
$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft
File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json)
Hash identifier: uZl1wCUQW/mcVRGTt/8DGNtNRPh3kG3DYrnv+NKNg64=
Subject key identifier: 5F:30:AA:EC:74:1E:A5:96:62:D3:10:A6:9A:28:48:69:EF:C2:78:BC
Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D
Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D
Certificate serial: 38C3D8DD50523F8FBC658292E1C28DE0680D723B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft
Manifest number: 0519
Signing time: Sun 01 Mar 2026 14:21:15 +0000
Manifest this update: Sun 01 Mar 2026 14:16:15 +0000
Manifest next update: Wed 04 Mar 2026 17:59:15 +0000
Files and hashes: 1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=)
2: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=)
3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: q0pNB4SDd/lSAP3dfWaSQNut1n9iZF/0h3TSQfyOd5A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl
rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 17:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c3:d8:dd:50:52:3f:8f:bc:65:82:92:e1:c2:8d:e0:68:0d:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D
Validity
Not Before: Mar 1 14:16:15 2026 GMT
Not After : Mar 4 17:59:15 2026 GMT
Subject: CN=5F30AAEC741EA59662D310A69A284869EFC278BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:c2:26:9f:fc:04:7e:49:0c:09:05:e4:a5:
1b:03:d9:ef:00:d8:f3:4d:6b:06:6f:67:f5:bf:64:
c6:de:73:0b:c7:be:dd:3b:00:6b:5f:2a:56:84:1f:
77:91:d4:e9:76:6e:0e:8b:b0:52:13:42:81:c2:63:
57:06:de:05:1e:e1:8f:69:95:0c:72:ce:b0:60:39:
ac:bb:9d:10:88:08:58:89:e4:c2:7a:4d:83:c3:2b:
da:9e:25:5a:c6:36:f8:ab:68:eb:5c:d0:f8:ee:af:
8e:01:f2:66:53:17:03:c6:77:7d:4a:c5:e5:dd:fe:
9a:cb:d4:61:22:79:0f:c4:47:db:65:b0:84:ad:85:
e7:6b:e2:35:c4:4a:8d:09:7a:08:3f:77:91:e6:29:
2f:31:e4:9d:c9:ab:38:b5:49:8f:91:b4:9b:41:1b:
ff:a5:2b:f0:a4:55:c8:8e:dd:ca:e0:0a:96:36:99:
dd:5c:34:9c:05:af:28:f0:f4:fa:cc:1f:df:b7:69:
41:6b:20:8e:07:bf:b4:54:b7:4f:c6:c5:ba:35:a4:
ab:55:58:99:29:d9:55:7e:41:64:91:ea:11:17:6d:
c9:c4:9d:a1:2c:e9:d8:71:6e:2a:c9:6f:98:68:cd:
e0:ef:b9:5e:1c:e3:23:b1:aa:4a:20:f5:2c:75:5a:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:AA:EC:74:1E:A5:96:62:D3:10:A6:9A:28:48:69:EF:C2:78:BC
X509v3 Authority Key Identifier:
keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e0:f6:01:64:98:7a:74:70:35:5f:5e:ce:7a:09:07:30:17:
75:17:3a:19:06:1e:3f:f6:7f:c5:24:2b:45:56:71:10:63:f8:
ec:27:f8:bb:de:25:97:d2:91:87:b4:5b:8e:5e:9a:8d:47:2a:
1f:fe:33:1f:13:68:8b:54:48:7d:e0:db:cf:40:7b:97:e5:04:
39:58:59:ea:99:8b:a2:cc:e5:f6:34:79:80:bb:d0:5a:c6:70:
c6:49:07:bc:63:b0:3c:6f:18:7c:a9:e6:1f:a2:cf:e4:0a:7d:
b5:42:4b:c5:72:0b:83:84:0f:26:5f:3e:ea:43:4a:b1:01:c1:
fe:bf:49:5c:f5:18:f1:d8:af:4f:5d:f8:fe:d8:67:d0:de:95:
a4:26:ff:b4:e4:79:e3:0a:21:48:c7:08:4c:ab:ad:4d:90:b3:
c6:4a:5b:3e:9c:23:3d:26:e8:bc:33:0f:62:1a:6d:24:34:cb:
db:d5:58:94:aa:5e:88:56:a7:6e:f7:d9:98:dd:00:b1:46:82:
69:0e:e6:6b:91:de:9a:51:09:92:82:fb:d5:55:bf:4b:aa:44:
4f:9e:1a:70:f4:8a:b4:2a:d3:ed:a3:eb:36:08:dd:2d:65:ed:
0c:08:c6:ff:bb:2e:8c:f6:f8:40:62:0b:ad:bd:76:3f:29:a7:
08:88:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:12 2026 by rpki-client