
$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
File: 03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json)
Hash identifier: Ar7+DWFgxO2AziAoZFFGOWTw3/quDobznmh6OLBcM4w=
Subject key identifier: D7:71:A8:5A:50:53:25:7D:B7:6D:37:5E:78:8D:93:51:2A:84:86:35
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial: 40611B56CC77052BD1461E5F87C2229C7C630FAC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
Manifest number: 0551
Signing time: Sat 28 Feb 2026 11:12:06 +0000
Manifest this update: Sat 28 Feb 2026 11:07:06 +0000
Manifest next update: Tue 03 Mar 2026 17:10:06 +0000
Files and hashes: 1: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: VXoUIpXG5aOrVFbap77MH3FDBLPsO43dIICrs/JUWxo=)
2: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=)
3: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=)
4: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=)
5: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=)
6: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=)
7: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=)
8: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:61:1b:56:cc:77:05:2b:d1:46:1e:5f:87:c2:22:9c:7c:63:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Validity
Not Before: Feb 28 11:07:06 2026 GMT
Not After : Mar 3 17:10:06 2026 GMT
Subject: CN=D771A85A5053257DB76D375E788D93512A848635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:95:52:9f:2c:2a:f4:e1:ce:ac:cb:e2:d3:
41:42:c2:45:2c:c8:22:ac:d6:ba:25:7a:8d:32:7e:
2d:67:c7:5d:78:bf:14:83:2b:10:ad:b3:13:6f:c2:
69:8e:9c:fc:72:e3:d1:04:79:05:79:6c:58:0b:f0:
2f:f9:ac:46:a8:a4:5c:35:80:02:ec:77:b9:6b:ae:
71:25:5a:ea:ac:9e:91:a7:a6:aa:47:9b:ca:f3:f1:
c3:24:b9:e0:4a:b6:cf:24:5f:08:c6:d2:b2:49:0b:
96:88:6e:86:c0:0a:14:6f:68:b0:41:f9:b7:01:58:
6b:1e:49:16:a2:d4:82:4c:ff:29:8a:da:82:31:cb:
e4:8a:6f:93:de:47:b1:6e:33:1c:a1:1b:31:8c:d9:
2f:48:e6:26:01:48:5e:a0:bb:b3:97:1b:06:fc:e6:
e3:61:9b:e7:ef:29:49:82:a7:1a:95:79:e9:34:25:
8d:c6:67:a0:3a:2b:bf:43:0a:07:97:2c:73:cb:d7:
4e:02:e3:46:6c:20:65:df:9a:e0:e4:0f:e6:9f:9f:
a8:9d:ad:dd:49:99:2d:af:e5:ed:9a:b3:0f:17:f9:
80:13:86:ef:06:db:d2:d1:18:51:df:a7:5a:3b:4b:
3e:a3:f3:d1:da:69:bc:ff:e3:c2:68:37:89:94:56:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:A8:5A:50:53:25:7D:B7:6D:37:5E:78:8D:93:51:2A:84:86:35
X509v3 Authority Key Identifier:
keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:1d:48:14:6b:77:3e:24:32:3b:81:cc:0f:d8:62:53:eb:
1c:8a:bd:af:5b:18:d9:55:8a:03:6e:8b:18:46:36:f4:79:39:
f2:ee:fb:ba:0e:7f:56:54:78:c6:fd:8b:51:63:d6:cc:b4:82:
71:c4:1b:35:f7:6f:5d:46:b1:70:15:98:2d:2e:52:17:5d:b7:
2f:5c:4a:f5:8a:6c:15:b7:b3:8d:49:c8:c0:16:87:f9:03:da:
49:89:00:81:6c:43:51:d9:72:7c:05:59:3b:99:37:0f:5e:ef:
6f:3e:2f:ef:ae:a7:5d:07:5e:6b:56:df:3b:6b:2c:ca:be:ab:
4a:9e:8e:29:a1:2d:40:e5:56:4f:e6:74:5f:7f:16:78:cd:99:
f8:f7:15:f5:c7:d2:65:02:4d:e8:b8:5e:91:91:e7:9c:a5:4a:
59:b2:21:0a:65:76:a0:1c:e7:b4:5f:8d:6b:31:5b:3c:fc:5f:
ac:f4:bb:9d:ca:8d:49:fd:d8:fc:9f:b5:5c:4a:42:6e:25:47:
a4:0f:07:36:9e:8f:76:ab:69:a9:fd:07:05:ac:c0:2f:b4:c7:
f9:13:53:ac:f4:67:a6:07:a3:bf:51:87:3b:61:16:42:46:24:
90:ae:8a:86:c7:a9:5e:44:ab:70:ae:22:59:2e:20:95:4a:02:
a6:c6:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:54 2026 by rpki-client