
$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json)
Hash identifier: Rv1Kh31a5+KVK4GLZZcZnHkp80vGxZh25UTn5j59kRo=
Subject key identifier: EF:50:E1:1A:0E:8E:F7:A3:88:24:B3:70:94:35:1E:38:8B:83:40:7C
Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4
Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4
Certificate serial: 15A392FD1272D0FA262F0CFB54F24852A4618380
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
Manifest number: 0559
Signing time: Mon 02 Mar 2026 07:52:36 +0000
Manifest this update: Mon 02 Mar 2026 07:47:36 +0000
Manifest next update: Thu 05 Mar 2026 16:45:36 +0000
Files and hashes: 1: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=)
2: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: McsQhbBf38+Ntvo/rs9a9EnSu5sEF3SqXR6pRYPgBvQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl
rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a3:92:fd:12:72:d0:fa:26:2f:0c:fb:54:f2:48:52:a4:61:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4
Validity
Not Before: Mar 2 07:47:36 2026 GMT
Not After : Mar 5 16:45:36 2026 GMT
Subject: CN=EF50E11A0E8EF7A38824B37094351E388B83407C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:7f:f0:e4:17:7b:83:87:99:0b:c2:fe:cf:
d0:8d:e9:a2:44:cd:36:13:3a:45:8a:24:98:94:65:
12:a7:cd:e9:e4:22:5b:a1:d6:27:5d:74:38:c0:8c:
fe:50:9a:45:3b:e3:3e:ee:e0:6b:6b:46:77:09:af:
2b:72:84:75:07:d9:70:88:a4:62:89:08:c6:a2:90:
3b:eb:67:1f:3a:16:20:01:8e:e7:60:b9:4d:06:da:
7c:bb:36:e6:f5:53:a0:78:0e:31:82:33:ef:ee:ce:
7e:87:27:d9:f4:c7:cb:cb:fa:be:f3:af:f3:d9:f0:
78:dc:62:c3:34:60:4d:a7:d0:4b:d4:cc:41:9f:b4:
ec:e8:62:89:bb:c8:b9:48:73:66:1a:23:c3:cb:4f:
43:84:ab:bc:9f:84:81:aa:43:ed:c6:93:f4:4a:38:
a8:48:d6:c3:71:19:72:18:a7:ca:94:d7:42:70:ee:
d5:32:aa:75:ed:6a:99:53:2a:93:ff:91:3b:84:d4:
4a:57:2b:9d:fc:e9:51:ee:bd:ab:48:31:26:6d:7f:
19:11:fb:8d:be:60:17:a4:f0:69:fc:72:a1:bf:ef:
12:89:d4:2e:94:b2:cc:19:74:12:f5:7f:9f:6f:79:
ef:96:ad:df:e0:ab:44:32:87:fc:d2:47:02:25:09:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:E1:1A:0E:8E:F7:A3:88:24:B3:70:94:35:1E:38:8B:83:40:7C
X509v3 Authority Key Identifier:
keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:6e:7f:a5:cc:03:fe:76:6c:bb:f1:aa:c6:1a:74:a7:d2:
ae:24:67:d6:0c:04:eb:b3:3c:42:ec:e5:1f:fc:23:1d:e0:a6:
61:2b:56:f5:e7:8a:5e:01:dc:34:4f:7c:94:ce:32:08:70:93:
77:75:33:1f:10:d5:de:c1:c2:dc:12:e1:ff:07:46:d7:d2:29:
1a:c2:fc:49:ce:f2:00:22:8c:84:e9:6b:cf:f1:32:09:46:68:
46:5e:0d:b6:bf:1b:b0:2c:98:3f:45:5f:34:13:ae:ea:5a:07:
1b:1b:f8:1a:9b:f3:e4:2e:5c:95:be:ef:99:7e:53:7a:a6:c5:
e7:3b:8f:3b:0d:83:93:41:69:4d:5a:c5:a2:2f:0f:56:61:27:
a4:0b:df:ae:87:d7:11:55:a8:c6:6b:aa:7f:fe:cf:37:13:ca:
cd:cd:5b:6d:40:42:49:35:5b:0b:2d:51:1c:dc:ce:0f:6e:bc:
fd:6b:ce:38:28:b1:08:8c:b8:ca:2a:c0:d2:4f:f4:8a:b8:50:
d0:a1:a9:5a:e0:a1:01:bd:0f:d9:89:44:33:f7:0a:3e:92:23:
f6:f0:c3:3d:8f:5e:de:46:b9:8e:72:41:46:d0:07:73:57:4b:
82:e5:ad:e1:13:78:7a:10:4a:b6:9d:12:2f:fe:95:d3:9e:a1:
c0:31:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:47 2026 by rpki-client