
$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json)
Hash identifier: zJd7dRPwMwEpfMpZqCqgA4MeqFcjgrS2XtrP2Rz8mOs=
Subject key identifier: 37:14:33:6A:BD:A6:FA:54:4F:1D:C5:B9:FE:44:2B:B2:A1:FE:87:A4
Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Certificate serial: 1A2285BDB5C6EF0947B34858987E80E6AB244D0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
Manifest number: 0107
Signing time: Mon 03 Nov 2025 20:00:57 +0000
Manifest this update: Mon 03 Nov 2025 19:55:57 +0000
Manifest next update: Thu 06 Nov 2025 21:50:57 +0000
Files and hashes: 1: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: M0SX+vBa40WoWqrVHk7qnsi+9OoTYdUJpRbnZC9ESb0=)
2: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: oAlC/8lRyr871mKTVqM6yNKikdAb8GvLl7fbM+f5fN4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 21:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:22:85:bd:b5:c6:ef:09:47:b3:48:58:98:7e:80:e6:ab:24:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Validity
Not Before: Nov 3 19:55:57 2025 GMT
Not After : Nov 6 21:50:57 2025 GMT
Subject: CN=3714336ABDA6FA544F1DC5B9FE442BB2A1FE87A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:51:75:5f:f3:29:ef:ca:84:94:8e:87:43:
39:4d:98:a3:b9:ed:e2:0e:f2:c0:51:e1:ca:9a:12:
4d:78:4c:0b:8f:bb:b5:af:bc:c4:aa:a7:b5:49:b3:
72:e0:c0:4b:2c:d7:7d:f6:99:0c:45:80:c9:a1:e2:
3c:ca:08:09:c3:6a:b5:79:5f:b9:cd:a4:74:fe:2a:
0b:f1:14:a3:09:61:91:fb:0d:46:bd:d9:1a:da:6e:
85:27:0d:09:23:ea:6d:28:13:fa:7a:b6:41:1a:2f:
19:40:8f:e9:0c:99:be:81:69:73:fe:c6:ba:60:69:
a1:8b:5a:12:8c:16:8b:e2:ba:e6:35:4a:ae:20:28:
79:65:a0:d3:ad:3f:26:e6:f6:29:01:7c:2e:30:10:
6c:7d:4d:ba:55:0c:32:18:62:72:e7:76:f1:ac:fd:
98:bb:21:0f:c7:64:e1:39:65:15:ec:b9:14:65:e7:
91:46:f0:5f:b1:68:00:4f:50:1a:c5:00:17:45:79:
47:83:e7:ee:17:20:2e:96:9c:42:85:39:ca:ea:94:
2d:c3:73:3c:c6:0d:f8:bc:b6:36:2d:11:10:62:55:
73:25:12:24:e5:c8:c6:68:e9:7e:40:f7:ad:3b:7d:
b0:6f:c8:37:fd:73:e8:ad:b6:5d:61:72:22:4a:f4:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:33:6A:BD:A6:FA:54:4F:1D:C5:B9:FE:44:2B:B2:A1:FE:87:A4
X509v3 Authority Key Identifier:
keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:a8:1a:67:f4:52:ec:04:4c:47:9e:f6:36:3d:0b:6f:4a:
d2:52:cf:36:ba:65:84:0b:c3:d4:72:db:7c:28:b6:3d:b6:80:
4b:f5:0a:55:8f:90:59:26:3b:9d:2c:79:b7:e8:e9:f9:56:f2:
fe:f5:04:ae:f7:7a:e8:d5:89:f0:81:35:e3:15:07:99:c6:c7:
2c:75:e3:fc:80:9a:bc:89:a0:cd:1f:45:4c:c6:3a:45:0a:8a:
96:0d:68:30:50:c0:02:44:4c:12:6e:eb:04:55:cd:f0:40:c9:
4e:03:73:7e:11:80:53:ee:8a:aa:1d:29:3c:87:c8:93:bc:69:
86:84:38:3e:de:b8:2a:c5:2c:a2:f6:ee:ec:b5:25:56:23:2d:
51:3a:6a:42:19:7f:c9:39:ff:4a:09:83:0d:8f:99:15:71:6a:
3c:44:0c:05:60:00:b1:a5:53:e9:25:c6:f2:46:c1:ff:85:ee:
60:55:8e:86:52:61:a2:5a:b7:2e:29:dd:54:4c:c5:f1:a4:07:
98:57:eb:35:5b:32:12:85:82:74:c6:6c:e2:ca:7a:e6:e1:b1:
49:b4:92:09:69:a0:5c:40:e8:e4:06:db:75:80:e0:18:4c:86:
24:3b:79:cf:4f:39:1f:06:74:9d:b6:1a:3e:5a:34:20:21:e0:
72:90:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:27:37 2025 by rpki-client