
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json)
Hash identifier: A1jsXcwPoxI9FxSCXomlJjjiNR+Y3YE10JsEywdSlDk=
Subject key identifier: 83:00:B8:D4:26:D0:A5:FD:A0:45:C1:EE:BC:BF:BD:94:3C:D8:6A:59
Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51
Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951
Certificate serial: 30BB712C6CB281881016E60E39134DAAAE58E15A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
Manifest number: 052D
Signing time: Thu 16 Apr 2026 12:01:57 +0000
Manifest this update: Thu 16 Apr 2026 11:56:57 +0000
Manifest next update: Sun 19 Apr 2026 13:18:57 +0000
Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=)
2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=)
3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: lq6b517gZeO/6IMZR456Ep96+ck9QXw9l5vpiD4zsTI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl
rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bb:71:2c:6c:b2:81:88:10:16:e6:0e:39:13:4d:aa:ae:58:e1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951
Validity
Not Before: Apr 16 11:56:57 2026 GMT
Not After : Apr 19 13:18:57 2026 GMT
Subject: CN=8300B8D426D0A5FDA045C1EEBCBFBD943CD86A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:94:01:de:5b:0b:39:93:ae:b5:97:f3:2d:
83:07:b4:bc:2a:d4:0c:c0:2d:25:11:c4:d0:ad:61:
21:b7:08:7a:42:aa:96:1a:f0:1f:44:80:69:cc:91:
8d:e9:48:78:23:87:58:38:2d:80:1a:b7:a5:c6:a2:
b7:d5:53:16:f4:17:04:67:fd:c0:9b:5a:72:b7:af:
b3:56:63:b6:42:e0:cd:5d:45:fb:4e:2d:5b:70:35:
1b:0e:5b:bd:da:72:de:53:0e:7b:64:1d:e7:79:85:
1e:06:43:85:4c:c1:30:b2:6d:ae:7a:7c:6f:83:80:
74:78:51:e8:04:49:c3:74:8d:1e:d0:82:fa:d7:94:
d5:29:89:f4:99:e3:7b:7e:89:56:1c:55:29:e7:3c:
2e:03:cd:a6:5b:22:61:84:a7:81:3d:1e:d6:58:f9:
5f:eb:d9:99:b7:4d:0c:cc:6b:c0:5a:c9:99:8f:39:
39:6e:e9:19:7d:eb:ba:4a:c4:c4:3b:1f:e0:f6:f0:
c6:a9:03:c3:c7:50:dd:51:de:b8:df:86:a9:ad:43:
12:b0:12:bd:af:d7:44:65:6a:87:ff:d8:00:c6:21:
73:9b:cc:88:6f:a8:98:87:cc:7b:0f:ad:06:73:fc:
77:7a:f3:7e:16:e8:25:b4:bf:a8:f0:37:fe:5b:75:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:B8:D4:26:D0:A5:FD:A0:45:C1:EE:BC:BF:BD:94:3C:D8:6A:59
X509v3 Authority Key Identifier:
keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:75:02:35:5c:2b:e8:b2:46:e1:2d:2c:79:47:a4:89:6e:a5:
35:06:bb:16:2a:4d:18:33:24:de:cd:dd:a4:ca:2a:48:40:27:
6b:c1:82:bf:cd:3f:de:d9:0e:97:27:c2:19:90:00:fe:50:ed:
7a:f7:76:ff:36:95:42:58:77:1c:b4:23:3a:02:80:8c:c6:cc:
5a:7b:20:fa:20:4a:08:65:b8:71:a6:b0:8b:f7:96:6b:87:3e:
d3:b6:df:23:05:c6:a7:29:da:62:a7:8a:28:79:0c:6d:05:32:
93:09:a1:46:d0:d7:cc:cc:6a:8d:2f:73:72:33:2a:24:da:3d:
e8:ab:a3:a9:8e:c2:24:e2:5b:83:45:4d:66:7d:90:98:24:58:
61:d3:db:21:b4:72:98:38:fe:c8:3e:df:68:13:09:f0:fc:5a:
4c:cb:80:64:74:ec:bf:26:df:8e:c8:63:cf:42:87:f6:81:62:
3b:8b:c3:24:7e:8b:3e:f3:f6:f5:bf:f4:68:43:b8:57:49:f6:
52:3b:5d:83:d0:e0:17:2c:08:32:ed:86:67:51:c4:79:44:7c:
30:b6:51:0c:cd:d0:58:66:21:d7:32:ff:bb:fd:97:b4:9f:1b:
df:01:69:ef:09:5a:5b:5f:90:5e:c9:65:7c:9e:f1:02:86:6d:
1b:1d:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:10 2026 by rpki-client