
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json)
Hash identifier: Lv92gK26cxQm38CZxr0zw6H/GWhD9WTanQZntKpz214=
Subject key identifier: 86:44:E1:42:62:45:7A:3A:57:C9:5C:58:A8:28:1F:EE:50:E9:F3:82
Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469
Certificate serial: 59F750BCA65681168539D6B0E23A692ABD046F12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
Manifest number: 011B
Signing time: Tue 04 Nov 2025 02:20:48 +0000
Manifest this update: Tue 04 Nov 2025 02:15:47 +0000
Manifest next update: Fri 07 Nov 2025 14:01:47 +0000
Files and hashes: 1: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: DJNtQD0EQa8TIgj6A5pa5rihC3ovZPWDmuNjYqeqjpg=)
2: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: V+YjkhbIydkZ+oGTevb+ipQYCKYryW/Ib0ruhbJynjY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f7:50:bc:a6:56:81:16:85:39:d6:b0:e2:3a:69:2a:bd:04:6f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2E185B12379871494114828D5D5D713982E469
Validity
Not Before: Nov 4 02:15:47 2025 GMT
Not After : Nov 7 14:01:47 2025 GMT
Subject: CN=8644E14262457A3A57C95C58A8281FEE50E9F382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:a1:bb:ee:e2:b4:a7:1f:77:c4:a3:e3:72:
e5:42:61:dc:3e:4e:f3:e7:e9:27:b7:3e:33:6c:76:
24:97:f8:6e:ee:71:45:38:74:a4:89:e8:d2:d2:0c:
2e:4d:ae:4f:bd:80:93:c9:77:6c:a3:db:7b:c5:50:
fe:1e:23:65:df:e8:6c:5c:b5:08:fb:61:be:33:a9:
d8:f6:65:95:2e:8e:82:9c:36:04:55:24:f4:82:fc:
1e:a1:46:28:e2:48:53:f2:bf:05:b3:20:30:13:4f:
bb:1d:0c:34:91:f9:8b:8f:6e:26:09:49:21:72:7e:
c0:45:cb:8d:25:31:8a:a8:55:c7:8d:53:3a:b8:97:
be:c1:fe:1d:65:e6:1a:96:c8:63:95:2e:38:f2:11:
29:7c:73:8e:88:18:02:ac:66:e6:8a:7b:c2:32:4e:
94:83:53:08:dd:dc:62:86:48:83:b8:67:05:ad:a7:
73:f6:46:53:f1:29:1f:83:05:ef:53:f5:a8:18:51:
c5:00:be:33:56:8b:f6:e6:96:dc:53:d3:fa:7c:25:
46:9e:f2:0b:35:76:26:ca:81:eb:87:23:5a:f6:2a:
29:51:ba:ef:2c:fa:df:69:52:05:35:c6:bb:c8:f8:
73:9a:b8:b4:d7:65:31:de:d6:b7:5b:e0:1f:6f:f3:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:E1:42:62:45:7A:3A:57:C9:5C:58:A8:28:1F:EE:50:E9:F3:82
X509v3 Authority Key Identifier:
keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3c:33:ca:d7:3b:c5:38:fd:83:02:4b:7b:8f:ba:5b:80:7a:
7b:bf:e8:28:4a:69:39:7c:db:a3:53:7d:9f:97:6d:10:a8:59:
0b:1c:80:22:e3:cd:a6:b5:34:d6:69:3b:73:ec:ac:eb:72:c2:
df:ac:47:3a:0c:38:11:be:4a:1e:8b:27:92:69:11:22:81:8d:
65:76:7d:f4:1d:11:c1:7b:ae:5c:a8:81:07:8e:0a:28:6d:e6:
f6:ed:65:f9:8c:78:6f:a6:e4:23:d1:b7:66:8d:b9:84:3a:4d:
24:c9:dd:b2:45:3e:36:e5:57:e5:aa:92:c0:3a:74:b9:56:6c:
12:b0:6d:e7:73:11:6f:42:fb:8d:87:c3:32:07:0a:9b:5e:89:
8d:c3:b1:8a:ae:cb:82:c4:1d:9c:c0:f2:80:1f:d9:c8:9e:9b:
06:79:11:47:46:bc:0f:67:db:15:a9:2a:15:57:6b:ef:ad:b8:
78:d1:03:f5:a2:a9:0e:7b:7e:3e:0c:c7:d3:80:6d:5f:c0:a3:
6a:9b:b6:75:ef:52:e7:2a:f9:13:e1:6c:f3:8f:eb:94:fc:09:
b6:c0:24:cd:a6:8f:20:26:9b:7e:b9:38:82:ce:17:60:0b:de:
83:a0:d8:d9:7e:a6:4f:28:f5:f3:61:7b:d9:dc:75:56:b5:16:
49:e6:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:04 2025 by rpki-client