
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft
File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json)
Hash identifier: hYvsXv9jKNnENEQdFmuWMWihn2WM37wZQT7Pm+aM5Dw=
Subject key identifier: 18:95:D9:24:75:35:9B:88:30:99:B4:F7:6E:DF:AF:ED:66:6D:B9:C0
Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F
Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F
Certificate serial: 4A2EA81FDBD444520591C77010C6324613EC4E04
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft
Manifest number: 0128
Signing time: Fri 06 Mar 2026 04:41:19 +0000
Manifest this update: Fri 06 Mar 2026 04:36:19 +0000
Manifest next update: Mon 09 Mar 2026 07:44:19 +0000
Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=)
2: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: WnK9bCQAfFLVspUaMb402+GGF3A4b0zqeXLVEIaCbYs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl
rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:2e:a8:1f:db:d4:44:52:05:91:c7:70:10:c6:32:46:13:ec:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F
Validity
Not Before: Mar 6 04:36:19 2026 GMT
Not After : Mar 9 07:44:19 2026 GMT
Subject: CN=1895D92475359B883099B4F76EDFAFED666DB9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:dc:15:c2:c7:5c:b8:89:26:a5:09:1c:31:
07:f8:8d:df:38:92:34:0a:ce:08:f5:40:bf:d1:dc:
8e:5d:02:59:b6:3c:80:4f:f6:2b:de:31:1e:fb:52:
dc:3c:00:f3:58:a6:de:32:46:14:92:5c:bd:24:d5:
59:c1:24:34:f8:9a:f8:ba:1c:0e:f0:d5:57:a9:6e:
ca:79:47:ce:3f:29:be:87:c3:09:42:a8:dd:11:31:
87:64:a7:70:67:7f:58:4b:5f:a2:bb:43:53:a9:1c:
48:3b:5b:c1:e2:65:a2:bd:97:f7:6c:41:de:f4:3d:
44:14:1d:a3:07:f4:50:50:a1:a0:d8:a8:84:af:f0:
55:c7:31:67:fc:17:db:20:88:b3:57:77:ae:fc:46:
25:58:30:18:e9:9e:e6:4f:a3:b5:cb:9f:4c:94:27:
95:be:7b:a0:25:46:14:eb:39:37:7e:62:6e:05:b8:
a3:d1:dd:d8:5c:7e:29:49:5c:65:e6:ce:76:15:06:
2b:c5:16:66:2c:f2:4d:2d:1d:48:20:ed:3d:7a:1e:
f6:2b:34:bb:d5:0d:4c:04:0d:86:47:c5:ac:80:8f:
cd:08:c3:33:dd:5a:78:6d:a3:d4:c0:1d:d0:df:ed:
2f:3c:65:26:14:10:1d:0a:2b:db:05:dc:ba:90:9e:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:D9:24:75:35:9B:88:30:99:B4:F7:6E:DF:AF:ED:66:6D:B9:C0
X509v3 Authority Key Identifier:
keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:64:87:28:30:47:31:54:72:77:7e:3e:f2:3e:8b:d2:e4:eb:
1a:0e:d8:2c:6d:1e:2d:03:27:f8:07:40:14:91:06:1c:14:5e:
21:6f:9c:3c:41:cd:38:16:09:e7:0e:36:29:fe:83:a9:8f:a3:
ee:11:bf:5c:ea:e8:eb:f7:ab:60:d8:ca:72:4b:a1:9f:52:c2:
f7:fc:f1:07:e9:b8:11:80:08:06:f0:5c:2d:da:fc:2a:d3:c7:
85:b5:79:7c:81:c0:cf:e7:7e:64:2d:11:07:64:8a:28:63:1b:
b6:e7:dc:d3:f8:4b:6b:ae:6c:32:37:0f:2b:b0:cc:2c:55:14:
33:cc:9c:fa:c6:38:30:cd:92:05:1c:28:36:3e:44:5e:5f:9e:
4b:19:85:3b:af:77:27:01:d7:48:20:e8:a7:31:15:ee:79:8c:
cb:ff:c7:64:55:a4:25:38:d7:8e:21:d3:cf:50:be:37:a9:b9:
cc:6c:bc:c2:11:08:08:81:1a:2b:82:e4:f8:c8:e7:e5:26:f5:
69:35:58:cc:92:ac:d4:c3:ee:50:e8:ff:16:86:5b:62:56:21:
ac:9b:d7:45:01:33:c4:6f:a4:13:c7:40:19:79:4e:66:06:65:
46:bb:2e:92:43:5a:65:b1:42:e8:23:9f:1d:04:bc:16:d0:29:
ca:62:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:58:30 2026 by rpki-client