
$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json)
Hash identifier: aWEAoxSxgirlEliITOxZtGhyX46BOynCshKPbw949FQ=
Subject key identifier: 3A:51:10:E8:A0:35:1C:7E:39:81:64:10:09:49:BB:05:49:3F:3D:F6
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial: 7B5AF5E006ACE544050C20B7E02288CDB8E5AC09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
Manifest number: 02AE
Signing time: Sat 28 Feb 2026 18:30:52 +0000
Manifest this update: Sat 28 Feb 2026 18:25:51 +0000
Manifest next update: Tue 03 Mar 2026 22:13:51 +0000
Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: uQQbxKa8bIywjPdh5ikYDgWPQS6fvzGo4NZbrFDrBxI=)
2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5a:f5:e0:06:ac:e5:44:05:0c:20:b7:e0:22:88:cd:b8:e5:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1E28E396E82778793018513BD084854BE663886
Validity
Not Before: Feb 28 18:25:51 2026 GMT
Not After : Mar 3 22:13:51 2026 GMT
Subject: CN=3A5110E8A0351C7E398164100949BB05493F3DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:f8:ee:35:29:e7:74:c4:1d:b4:5b:b0:13:
7c:0d:df:31:dc:27:4e:00:6d:6b:44:1a:a7:b2:13:
69:ab:99:65:52:18:7d:a5:8a:71:da:f3:08:a5:cc:
af:78:20:0c:84:4e:80:f7:7a:06:5c:fb:ce:a1:92:
2e:7f:76:39:ae:e0:e2:48:bd:f3:e4:44:7b:5c:29:
fb:45:c0:71:03:c2:2d:ee:ec:ad:3f:85:27:29:bd:
89:bd:b0:e1:37:60:1f:6b:48:5e:18:33:76:56:d7:
cb:ab:3a:58:7f:6d:e8:d6:8f:41:83:1a:f5:c1:91:
a8:12:42:d8:9c:0b:9b:26:b3:3f:b7:44:d4:61:b3:
ff:d7:7b:32:fb:72:2c:71:64:04:3e:ca:ce:70:14:
9a:df:c5:e9:03:d1:43:0c:1c:60:18:22:89:bf:cb:
4f:05:02:db:cf:a0:9e:42:47:0a:cd:59:3a:02:b9:
f2:21:42:3a:9d:37:95:b9:2e:0d:0e:5e:be:5c:53:
fd:55:05:84:1b:f1:f4:86:f5:dc:66:6f:01:91:7c:
47:fa:2e:9c:1b:84:74:64:9f:2e:b4:0d:5b:e0:d9:
07:5a:ff:65:cd:e5:af:40:94:bb:5a:37:07:50:b7:
c0:cb:5d:9f:cc:0b:aa:74:00:16:c3:55:33:69:29:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:10:E8:A0:35:1C:7E:39:81:64:10:09:49:BB:05:49:3F:3D:F6
X509v3 Authority Key Identifier:
keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:b3:90:cb:43:59:50:64:5f:b1:67:c8:b5:80:0e:ba:49:
b1:8b:3e:c7:7b:57:12:04:13:13:92:1e:6d:83:c9:88:02:4f:
7e:26:e6:27:fe:7f:64:b1:91:3a:c2:08:5e:bb:bd:03:32:92:
15:57:a8:fb:4d:6c:8c:b2:39:62:86:22:ba:a9:e4:75:3f:c7:
ce:7f:b2:06:83:74:37:68:1b:c9:c4:e8:e9:ac:42:43:d1:13:
8a:68:85:c0:11:78:04:b2:ed:69:b8:a8:f2:e4:44:bc:08:73:
de:32:f3:a1:94:e4:a3:a1:c0:8e:4c:7b:37:a9:17:46:57:89:
34:5a:ad:67:24:17:d8:0a:cb:a3:fa:af:5e:83:2c:20:15:b7:
88:01:8d:ee:fb:6a:d1:2b:4c:5a:d0:7a:20:e2:b0:ef:cb:1e:
42:54:e3:7c:4b:4c:f1:1f:81:2d:40:4d:6b:f1:7a:55:73:aa:
33:96:4c:9f:bf:50:89:c0:e3:6d:8d:d1:b6:0d:1e:63:c0:1f:
27:23:92:f7:25:d2:cb:49:b7:7f:80:86:50:68:9f:6d:4d:a7:
33:28:41:17:e9:17:61:6f:d8:9d:d9:e6:ca:22:b9:3c:4a:c1:
7e:5d:0a:2a:4e:6f:59:c6:f0:ce:6a:ec:e2:50:7b:77:05:6b:
e3:29:aa:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe1r14Aas5UQFDCC34CKIzbjlrAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC
RTY2Mzg4NjAeFw0yNjAyMjgxODI1NTFaFw0yNjAzMDMyMjEzNTFaMDMxMTAvBgNV
BAMTKDNBNTExMEU4QTAzNTFDN0UzOTgxNjQxMDA5NDlCQjA1NDkzRjNERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vvjuNSnndMQdtFuwE3wN3zHc
J04AbWtEGqeyE2mrmWVSGH2linHa8wilzK94IAyEToD3egZc+86hki5/djmu4OJI
vfPkRHtcKftFwHEDwi3u7K0/hScpvYm9sOE3YB9rSF4YM3ZW18urOlh/bejWj0GD
GvXBkagSQticC5smsz+3RNRhs//XezL7cixxZAQ+ys5wFJrfxekD0UMMHGAYIom/
y08FAtvPoJ5CRwrNWToCufIhQjqdN5W5Lg0OXr5cU/1VBYQb8fSG9dxmbwGRfEf6
LpwbhHRkny60DVvg2Qda/2XN5a9AlLtaNwdQt8DLXZ/MC6p0ABbDVTNpKQ1hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOlEQ6KA1HH45gWQQCUm7BUk/PfYwHwYDVR0j
BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF
ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2
Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk
ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4
NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEJTs5DLQ1lQZF+xZ8i1gA66SbGLPsd7VxIE
ExOSHm2DyYgCT34m5if+f2SxkTrCCF67vQMykhVXqPtNbIyyOWKGIrqp5HU/x85/
sgaDdDdoG8nE6OmsQkPRE4pohcAReASy7Wm4qPLkRLwIc94y86GU5KOhwI5Mezep
F0ZXiTRarWckF9gKy6P6r16DLCAVt4gBje77atErTFrQeiDisO/LHkJU43xLTPEf
gS1ATWvxelVzqjOWTJ+/UInA422N0bYNHmPAHycjkvcl0stJt3+AhlBon21NpzMo
QRfpF2Fv2J3Z5soiuTxKwX5dCipOb1nG8M5q7OJQe3cFa+MpqmM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:33:32 2026 by rpki-client