2b:42:35:02:d8:
f4:11:e0:76:b7:12:60:9a:97:d4:38:c4:94:64:7e:aa:f9:17:
eb:7d:0b:4c:df:ee:a5:5a:37:a6:d9:1a:d2:6a:5f:77:ea:4d:
3d:1c:ac:86:25:d5:fa:8c:2d:d4:7c:0c:83:21:26:9d:b7:b7:
ad:33:72:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHScxTHdpT+TGKsoipszqKaGCOBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw
ODI0NEYyOTAeFw0yNjAzMDYyMjE3MjlaFw0yNjAzMTAwOTQ5MjlaMDMxMTAvBgNV
BAMTKDdERkYzMEI4NkYzMTE4OUQ2MTg4RjMyNTU1RkNFQzc2QzBFM0ZCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoRWXTUDYfjtiXFzdfKOBjz4D
TI4okG+gXO39sPjccG3phMeowTX8AxiX0buH1VCQGvozDjyQWrYYar6CNRD734yg
GiGg1y9w+mI2jGNu1ihjcGChXzB64ZMmFQqM0dn/P0ILrgaeiIPL9KmOrr9uEgjQ
gy8GlYFQ6maEmOF4ZQRDNUN1wMtKgMkbBflpwXnE7FXtb5cRaUrVTbSD09tR110z
bDnIj0fVKilQzj8TbWhD9c/FIgaNI8XVe7z0KwgKdkO3H34TGZNzB91rgoE4DbQI
lQOI2jZTOYXbnoB6NQeRmJ46pRnad8uEBq/LqAgw+DS7OxynJ+Voe14nZbL7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUff8wuG8xGJ1hiPMlVfzsdsDj+08wHwYDVR0j
BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4
NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0
NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky
NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB
REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAApfzEgDz2ROqWY4p1Fu7WxOq1svrmHlXBVz
cpveM1VEOZxLfYv770zYB9S2tbFNdyPpIAgFtM4AH29qiquN9KKxUHiDofEL/frb
An+A+AME1T12piNgZqFAkMgG7pwvqD+Tj+S7PJ8s/pC2OmFomrrn6/vTyLT5AWzm
kW8NzuO1MN4B3ExbP2AGqUdTuYKoKxVNbzCnFQFf4zzpGlFYwvx5CcOpmcOQRPo+
lVYJHmOUOg0AHj+T9ESlLlvARedbOxgrQjUC2PQR4Ha3EmCal9Q4xJRkfqr5F+t9
C0zf7qVaN6bZGtJqX3fqTT0crIYl1fqMLdR8DIMhJp23t60zcqw=
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:35:53 2026 by rpki-client