
$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft
File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json)
Hash identifier: ZHwOS5eUtDTCz8afHJzmZ6alrVmXB2yNgoXplPl/Pco=
Subject key identifier: DF:DA:82:E2:A9:CE:34:03:E4:F4:E8:5C:A0:B3:00:E0:EB:89:71:F6
Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08
Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908
Certificate serial: 7BF8E8BB77FFC18D835BD0AF056A0CF1FC2C9005
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft
Manifest number: D8
Signing time: Fri 06 Mar 2026 02:50:02 +0000
Manifest this update: Fri 06 Mar 2026 02:45:02 +0000
Manifest next update: Mon 09 Mar 2026 14:03:02 +0000
Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: DxrvBG2EwoDi5CWPRxZjQftZXgHK8QtqiBt20+LN2E8=)
2: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: aUYjXTOTgGXtcFmGKKhrHYFS9WslWqItOy8dck9lMeI=)
3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: cPfXuq0p2jW4xPUhE/apIJeWsmib6FpPpP3zgdnQtuQ=)
4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: eLoJQcRR7UviwY1rgXoVkCmTBMM5/WsPMnoDlvo+6Xo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl
rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f8:e8:bb:77:ff:c1:8d:83:5b:d0:af:05:6a:0c:f1:fc:2c:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908
Validity
Not Before: Mar 6 02:45:02 2026 GMT
Not After : Mar 9 14:03:02 2026 GMT
Subject: CN=DFDA82E2A9CE3403E4F4E85CA0B300E0EB8971F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:b2:fa:8d:45:92:47:07:e5:1a:cf:86:a3:
cf:88:c3:b4:30:9a:66:a9:9a:25:e1:75:49:aa:15:
05:49:87:8d:e3:6b:14:d8:57:ec:6a:d7:d1:7c:d1:
62:78:a7:75:8a:64:c5:b1:0b:e8:e5:42:9a:10:78:
5b:9a:70:80:8e:dc:0f:21:34:d7:c9:10:4d:a4:cc:
90:57:d4:4f:f2:74:3f:c4:28:26:fa:a0:28:f2:6f:
1c:8d:ed:8f:e7:bc:dc:8d:83:37:53:62:ba:a2:de:
51:c1:3a:4d:3d:71:64:10:a0:83:c7:84:fc:cc:92:
90:a6:7b:35:9a:03:38:67:e6:89:fc:72:2f:1a:5a:
65:22:e5:8e:e5:5c:34:40:d6:94:8f:2a:d2:24:93:
3c:20:08:2e:1f:c8:48:c8:ff:85:eb:29:a1:6f:92:
47:3f:26:38:df:64:40:45:1c:01:2b:07:30:b8:84:
c2:a2:96:f8:19:cc:6d:a0:b3:1f:48:ce:46:0d:17:
7d:07:47:5f:a8:45:4f:2e:5d:f0:25:90:24:fe:c7:
5a:d5:b7:e8:ed:8d:b6:69:ce:6f:08:39:cb:63:b4:
a0:65:1e:6f:97:15:38:f5:a4:01:82:60:00:aa:1c:
6e:6b:7c:8a:8d:7e:7a:ff:17:ff:45:23:94:ac:7d:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:82:E2:A9:CE:34:03:E4:F4:E8:5C:A0:B3:00:E0:EB:89:71:F6
X509v3 Authority Key Identifier:
keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3c:b3:59:4d:64:ce:dd:17:46:d5:1e:2c:4c:83:c5:00:9d:
b0:6e:e8:45:03:f9:d8:01:54:ab:70:f9:bf:60:92:66:e3:66:
c3:5e:17:54:6c:24:0f:7d:d0:e6:87:31:76:40:59:61:f8:9d:
26:28:5d:66:9e:35:66:85:41:ee:75:92:de:61:cb:2e:01:93:
a4:5a:55:32:73:c1:01:f6:87:b6:fe:ce:8e:54:8f:2a:fc:0d:
79:c3:90:fe:d3:8f:1a:89:34:b8:da:7f:ec:9f:41:ee:14:d2:
f8:a2:fa:3d:12:91:6a:80:2c:14:ab:54:68:7d:5f:8d:59:68:
42:af:b0:9f:49:e8:44:97:98:3d:1a:d1:7a:96:62:dc:fd:41:
e6:14:0b:00:34:7f:f1:87:d9:80:64:1a:6b:e9:20:03:3f:f4:
e7:b0:27:36:b4:fb:56:48:5d:0f:ce:dc:b3:39:b3:93:01:b5:
7f:8a:9f:fe:9f:4b:71:3c:3b:0e:99:55:7d:8c:15:29:41:9e:
b3:18:8f:59:d8:5e:d3:d1:3f:aa:b6:c7:62:60:5a:15:18:80:
e9:cb:90:1f:10:9a:c9:62:c0:bf:5e:79:c8:62:2d:bd:18:78:
0f:37:c4:d0:3b:7d:c4:fe:64:ae:13:46:a2:be:21:44:17:58:
bc:bf:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:05 2026 by rpki-client