
$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json)
Hash identifier: nGPdau52kXu/n6wELuwwpIMqzl2R9TXVrP1zUOxCQ0k=
Subject key identifier: 60:C7:46:1C:36:21:E2:B2:9A:9F:F8:96:10:BE:35:74:F5:B7:44:24
Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Certificate serial: 5899A70E32CE3E4B4D2954EAF629185F4AC259C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
Manifest number: 0112
Signing time: Thu 05 Mar 2026 18:30:05 +0000
Manifest this update: Thu 05 Mar 2026 18:25:05 +0000
Manifest next update: Mon 09 Mar 2026 05:12:05 +0000
Files and hashes: 1: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: 2l5c2kkzzuo1i8RwLaEwo7FNuQzL8Lh1fSOuZNAbiGo=)
2: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=)
3: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=)
4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:99:a7:0e:32:ce:3e:4b:4d:29:54:ea:f6:29:18:5f:4a:c2:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Validity
Not Before: Mar 5 18:25:05 2026 GMT
Not After : Mar 9 05:12:05 2026 GMT
Subject: CN=60C7461C3621E2B29A9FF89610BE3574F5B74424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:b9:c0:4f:ab:4f:9b:ca:72:44:91:d2:ef:
70:98:f5:09:3b:63:15:52:0c:06:73:81:56:58:a6:
8d:a2:16:c5:7c:ae:01:39:83:5b:6d:17:79:bc:56:
6a:5e:71:b2:43:ca:9b:03:19:fd:bf:e9:25:3a:20:
c5:ac:30:78:94:08:ee:04:ab:e2:55:c3:d2:a8:bd:
7e:b4:c6:ac:fe:95:30:22:45:47:5d:b6:00:14:b5:
fa:fa:42:1d:51:4e:24:a1:ce:0e:9e:7d:d7:c0:ca:
b1:19:94:4f:4c:fb:90:b7:41:d9:78:8e:58:b7:b6:
ad:59:ed:a2:b8:ed:b6:14:4e:f0:59:91:62:05:ca:
f0:a7:8f:43:1d:8e:99:41:c3:f9:5f:7d:f2:0a:5b:
3d:8c:b8:74:92:a9:76:6c:1a:e4:ad:6c:a7:45:60:
68:5d:e0:d6:75:24:00:f7:2d:b3:c3:c5:e3:ab:4e:
73:7d:00:4b:0a:f6:8a:6f:2c:57:c2:f4:a0:a6:ad:
d4:64:66:ce:fe:ee:b2:e5:fd:d2:55:87:6b:ad:4e:
29:b9:92:b4:66:0a:73:f2:de:79:98:8f:e2:9a:1d:
2c:e0:84:98:85:fc:29:a1:be:0a:25:8a:d4:cf:82:
2b:65:90:39:13:16:49:12:3f:c5:a9:6a:db:56:fe:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:46:1C:36:21:E2:B2:9A:9F:F8:96:10:BE:35:74:F5:B7:44:24
X509v3 Authority Key Identifier:
keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:7e:cb:16:80:3a:09:4c:0c:41:06:44:77:b0:a7:ff:5e:
ed:e5:8c:d9:41:a9:06:38:bb:e9:75:5b:24:e2:09:22:17:b2:
ce:ce:82:c7:8f:25:8a:54:42:20:bc:c4:e3:81:dd:6b:5c:78:
ae:ab:1c:47:5e:73:ce:a5:07:49:6f:a7:69:b6:e3:2e:ff:0d:
85:29:0d:62:02:f8:b4:e8:83:ef:94:a9:8d:4d:9a:4e:c3:b7:
08:62:1b:ac:35:b5:9f:bc:37:2c:7a:28:f9:03:c8:b3:d4:57:
95:ee:67:be:97:2e:d8:a4:c6:b7:e3:26:b5:fb:e3:2b:73:7f:
e6:4b:4c:cc:fa:c2:99:77:6d:0c:df:dc:68:57:42:28:6c:92:
37:05:8b:fc:35:4b:e3:b0:ab:e0:44:99:00:4d:93:c0:08:60:
63:65:9d:c1:5a:12:82:0f:d6:08:a0:13:7d:8f:f0:23:16:03:
9d:9f:9f:56:32:2d:09:aa:64:62:66:b8:43:43:4e:dc:99:1a:
8e:81:a5:9d:5f:7e:fc:b2:b9:f6:51:e8:20:4f:ba:b4:52:22:
bd:1d:e2:3c:bf:7b:82:fe:02:b4:84:4e:a3:52:c2:f0:9d:73:
30:41:ef:59:d3:12:9f:1a:bc:4b:a7:b9:f6:83:8f:37:66:d8:
d4:60:40:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWJmnDjLOPktNKVTq9ikYX0rCWckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD
MDlDRjY1MjAeFw0yNjAzMDUxODI1MDVaFw0yNjAzMDkwNTEyMDVaMDMxMTAvBgNV
BAMTKDYwQzc0NjFDMzYyMUUyQjI5QTlGRjg5NjEwQkUzNTc0RjVCNzQ0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQbnAT6tPm8pyRJHS73CY9Qk7
YxVSDAZzgVZYpo2iFsV8rgE5g1ttF3m8VmpecbJDypsDGf2/6SU6IMWsMHiUCO4E
q+JVw9KovX60xqz+lTAiRUddtgAUtfr6Qh1RTiShzg6efdfAyrEZlE9M+5C3Qdl4
jli3tq1Z7aK47bYUTvBZkWIFyvCnj0MdjplBw/lfffIKWz2MuHSSqXZsGuStbKdF
YGhd4NZ1JAD3LbPDxeOrTnN9AEsK9opvLFfC9KCmrdRkZs7+7rLl/dJVh2utTim5
krRmCnPy3nmYj+KaHSzghJiF/CmhvgolitTPgitlkDkTFkkSP8WpattW/ke1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYMdGHDYh4rKan/iWEL41dPW3RCQwHwYDVR0j
BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE
RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD
RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx
ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz
M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+IfssWgDoJTAxBBkR3sKf/Xu3ljNlBqQY4
u+l1WyTiCSIXss7OgsePJYpUQiC8xOOB3WtceK6rHEdec86lB0lvp2m24y7/DYUp
DWIC+LTog++UqY1Nmk7DtwhiG6w1tZ+8Nyx6KPkDyLPUV5XuZ76XLtikxrfjJrX7
4ytzf+ZLTMz6wpl3bQzf3GhXQihskjcFi/w1S+Owq+BEmQBNk8AIYGNlncFaEoIP
1gigE32P8CMWA52fn1YyLQmqZGJmuENDTtyZGo6BpZ1ffvyyufZR6CBPurRSIr0d
4jy/e4L+ArSETqNSwvCdczBB71nTEp8avEunufaDjzdm2NRgQEs=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:41 2026 by rpki-client