
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json)
Hash identifier: fOBIAjLchydjwokO9+f/zPM3CQWldm4KefFLIpgGdhg=
Subject key identifier: 9E:42:AD:29:C6:CB:47:69:9E:33:6E:07:F8:24:D5:39:E2:01:EC:1D
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 2F6A655D0C526D3857E57938F68588E1E867821D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
Manifest number: 0247
Signing time: Sat 07 Mar 2026 02:22:43 +0000
Manifest this update: Sat 07 Mar 2026 02:17:43 +0000
Manifest next update: Tue 10 Mar 2026 07:09:43 +0000
Files and hashes: 1: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: JAtQjJ3YCm54Wqrk0SfLNN1C1qJzEZ2A0xctto69Mp8=)
2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=)
3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=)
4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6a:65:5d:0c:52:6d:38:57:e5:79:38:f6:85:88:e1:e8:67:82:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Mar 7 02:17:43 2026 GMT
Not After : Mar 10 07:09:43 2026 GMT
Subject: CN=9E42AD29C6CB47699E336E07F824D539E201EC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:ff:2d:f0:4c:96:95:7a:5e:fe:97:48:aa:
bd:d9:fb:be:64:5a:a7:81:ed:21:26:cb:d3:2d:ce:
fd:eb:30:9b:6d:6a:74:9c:6e:90:e4:e2:01:92:9b:
d5:a0:63:ac:77:96:2e:40:dd:c6:4e:71:a4:10:f2:
80:ee:b2:72:c8:e2:cb:7b:2b:2b:b7:15:a7:7a:33:
5d:19:f4:66:08:10:6a:7c:00:ca:9f:5e:68:7c:eb:
ca:72:02:8a:b9:ec:af:f2:71:f5:a1:f4:e2:0a:a0:
14:da:5c:41:f8:4f:e5:8b:b6:22:a1:70:8e:24:f0:
f7:98:ec:20:dc:27:fd:48:4a:ed:2f:39:cd:de:e0:
76:1f:49:b0:52:91:8d:86:fb:15:b2:f0:81:a2:ab:
f6:50:42:cf:15:11:d3:7b:bf:30:92:1f:20:e5:0d:
fa:8a:7d:d1:1e:3d:bf:82:48:bc:87:85:ab:13:c4:
eb:78:3d:ce:3e:fc:c4:54:15:7d:ff:4e:13:d2:a5:
cf:ce:9e:08:36:2c:3c:ad:a0:49:d0:37:8d:87:55:
8f:11:4b:49:f7:1a:0b:be:d0:7c:bb:fa:63:7f:a9:
12:c8:78:80:87:ae:b9:83:3d:4f:c0:3c:e0:57:da:
15:d2:3b:9c:f1:c9:3c:06:5e:0a:d3:48:f3:b5:dd:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:AD:29:C6:CB:47:69:9E:33:6E:07:F8:24:D5:39:E2:01:EC:1D
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:86:c8:b9:4d:a2:01:b7:23:4b:71:9d:0c:d2:7e:41:cb:8e:
6f:c3:b3:96:83:76:1a:47:c3:5e:9e:23:0e:d9:9f:6d:57:65:
64:6f:7d:7c:fc:59:1a:6c:9a:20:aa:31:5b:ca:e3:71:3a:a4:
50:24:c2:9d:4f:a7:54:c1:0a:5b:2a:d5:5d:c9:76:df:64:72:
c2:24:70:5e:9d:3b:66:4d:05:1e:a5:59:90:c0:45:a2:78:bd:
c4:ba:7f:91:60:b4:91:83:50:01:b9:79:13:ab:ad:ef:44:1e:
67:f9:10:fa:32:91:72:5b:7c:f5:71:65:2a:13:f8:36:f3:7f:
81:01:1d:91:a3:8c:e8:cc:b8:3f:fd:f1:b5:ba:b2:0b:89:aa:
85:e5:34:69:33:17:66:05:85:4b:29:12:40:09:04:e1:c0:6b:
74:f1:8d:4b:58:ce:ae:76:5f:37:47:ea:bd:59:49:30:c6:3e:
5d:22:9b:ec:44:e1:01:57:c9:72:fd:51:7a:bc:fd:96:7e:b3:
2b:32:21:ab:2e:d4:ad:f6:8d:3a:04:ff:a0:ad:76:e1:1f:15:
6b:a3:ae:83:d6:e8:c4:dc:06:1a:ea:fc:55:c0:0f:71:73:bb:
6a:64:a6:ad:dc:b9:d7:76:15:71:bb:29:cd:53:e5:34:98:37:
bc:f1:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:10:28 2026 by rpki-client