
$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json)
Hash identifier: xre6KQR9aHbJLycAeKthmjznFO1Q/IckhfFU9NKvLfI=
Subject key identifier: 06:9C:3E:5C:66:66:B4:51:47:E6:2A:35:15:87:57:FE:7C:F6:EF:50
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial: 4B8E6E2FF39230BF703E63F35316E6147D88F4D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
Manifest number: 02D2
Signing time: Sat 28 Feb 2026 14:11:12 +0000
Manifest this update: Sat 28 Feb 2026 14:06:12 +0000
Manifest next update: Tue 03 Mar 2026 22:09:12 +0000
Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: 2YTeJrlPNFWad37HhhgTvGIvoyv08V1DRRJ3BoJTpGk=)
2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8e:6e:2f:f3:92:30:bf:70:3e:63:f3:53:16:e6:14:7d:88:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Validity
Not Before: Feb 28 14:06:12 2026 GMT
Not After : Mar 3 22:09:12 2026 GMT
Subject: CN=069C3E5C6666B45147E62A35158757FE7CF6EF50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:fb:bd:1b:8a:c4:58:55:d2:b2:11:df:ad:
f2:9d:d7:6a:11:1b:7d:eb:12:ed:91:65:0f:39:7b:
44:fb:66:9a:70:83:ce:91:cc:80:0c:49:33:ec:27:
3b:8d:d1:7a:f0:8f:17:32:9b:93:47:98:ab:c5:75:
ed:ea:e1:68:d2:98:b1:47:f2:b5:ed:a3:2d:27:46:
f0:46:1c:9b:e1:da:a6:76:f9:1b:0d:3f:1a:d5:a9:
aa:22:a4:29:53:82:1e:40:5f:39:9b:41:56:31:8b:
06:28:b1:3e:8a:c2:09:14:f9:bf:6a:39:a8:c6:bc:
85:02:d1:a3:11:30:c2:4c:f5:68:41:76:9d:48:60:
ce:38:d1:2e:65:05:2c:98:a5:f9:68:f4:ad:c3:64:
0f:2c:24:4a:3b:e4:5a:c5:a3:49:5e:75:3d:b5:e5:
e3:aa:ea:b4:eb:6f:0f:4a:67:05:10:70:0a:cc:a1:
07:e7:9c:33:ba:c1:b7:be:aa:8f:2a:9c:96:54:34:
ce:a5:c5:91:a3:9d:94:aa:c9:f6:ff:e7:2d:91:c3:
a9:70:69:65:a5:df:bf:ae:19:f3:70:3e:73:57:b2:
89:1d:68:48:c1:b7:fd:67:1c:0b:65:ce:7b:a4:4b:
59:7d:99:c5:76:18:01:31:3b:88:74:0d:43:3f:09:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:3E:5C:66:66:B4:51:47:E6:2A:35:15:87:57:FE:7C:F6:EF:50
X509v3 Authority Key Identifier:
keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:f4:38:45:15:d7:90:66:6a:7a:83:ef:3d:11:19:c7:2c:
f0:58:e1:19:4e:e0:de:a2:04:50:57:5f:7e:97:c0:d3:c9:0c:
d9:6a:c5:52:d1:83:bd:b6:a8:ff:97:77:63:b3:15:54:bb:75:
1d:0b:bd:b2:35:d3:02:41:1a:35:e4:a7:74:00:c5:65:3b:65:
58:d1:fd:fa:0b:f6:8f:cf:66:a8:ec:1a:d6:b8:9b:e2:8c:6b:
f4:1a:1c:a5:8b:8c:26:c3:a0:c6:3a:bc:97:4e:36:cb:d3:d8:
10:09:54:9a:c0:a6:73:0a:70:9f:a6:fb:9d:07:69:ab:bb:79:
fb:4a:e6:f5:95:58:7c:71:2a:9e:ad:d1:32:17:b6:bb:cc:df:
56:1a:97:d4:32:3e:c9:5c:8a:dc:42:f7:ee:f6:1f:ff:c6:f6:
21:93:64:34:a5:1b:9e:d5:2a:2d:e7:ac:80:20:68:5b:83:64:
9c:e1:ac:e0:7b:65:44:29:99:de:78:ff:02:3f:9c:10:45:48:
8f:e5:d4:1f:07:44:eb:7c:bb:30:a4:fb:a6:80:4f:de:a0:11:
d4:4b:d3:d6:3c:29:d0:61:a4:80:7b:aa:70:d5:41:66:f4:2c:
02:cf:50:dc:cd:0f:c0:47:91:68:70:f3:0a:2b:c1:d3:86:5e:
3d:35:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:51 2026 by rpki-client