
$ rpki-client -vvf repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft
File: E118E8E6144A59677DB6D05BDF713DB23BC61342.mft (raw, json)
Hash identifier: YjJWzQQB8L4wS4x2RSs4xmlkoxDEPQ9QS/DjTfojVHs=
Subject key identifier: 66:AE:2E:05:3E:4C:EA:F8:64:FB:68:3E:31:C7:6F:01:46:BF:2A:85
Authority key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42
Certificate issuer: /CN=E118E8E6144A59677DB6D05BDF713DB23BC61342
Certificate serial: 3649E8D842C092F5A3CB3D6806F81AB3493C41D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft
Manifest number: 0344
Signing time: Sat 28 Feb 2026 18:12:06 +0000
Manifest this update: Sat 28 Feb 2026 18:07:06 +0000
Manifest next update: Tue 03 Mar 2026 21:05:06 +0000
Files and hashes: 1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: EPfbuzMbv4cF+h934ARntwSyGoDJC9dJTM001arffsg=)
2: E118E8E6144A59677DB6D05BDF713DB23BC61342.crl (hash: Ve4BW/9c+js8Pv1h/sOAAcOU4CuTCY6YNghEiWuy3Eg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl
rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:49:e8:d8:42:c0:92:f5:a3:cb:3d:68:06:f8:1a:b3:49:3c:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342
Validity
Not Before: Feb 28 18:07:06 2026 GMT
Not After : Mar 3 21:05:06 2026 GMT
Subject: CN=66AE2E053E4CEAF864FB683E31C76F0146BF2A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:89:e6:08:ae:60:f2:28:fc:cb:af:cd:d6:
ae:46:1b:71:16:6a:88:86:65:89:19:4c:51:d5:8c:
ae:8a:ff:fc:8a:8c:0d:ad:a1:51:00:20:64:89:27:
6b:67:00:a8:c3:04:d8:9d:fa:70:8e:a7:05:b7:93:
c7:c4:c4:91:c9:bf:91:71:f5:d4:58:14:34:f7:64:
22:a5:8e:72:a5:73:1d:c6:09:ea:b5:6b:99:91:43:
72:d6:52:83:3e:e1:8e:00:3c:da:8f:24:b7:1e:ec:
79:e3:26:38:9f:1b:29:62:0d:bc:73:35:ba:88:c9:
4a:b1:a5:bb:52:10:2d:e2:95:8a:fd:da:ea:36:ed:
da:11:59:d7:44:22:0e:c9:96:ca:c0:90:b6:7b:cb:
1b:d1:0c:f2:4f:5d:42:a5:6d:4e:3d:41:4f:3f:a5:
84:73:63:1b:3a:14:62:86:c3:de:e4:6f:15:68:82:
15:e7:9b:f4:cd:5e:ab:a0:6b:fa:c6:17:bb:e3:be:
3e:09:91:7d:89:4a:05:ee:88:30:f5:9d:7a:e6:08:
f0:be:4b:57:bf:67:8d:5d:92:8a:8e:45:99:92:5e:
f2:f6:0b:0e:a7:e5:dc:a3:3f:b8:3e:44:5e:83:47:
32:87:ff:62:7d:cc:f7:2e:99:d6:03:19:49:5c:0d:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:2E:05:3E:4C:EA:F8:64:FB:68:3E:31:C7:6F:01:46:BF:2A:85
X509v3 Authority Key Identifier:
keyid:E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:8c:0a:ee:48:98:ff:3f:0a:20:89:ee:88:fe:1b:53:18:
64:3f:75:8f:9b:6d:53:3c:5a:0d:ff:e6:c7:43:ea:ac:96:ef:
4c:ea:38:f2:e5:b0:12:a6:51:38:34:52:6b:d7:30:2f:40:1b:
bb:84:87:f6:c0:df:ca:b4:c6:01:8c:ed:e9:bd:3d:9a:63:b4:
ed:e4:91:bd:c7:33:09:df:ef:d6:37:73:95:60:b5:8d:e3:f3:
0e:86:0a:9e:62:d9:21:12:f7:18:11:49:79:98:5b:28:a6:5e:
55:14:57:59:a8:07:b4:9d:9c:10:19:53:43:01:95:28:b5:c5:
34:34:9d:7a:73:c8:28:03:1a:9e:de:21:2b:fc:5a:24:9f:2a:
e6:86:47:4c:91:ad:59:b9:c3:a0:b8:d9:86:8a:32:5f:b9:30:
3a:9b:f9:55:9b:c8:d8:23:09:9d:43:ef:f9:d3:12:c0:01:92:
f8:91:aa:4f:ef:76:65:47:38:82:0b:b2:0e:40:73:86:b3:10:
f7:dd:4c:0a:11:f1:45:83:6f:1b:0e:67:51:ba:62:1f:57:aa:
c9:21:8b:b9:bc:06:b6:5b:ba:b9:ab:d0:2a:12:0f:c6:f0:e7:
7b:10:04:35:9c:be:e7:3d:97:bf:9f:be:b4:c7:f3:a2:d1:bf:
5f:e3:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:53 2026 by rpki-client