
$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json)
Hash identifier: cFycUSatmAMqqOSOnMW8Fpoc7XyQ0FrEeDuV0Oerv14=
Subject key identifier: 68:3D:CE:DC:F1:B0:0E:E5:C1:CE:8D:AC:04:48:28:81:F3:E0:81:02
Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46
Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46
Certificate serial: 38B39E12D8DF7020F099662EEB71B299513D3ECB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
Manifest number: 0302
Signing time: Sun 01 Mar 2026 16:51:43 +0000
Manifest this update: Sun 01 Mar 2026 16:46:43 +0000
Manifest next update: Wed 04 Mar 2026 20:05:43 +0000
Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: 4Yz/yARycrZvDhvvVRwgFTyC7+z6kxDkMMlg9xaONao=)
2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: UWEmni5SiUDfWBGShl48lbgoCd8oAI+lOk/JRAr7L3s=)
3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 0lcfKrVdmd9kh0sslDDW+5Kmpau5fuDZNnMcPzu+YgU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl
rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b3:9e:12:d8:df:70:20:f0:99:66:2e:eb:71:b2:99:51:3d:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46
Validity
Not Before: Mar 1 16:46:43 2026 GMT
Not After : Mar 4 20:05:43 2026 GMT
Subject: CN=683DCEDCF1B00EE5C1CE8DAC04482881F3E08102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:5f:6e:d6:3c:d0:86:8c:29:ba:3c:63:ce:
72:55:1d:ec:7c:d9:32:30:95:ae:29:10:72:3d:11:
98:3e:b5:a3:f6:4a:18:2b:d8:65:d2:a9:83:b0:25:
a0:d9:46:94:63:b1:19:38:62:8f:8e:3b:35:f6:aa:
ca:4c:45:47:f9:0c:ff:9c:a8:5d:b0:92:e5:ba:2b:
e3:84:40:27:50:99:18:98:b2:25:09:82:0e:7f:08:
ef:8a:c5:3e:c5:d7:2c:aa:2d:b4:71:d7:63:e2:3b:
9f:42:5f:0c:87:08:1c:59:1d:20:32:65:83:7f:19:
2e:f9:33:fe:64:d9:fd:79:d7:3e:e6:bd:e9:02:16:
a3:e6:da:e7:c0:73:2f:bd:59:18:27:e5:bd:22:b2:
c2:29:c0:47:c5:47:94:0e:2b:6b:bb:9e:d2:ea:ff:
2c:d3:5a:a8:9f:da:4b:c7:ea:4e:5f:ca:7a:4e:00:
08:f5:3f:60:f2:d5:8e:07:2c:3b:22:2b:f2:43:1e:
9a:e1:16:f4:7e:ee:de:b7:2e:14:ce:4d:e5:83:dd:
3c:cb:e0:7a:f4:d4:d9:66:45:03:00:89:af:f6:9b:
6c:69:a2:64:28:a1:ea:c5:7a:01:df:e1:93:42:db:
19:8e:9a:19:fd:26:f7:32:7f:0c:9d:12:3a:f3:de:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:CE:DC:F1:B0:0E:E5:C1:CE:8D:AC:04:48:28:81:F3:E0:81:02
X509v3 Authority Key Identifier:
keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:63:df:f8:11:d2:e9:8c:97:d9:22:12:15:f1:d7:29:8c:
ba:3c:bb:d3:d4:11:25:56:c1:4e:2c:46:82:bb:4c:e2:b1:89:
1f:9a:59:df:1c:cc:4f:bc:98:04:e7:51:26:01:36:b8:11:a0:
a5:7c:79:a1:c1:42:54:b5:e3:fb:c9:86:34:c5:57:d8:ea:5c:
20:27:ff:12:72:a3:dc:27:d0:6c:15:a1:2b:39:07:54:5a:49:
c3:c9:78:1d:37:50:cd:50:e6:52:9e:b6:7a:33:a5:ec:e7:e9:
22:75:60:dd:02:9f:09:fa:f8:b3:64:d1:ab:fe:00:01:16:38:
7b:13:93:50:ac:c8:30:61:47:63:ee:fb:4c:da:60:70:06:3a:
a2:8f:bd:3a:d4:ff:e4:78:f8:53:f0:a0:d8:de:4c:1e:4a:61:
ae:d2:62:5b:73:c0:03:33:03:d6:00:4a:a2:5e:97:47:01:e8:
ce:06:ed:83:0c:ee:ba:a1:be:c2:63:25:3e:e0:d9:4e:4d:b7:
6d:36:07:da:36:46:63:9b:3e:d9:de:75:f5:62:d6:f2:14:c3:
a7:be:ea:33:b7:2a:b9:cf:b5:e2:97:34:02:68:d5:af:b0:bf:
11:65:74:fd:04:bf:bc:29:b3:a6:76:49:6f:83:ae:46:62:ba:
96:b8:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:47 2026 by rpki-client