
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json)
Hash identifier: jCwLNyADu3Kr3mn46zLPJ3meNmy4s/LCoHho6yN8ggc=
Subject key identifier: 04:AC:CB:FC:8D:41:D7:A9:1D:9B:28:7E:55:D6:BA:09:1F:2F:A5:B4
Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Certificate serial: 6105A00CA849E67793B8B5A5DB91FD2213C00979
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
Manifest number: 01FD
Signing time: Fri 13 Mar 2026 08:51:52 +0000
Manifest this update: Fri 13 Mar 2026 08:46:52 +0000
Manifest next update: Mon 16 Mar 2026 18:03:52 +0000
Files and hashes: 1: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: kaLQiYLfImF3rgUKSG7LdQ08rLKJyK0zDPM8T3bkhEo=)
2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: S3rj42K3zgcLtAy4zNzKlACfc7OoExWsWn2P6hM2xiU=)
3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: tiiZ5XR5qtoVKRiJyK/ZbstHJPK9DYWkRihRcxcZHeQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl
rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Mar 2026 07:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:05:a0:0c:a8:49:e6:77:93:b8:b5:a5:db:91:fd:22:13:c0:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Validity
Not Before: Mar 13 08:46:52 2026 GMT
Not After : Mar 16 18:03:52 2026 GMT
Subject: CN=04ACCBFC8D41D7A91D9B287E55D6BA091F2FA5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:43:d6:1e:79:48:08:1f:56:6d:7f:86:7e:
cf:2e:e1:0f:90:d1:15:24:26:6e:06:b7:96:19:7a:
39:f1:c1:eb:3e:7f:1e:b8:f4:53:b5:7e:1f:d1:44:
44:fd:29:72:34:e3:ff:3f:ca:24:05:48:f1:3b:1c:
7e:ef:c7:12:66:0d:3e:5a:d3:40:b8:c9:6d:95:71:
74:b7:2f:7c:9a:d7:66:95:0a:0b:35:6a:db:16:6f:
b8:58:4e:29:b2:1a:c4:4c:c7:2e:99:0b:30:b9:c3:
9e:b9:e9:ef:9a:8b:32:09:14:78:66:c6:08:8a:a0:
b4:f8:49:bf:75:37:23:c1:9d:eb:7f:83:da:83:26:
5b:ea:da:67:81:22:6b:da:a5:e0:e3:88:4e:a1:b9:
d2:b2:79:5a:84:e0:48:ae:9d:bd:62:db:2a:04:6e:
cf:29:85:06:c1:b8:5b:7c:e7:e5:98:df:1f:f6:79:
62:44:69:56:61:a0:c3:5d:9a:35:5f:6c:cc:41:47:
3e:41:d4:13:c5:0e:8e:22:76:d0:26:16:53:4d:62:
a1:06:3c:28:5c:69:18:54:6d:3d:03:0b:57:a6:50:
2b:30:ca:9e:cc:3b:8e:8e:bb:3b:4e:83:2b:d1:aa:
c3:3c:cd:94:5a:31:d7:3a:0c:e1:b9:86:92:0d:12:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:CB:FC:8D:41:D7:A9:1D:9B:28:7E:55:D6:BA:09:1F:2F:A5:B4
X509v3 Authority Key Identifier:
keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:2d:de:64:e2:b3:d9:6c:69:67:cb:0d:11:80:02:48:7a:
8b:d5:7a:6b:73:26:bb:85:b9:01:40:27:ac:24:11:77:56:43:
97:1a:b1:4f:a1:ec:46:e2:f2:4f:f7:a5:01:37:12:91:ed:82:
22:cb:1b:0e:36:33:20:f6:1c:65:44:15:4a:74:68:68:fd:e2:
a0:bb:02:5e:f5:b4:9a:da:dd:fe:2d:c6:df:64:1e:87:9f:13:
e0:c5:ee:a0:1a:4c:e8:93:49:4c:39:41:d5:01:31:bd:18:47:
0d:68:bf:30:94:4d:e9:da:70:93:bb:c4:a4:d1:b6:e6:f2:cb:
56:04:04:7d:11:d7:d6:52:2c:86:12:9b:41:fc:ce:23:7d:ea:
87:3b:62:86:d2:dd:5d:60:8a:bf:ae:03:c0:d9:1c:f1:d4:ba:
05:15:a7:77:fe:25:a6:63:ff:73:5f:1d:30:fd:ae:7e:33:5f:
e9:c7:75:d8:1f:90:cc:2c:b9:2f:e7:fc:e0:17:32:4d:6a:31:
59:bf:c8:a4:1c:e4:78:f0:cd:cc:87:f3:0a:2b:92:ac:1f:8a:
f4:fb:2f:b4:a5:d4:a5:f8:e2:e8:ef:7b:88:24:83:40:f0:21:
4c:ec:29:75:8f:3b:c8:bd:48:4d:8d:87:9c:46:77:12:08:a2:
f1:3b:d1:23
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYQWgDKhJ5neTuLWl25H9IhPACXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB
NkMyQTg4ODAeFw0yNjAzMTMwODQ2NTJaFw0yNjAzMTYxODAzNTJaMDMxMTAvBgNV
BAMTKDA0QUNDQkZDOEQ0MUQ3QTkxRDlCMjg3RTU1RDZCQTA5MUYyRkE1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1EPWHnlICB9WbX+Gfs8u4Q+Q
0RUkJm4Gt5YZejnxwes+fx649FO1fh/RRET9KXI04/8/yiQFSPE7HH7vxxJmDT5a
00C4yW2VcXS3L3ya12aVCgs1atsWb7hYTimyGsRMxy6ZCzC5w5656e+aizIJFHhm
xgiKoLT4Sb91NyPBnet/g9qDJlvq2meBImvapeDjiE6hudKyeVqE4Eiunb1i2yoE
bs8phQbBuFt85+WY3x/2eWJEaVZhoMNdmjVfbMxBRz5B1BPFDo4idtAmFlNNYqEG
PChcaRhUbT0DC1emUCswyp7MO46OuztOgyvRqsM8zZRaMdc6DOG5hpINEgITAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBKzL/I1B16kdmyh+Vda6CR8vpbQwHwYDVR0j
BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF
MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy
QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh
NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx
QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH8ELd5k4rPZbGlnyw0RgAJIeovVemtzJruF
uQFAJ6wkEXdWQ5casU+h7Ebi8k/3pQE3EpHtgiLLGw42MyD2HGVEFUp0aGj94qC7
Al71tJra3f4txt9kHoefE+DF7qAaTOiTSUw5QdUBMb0YRw1ovzCUTenacJO7xKTR
tubyy1YEBH0R19ZSLIYSm0H8ziN96oc7YobS3V1gir+uA8DZHPHUugUVp3f+JaZj
/3NfHTD9rn4zX+nHddgfkMwsuS/n/OAXMk1qMVm/yKQc5HjwzcyH8workqwfivT7
L7Sl1KX44ujve4gkg0DwIUzsKXWPO8i9SE2Nh5xGdxIIovE70SM=
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:57 2026 by rpki-client