
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json)
Hash identifier: KXQxoIpctE29P7Q9yf+SwqCrIsdUYKf2TTToBQj1NwQ=
Subject key identifier: 5E:F1:3B:29:D4:4B:BC:80:C5:B9:34:07:66:DA:74:1D:B7:EB:5D:29
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial: 073612114D3F78E79F8FB9C1FF32BF22CFDCAEBA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
Manifest number: 031C
Signing time: Sat 28 Feb 2026 22:02:35 +0000
Manifest this update: Sat 28 Feb 2026 21:57:35 +0000
Manifest next update: Wed 04 Mar 2026 02:44:35 +0000
Files and hashes: 1: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=)
2: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=)
3: 3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (hash: CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=)
4: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=)
5: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=)
6: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: nLe4un+3XLa0DmYtUoq/98zy7vUl5aFf/JqfODYfuOk=)
7: 3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (hash: 6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=)
8: 3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (hash: r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:36:12:11:4d:3f:78:e7:9f:8f:b9:c1:ff:32:bf:22:cf:dc:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Validity
Not Before: Feb 28 21:57:35 2026 GMT
Not After : Mar 4 02:44:35 2026 GMT
Subject: CN=5EF13B29D44BBC80C5B9340766DA741DB7EB5D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:45:d6:3d:54:84:a1:3c:e1:26:05:15:cc:
70:c2:59:98:21:f0:f4:6a:74:34:63:3d:40:5c:fd:
b5:dc:e5:1f:4b:b9:9e:c8:e4:4a:f3:b3:56:0d:24:
11:08:e6:bd:58:f3:00:26:14:aa:de:3e:8a:5e:fa:
d6:e6:a1:0c:52:45:0c:f8:2f:6e:ad:bb:c7:ec:90:
14:50:c5:15:c0:79:60:8d:b0:8a:32:e3:64:11:05:
08:3c:19:b6:11:90:72:39:51:a1:e8:01:50:74:fb:
8c:aa:7a:9f:4a:2c:57:3a:a2:af:8d:f4:16:b4:c0:
9b:14:9e:75:f0:08:53:55:75:1a:fa:a6:bc:d0:d1:
26:64:b3:c8:de:70:6a:c8:f6:80:43:d8:b0:b4:ca:
d3:32:c3:27:00:d8:6b:89:ff:fe:9e:c4:17:9e:43:
b2:a0:13:2d:dc:72:5c:44:da:79:3b:ad:03:24:6b:
ff:d4:51:09:92:ff:78:24:44:5d:50:1e:26:fd:74:
ef:5d:4d:ef:46:39:e8:2f:7c:a9:3b:81:b8:19:cb:
d2:81:40:da:37:41:78:fd:ad:10:bb:a0:c3:43:93:
9a:83:de:16:1d:9e:cf:bf:e1:c3:b5:ce:14:c9:cb:
6b:21:bb:8a:0f:64:23:26:1a:74:0f:85:7d:f3:3a:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:3B:29:D4:4B:BC:80:C5:B9:34:07:66:DA:74:1D:B7:EB:5D:29
X509v3 Authority Key Identifier:
keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:13:64:81:57:95:99:3b:ee:e8:56:d0:47:6c:9a:1c:f5:
06:ea:12:4a:fe:c5:63:da:d4:10:64:a4:ed:40:75:80:89:c5:
e4:0c:57:72:f4:50:45:ad:72:3d:19:96:f5:15:05:74:2e:c3:
cf:f5:fc:57:ad:59:77:24:dc:77:87:78:36:e1:fe:7e:1f:a7:
32:9e:d6:7b:3b:db:27:fc:ee:6a:52:7a:05:da:c3:52:4a:57:
3e:75:d8:e7:b9:8d:54:95:af:de:44:87:e4:55:7f:80:91:bb:
47:24:ca:ac:32:36:55:7e:0e:e5:f3:29:4e:e0:65:f5:59:fe:
46:c4:cb:2f:a5:d0:59:9b:ed:ac:33:8a:f8:c1:b0:ae:ba:f2:
a7:4b:63:3a:07:ea:a9:ca:43:fd:52:74:53:b1:37:9d:24:be:
7e:a5:a5:7d:79:f0:41:ed:09:8b:50:bf:3f:97:46:b5:3d:76:
88:13:00:43:12:c4:db:a4:24:bf:d6:d9:5e:12:2a:82:1d:0b:
6e:b7:a9:c4:e9:54:b8:5c:9f:04:c6:54:0f:ea:bf:3a:79:1d:
33:48:6c:70:40:45:eb:4b:f1:c9:49:dd:f3:99:61:1f:dc:4f:
13:84:9b:86:ad:85:6f:19:e5:c0:d6:97:b4:7c:f2:30:78:70:
b1:9c:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:31 2026 by rpki-client