
$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier: 01fApJtZv31qIvxILtFSacmMKXYauNOtI0JrWuRoEiQ=
Subject key identifier: 31:04:08:81:0F:85:7A:FB:52:B7:90:3A:E2:AB:BA:11:3B:FB:01:60
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial: 43D68DD129FD943C385137945C818984757963
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number: 02FF
Signing time: Sun 01 Mar 2026 16:30:00 +0000
Manifest this update: Sun 01 Mar 2026 16:25:00 +0000
Manifest next update: Wed 04 Mar 2026 23:54:00 +0000
Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE=)
2: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: WNwZ+cfi1T9FuTardnidQqiArjuSn1SGW1jmOUoUEfo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d6:8d:d1:29:fd:94:3c:38:51:37:94:5c:81:89:84:75:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
Validity
Not Before: Mar 1 16:25:00 2026 GMT
Not After : Mar 4 23:54:00 2026 GMT
Subject: CN=310408810F857AFB52B7903AE2ABBA113BFB0160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:3e:af:55:98:78:a8:bb:2c:01:07:c7:29:
fe:5a:d5:81:de:be:fd:fc:c4:86:90:9f:07:c5:17:
8f:51:0e:db:d1:7e:e0:98:9d:e0:79:69:21:0a:6b:
c7:aa:79:3d:ea:36:b4:ff:02:14:14:9a:24:30:2c:
f1:76:0e:a9:95:eb:7b:6a:66:1b:21:89:fb:49:2f:
ea:54:e3:10:56:67:b4:62:33:ba:cf:7c:f8:60:28:
32:1f:85:a1:88:94:69:8f:51:5a:34:56:da:9a:59:
c8:cf:47:6c:4a:79:c0:76:57:73:54:0b:16:cc:ff:
96:31:67:3c:5d:a8:34:0e:f9:e9:25:d9:1a:57:eb:
42:02:96:5e:5f:f0:e8:fc:c7:07:a1:82:1a:6d:92:
22:32:41:03:6b:f8:1b:b8:24:ba:1b:5a:4a:bd:f3:
f2:76:8c:93:92:9b:47:b8:c5:c8:54:52:04:94:cb:
67:df:27:bb:7a:12:12:bb:6a:7d:1c:67:2b:e7:d6:
e4:4e:d7:66:63:b9:04:57:7e:54:e2:2f:f7:a9:88:
14:cd:96:da:78:f0:ed:76:11:b3:e9:c5:78:c2:e4:
72:c1:8d:a2:63:23:4d:1c:8a:39:3e:63:90:bf:66:
c8:c2:b2:e4:37:7c:ff:49:4b:dd:9a:2a:73:3a:f4:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:08:81:0F:85:7A:FB:52:B7:90:3A:E2:AB:BA:11:3B:FB:01:60
X509v3 Authority Key Identifier:
keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:d7:ba:7d:17:37:43:51:8c:34:ec:86:72:74:bf:ff:53:
46:52:6c:bf:1b:81:cd:97:d1:b6:ab:c2:69:5b:1e:d3:26:ae:
7c:9e:1a:e2:62:30:82:1e:a0:0c:47:e3:ce:b2:fd:ee:ab:94:
5e:10:91:77:0b:f1:39:96:8b:77:a9:41:ba:a7:12:c2:b2:c3:
bb:af:47:41:eb:b8:30:c7:7f:a9:24:02:60:0e:13:43:77:3e:
e0:9d:c0:fa:ec:16:37:7d:d1:fd:e7:47:9b:43:18:34:01:e9:
b6:a0:d2:81:96:c8:90:11:7f:96:d5:53:e7:fb:98:f7:e1:78:
00:85:d2:f0:f7:aa:be:cd:5b:67:25:08:13:14:82:cd:32:d0:
d2:84:be:43:59:7f:fd:52:31:d4:8e:58:b0:b4:51:c0:f0:35:
ce:f9:3f:16:ec:8b:2c:78:db:d6:48:dd:0d:36:99:cd:67:07:
6f:70:32:f1:de:71:6a:f3:b2:61:b9:52:ce:37:1a:ab:09:92:
05:50:45:21:ef:73:de:bc:54:42:85:dc:f0:0a:ad:ea:20:62:
f9:2e:49:61:ab:40:83:8d:78:63:8c:53:bb:30:65:e6:03:9f:
c4:e0:f3:36:c1:ca:34:dc:c2:84:5c:83:62:37:30:6c:61:37:
86:6c:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:50 2026 by rpki-client