
$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json)
Hash identifier: Dx3RCORVsFdSfcCPTMlATbY8mMjQTMxTJ7RAuhHTBxI=
Subject key identifier: 63:4F:E0:0F:BF:85:4B:93:31:4A:9A:71:4C:94:DA:5E:A6:ED:8C:A8
Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270
Certificate serial: 641828F567BFEBA2BAE22991398FD49814B72D0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
Manifest number: 0109
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 12:56:10 +0000
Manifest next update: Fri 07 Nov 2025 23:25:10 +0000
Files and hashes: 1: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: LPLpzuwCePFCdgl4dRWeNMpuCufZ7DkTItMbh9rHLd0=)
2: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: thuZAYiRf9cIoV+ku3A0Gac0iLlUZNRvonSPzOtwW4g=)
3: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=)
4: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: mxtXjA73LS1mZhkBSLMdwKqT16ev1fS5k+J/P85pAXY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 23:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:18:28:f5:67:bf:eb:a2:ba:e2:29:91:39:8f:d4:98:14:b7:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270
Validity
Not Before: Nov 4 12:56:10 2025 GMT
Not After : Nov 7 23:25:10 2025 GMT
Subject: CN=634FE00FBF854B93314A9A714C94DA5EA6ED8CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:d7:8f:99:aa:d3:78:e6:a5:01:ee:a0:24:
9d:72:68:a6:1d:5f:a7:0a:b5:2d:93:36:33:3c:56:
de:80:3b:1e:cc:da:ac:2c:9f:43:53:50:4c:b7:b2:
e1:c1:b8:be:f8:e2:49:8c:6f:e4:e1:31:87:70:85:
ed:17:fb:fe:3d:7e:9f:88:eb:2b:56:81:93:d7:f6:
18:18:9c:38:d0:e9:ee:ea:dc:d0:c3:02:64:2c:d9:
8a:26:a7:a2:2b:7c:39:57:8a:f1:7a:80:e2:f9:7d:
c1:f5:20:83:56:25:d8:b7:b8:79:73:19:0f:7e:93:
3d:d8:f4:91:46:84:8e:e0:0a:15:3a:7d:26:8a:0f:
37:c9:29:5c:4a:61:30:11:a2:41:cc:69:80:af:a9:
45:8a:c4:52:f7:67:f0:51:5d:04:1d:db:48:74:3f:
33:e1:01:d5:5b:7e:f2:9c:5f:8b:c5:6b:51:6e:51:
f2:39:72:ac:1e:e4:c1:72:6c:f6:c9:80:0a:1b:50:
f6:20:84:e2:d9:74:fe:27:1f:02:57:b5:f7:e9:ab:
14:dc:ff:43:9b:f9:ff:12:a0:34:cf:78:af:f3:2b:
11:91:1c:80:5e:11:e6:bd:ea:fc:46:bd:f7:45:f1:
c0:a9:91:7c:bc:94:97:e6:55:f8:0a:e0:c7:f0:25:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:E0:0F:BF:85:4B:93:31:4A:9A:71:4C:94:DA:5E:A6:ED:8C:A8
X509v3 Authority Key Identifier:
keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:e6:46:42:d8:64:fa:3c:4c:59:4b:c2:dd:16:d8:46:46:
2f:1b:d7:2b:14:42:31:69:dd:f1:69:a2:9e:0c:69:bc:fa:c1:
e0:00:14:39:c3:f7:c6:3a:96:2c:f3:46:c2:03:13:89:9d:eb:
6a:62:b2:32:8d:5e:db:47:0c:06:5c:11:01:33:cb:b1:9d:9b:
b5:4f:2b:15:cc:66:79:e0:db:4c:74:e6:a6:37:ca:c0:c9:1d:
78:2b:b6:37:c6:c7:64:54:07:7e:19:c5:99:c3:0d:b0:24:93:
91:d9:e9:14:e9:50:96:4b:d7:a7:a1:fe:42:ae:bb:58:59:41:
1f:79:a3:5b:52:cf:c5:a4:52:df:b0:b0:7d:83:c6:64:ab:a9:
bb:16:14:42:c7:6a:b3:a7:f4:f5:c8:e8:07:e6:e5:e9:dc:ad:
08:5a:f5:b3:10:c2:cd:9c:00:3b:1e:13:7a:58:40:0a:f9:fe:
4c:5d:c6:fc:d4:ea:cb:cd:c4:e4:d2:d7:26:25:b4:77:3c:4a:
73:ff:1b:ff:c0:f4:b8:4b:e0:24:b7:24:6b:45:e5:63:7c:ea:
10:26:a8:9a:ea:79:30:31:a2:27:2c:20:8c:b1:d6:72:97:70:
91:19:e0:23:46:59:41:88:13:9b:1c:4c:bc:3b:1c:ea:99:00:
66:ba:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:03:01 2025 by rpki-client