
$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json)
Hash identifier: MlflRRAl4FTDbk+0FAnEPl1sRKHjrL0M7yitaFfUyYE=
Subject key identifier: F3:6A:A4:58:76:B7:7B:C6:E1:75:4D:4B:FE:82:59:F2:F1:B2:38:55
Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62
Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962
Certificate serial: 71F79CA980263DB4B74209E28C062C1FDB5D38B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
Manifest number: 0116
Signing time: Fri 06 Mar 2026 22:51:45 +0000
Manifest this update: Fri 06 Mar 2026 22:46:45 +0000
Manifest next update: Tue 10 Mar 2026 03:08:45 +0000
Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: eEIPy49zB/tKM13fvcGytzatwWf9OUusP5ZWgenhQH4=)
2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl
rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f7:9c:a9:80:26:3d:b4:b7:42:09:e2:8c:06:2c:1f:db:5d:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962
Validity
Not Before: Mar 6 22:46:45 2026 GMT
Not After : Mar 10 03:08:45 2026 GMT
Subject: CN=F36AA45876B77BC6E1754D4BFE8259F2F1B23855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:ee:93:56:b7:46:80:72:2e:67:b8:64:bc:
c6:1a:cf:fd:70:ad:3e:e0:a9:47:c9:f8:05:1b:3d:
f2:6b:23:a4:4e:33:99:84:60:7c:d7:72:fc:01:b4:
94:07:5b:31:47:29:73:bb:db:f2:fa:de:61:69:cc:
c5:5f:54:c5:25:a5:2c:5c:01:76:2e:16:1a:d6:b6:
0c:ff:0d:7f:53:19:d2:9f:77:7b:10:35:ad:91:06:
8a:cf:e3:26:a9:88:b7:d9:f0:98:ea:15:3a:68:eb:
b6:d7:8a:d4:d6:ae:ef:4b:ad:77:c2:c0:d9:77:cb:
a3:ab:c5:50:94:0c:ee:90:98:4d:19:9a:f5:08:af:
ea:5e:49:1a:eb:08:22:d0:a5:a9:2e:7d:a0:0d:83:
68:7e:9c:c7:23:39:49:af:1d:24:e4:15:2b:21:27:
f2:4e:b8:b7:56:7d:b4:b2:76:c3:a7:c0:e1:1d:32:
b1:69:59:14:e8:6b:65:11:06:ff:ba:a9:25:b5:50:
08:25:ed:fa:cf:54:11:60:d6:ea:fb:c9:6c:ba:1d:
57:68:ff:7f:df:51:45:1b:79:1f:98:d5:14:d9:9a:
31:b2:78:c3:ac:9b:15:89:3d:44:74:b5:43:d9:b8:
42:55:e1:4b:5e:93:6d:13:6a:f3:18:f2:a0:19:77:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:A4:58:76:B7:7B:C6:E1:75:4D:4B:FE:82:59:F2:F1:B2:38:55
X509v3 Authority Key Identifier:
keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:81:da:73:f4:e3:d4:bb:b1:aa:71:32:d2:6b:46:49:b1:
07:5a:ae:5f:b2:15:dc:ab:7f:4c:2b:a5:96:66:bc:33:99:4f:
af:65:e9:c1:dd:a8:f0:83:29:77:98:f2:64:7d:16:7f:34:c4:
17:01:ae:61:1e:ae:ab:fb:8a:ca:9c:8a:6f:1d:b0:90:81:5c:
9b:eb:a9:2a:3b:c2:a8:bb:5f:8e:f9:04:78:d9:a4:0b:db:7c:
54:ea:39:8f:c8:96:04:22:f7:99:e4:8b:9e:9d:0e:80:49:3f:
ae:ca:16:e7:5b:f6:17:53:ec:0b:22:a1:b8:5d:29:6c:c6:87:
a4:82:35:0b:43:26:d4:9c:3b:72:ca:e4:ee:e1:95:d7:7b:35:
bd:33:e9:86:81:64:ca:ff:80:e1:e6:20:31:19:63:ef:f8:ae:
98:e5:7f:a2:fa:1c:0e:9c:af:70:a0:b6:0d:d7:dc:f9:28:a3:
c6:0d:e0:2d:2a:e9:94:8b:61:bf:22:ce:24:17:32:b1:24:06:
08:bb:c8:30:39:18:49:cc:5f:4a:00:b6:68:31:41:8a:79:5c:
0c:36:02:a2:e2:3e:1c:99:d8:8f:c0:2f:96:61:f4:0c:0a:ee:
5f:bb:24:cb:bb:32:a6:bf:0b:82:be:7c:9d:54:ec:ac:45:c6:
c9:be:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:02 2026 by rpki-client