
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json)
Hash identifier: cfO3tf9TvB6yY6uWM41JLTbwy/dw4OU6RrlcobVkf7E=
Subject key identifier: 82:2B:AE:81:D7:A2:21:00:FA:C4:1A:D6:FE:9B:A8:2B:C4:BE:67:A5
Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Certificate serial: 7518C5C7D2EDF60010B7AFDC46AAAB29E5F30FD8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
Manifest number: F9
Signing time: Fri 06 Mar 2026 10:52:32 +0000
Manifest this update: Fri 06 Mar 2026 10:47:32 +0000
Manifest next update: Mon 09 Mar 2026 14:25:32 +0000
Files and hashes: 1: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=)
2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=)
3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: rVsfdabfxAv33RJXPni0MD3w07MWRZ62FITggVomW8o=)
4: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl
rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:18:c5:c7:d2:ed:f6:00:10:b7:af:dc:46:aa:ab:29:e5:f3:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA
Validity
Not Before: Mar 6 10:47:32 2026 GMT
Not After : Mar 9 14:25:32 2026 GMT
Subject: CN=822BAE81D7A22100FAC41AD6FE9BA82BC4BE67A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:da:42:0a:56:91:fc:fb:54:01:db:a0:4b:
d0:98:de:c5:21:e3:61:42:d8:a1:24:5f:52:ed:1f:
bd:1c:6f:7f:52:c4:f9:68:84:41:34:9d:d9:16:9b:
fe:d7:ba:ff:60:21:5b:88:73:0b:0a:cb:11:ad:db:
1c:46:36:b3:90:77:f6:8c:c9:a7:c2:3f:68:c9:74:
0a:02:d8:cc:c2:07:8c:ef:92:06:78:1c:ae:20:74:
7e:c6:86:fd:6a:14:59:8c:39:1c:47:b2:f5:39:07:
f0:f0:b9:bb:6d:15:16:29:8f:51:4a:c0:46:82:b3:
62:82:9d:31:cd:45:d0:61:e5:b5:ba:77:8b:64:df:
1a:f8:bc:a0:ce:96:7b:4f:d7:9b:15:71:1d:cd:c6:
63:69:d3:86:79:83:cf:59:e7:86:af:9e:aa:d8:2a:
fa:a6:c3:c5:41:28:ca:45:74:a8:ad:f9:0b:02:9e:
74:ff:b6:b5:34:7e:9b:ab:69:c9:32:d3:49:d4:50:
6d:ab:25:f7:7f:4e:63:ee:61:07:04:24:be:0e:a7:
6a:66:c2:a4:2a:1b:30:22:ec:45:41:75:79:01:5c:
88:44:97:e2:92:4c:bc:5a:92:18:bc:50:e7:5e:c2:
e1:b1:1f:d6:63:23:db:6e:33:38:65:61:7e:82:8f:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:AE:81:D7:A2:21:00:FA:C4:1A:D6:FE:9B:A8:2B:C4:BE:67:A5
X509v3 Authority Key Identifier:
keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:c9:d0:b8:f7:55:1e:91:a5:7a:bd:c8:9a:ae:5d:78:ef:
d4:f4:3d:35:b2:bb:da:b8:7b:97:dc:ce:99:11:8e:7b:8d:28:
b3:85:9c:58:d7:e6:2d:0c:77:7b:8f:6d:3c:1d:7f:31:a0:56:
65:d1:02:5a:fe:ee:7c:9d:97:32:b1:bc:a3:3a:95:fe:c1:2a:
d7:26:44:8e:71:0e:40:54:6f:10:8c:15:df:f7:56:70:23:dc:
de:34:cb:25:61:a7:e9:91:16:af:08:46:28:c3:0e:2d:5c:cb:
6f:fe:18:ab:7b:5c:5e:82:43:5d:5a:74:57:8a:d5:d5:51:46:
57:b7:ab:6f:a1:a9:6e:8c:7d:1d:39:58:d9:41:74:7a:47:65:
87:5d:5d:66:26:af:11:59:b2:12:7f:12:6a:d8:54:17:96:a9:
1e:26:a3:a8:d8:0d:c0:f5:42:a8:04:7c:52:14:48:ed:ad:cc:
07:75:35:47:3c:a0:0b:b5:97:71:3e:a7:a4:b4:51:f0:27:d8:
60:1f:df:d2:4b:c9:1f:fc:fc:53:5c:64:88:87:e8:c6:db:39:
c1:af:98:26:79:b7:e1:45:b6:32:9d:bf:f1:6f:41:da:6f:78:
ec:59:e5:e2:3b:83:ed:dc:59:90:f6:c6:1a:ec:ae:cd:6b:18:
a6:4b:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:06 2026 by rpki-client