
$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json)
Hash identifier: Hce0n3it77O0GDmy6p8VKzJO7r40YqFcxTpFV3nS4j8=
Subject key identifier: 9F:82:89:27:AA:C0:42:9F:BA:C0:B5:E7:0B:48:FD:26:E5:BD:A6:89
Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Certificate serial: 2F4478A27BCCE3239DE622E2E677014A3E247280
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
Manifest number: 03D0
Signing time: Sat 28 Feb 2026 09:02:36 +0000
Manifest this update: Sat 28 Feb 2026 08:57:36 +0000
Manifest next update: Tue 03 Mar 2026 14:50:36 +0000
Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: Huk9VwXKZY5qRslqFA8wI/7KNHFWY9r3OLcCPFaU2PQ=)
2: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: p9+g92OTA5g9U9uGm0N8/JKy+0N0k4laOFuKEtRUPZ4=)
3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: atE5KSrX4qCNxOqfUBA003QYsCNbJn6G5XKmt7zJQAw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:44:78:a2:7b:cc:e3:23:9d:e6:22:e2:e6:77:01:4a:3e:24:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1
Validity
Not Before: Feb 28 08:57:36 2026 GMT
Not After : Mar 3 14:50:36 2026 GMT
Subject: CN=9F828927AAC0429FBAC0B5E70B48FD26E5BDA689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:3e:ca:63:b3:7e:cb:59:c3:94:1c:79:18:
e8:e6:d5:e7:23:5f:53:68:8f:dc:f5:e9:40:56:f1:
bf:ba:95:a3:31:ab:ed:83:dc:87:4f:20:08:18:29:
0d:ab:62:56:0a:96:dc:96:c3:bc:40:cc:35:9a:ab:
af:e0:ed:2a:7d:9f:75:c7:85:31:7d:fe:92:67:84:
16:2b:4e:11:fc:cf:a4:8d:42:eb:4c:8c:46:c4:c5:
c2:13:a0:18:3d:88:e7:82:c2:fe:44:70:b5:77:11:
1c:67:7f:5c:15:04:cc:00:44:04:4d:1f:94:9f:6c:
8a:d7:53:25:d6:e1:ac:f5:ed:ab:52:7a:07:14:53:
ca:f2:33:96:ef:8c:7b:ca:6c:c9:27:42:58:ba:75:
35:5d:1c:4a:6e:c4:27:32:2e:62:d3:28:b3:3a:d4:
48:42:2c:59:2f:96:f4:34:03:3a:28:39:b2:e0:08:
83:0b:f4:ea:ca:a1:b5:4a:c3:7f:ed:d8:08:9d:42:
dd:02:75:38:26:13:67:17:e0:be:07:f1:24:3f:0a:
84:75:93:6a:ac:c4:8d:68:a0:86:49:0a:1a:59:bb:
4f:31:43:48:51:43:b5:d6:4b:e7:fd:3b:af:61:40:
54:bf:42:cb:59:04:dc:3b:cc:f0:41:7a:dc:ac:27:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:89:27:AA:C0:42:9F:BA:C0:B5:E7:0B:48:FD:26:E5:BD:A6:89
X509v3 Authority Key Identifier:
keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:87:c8:27:72:c0:e9:2b:a4:13:d7:1b:d2:4c:21:dd:55:
fe:21:bb:3e:da:57:fc:c1:6c:ab:25:44:50:55:b4:a5:d1:98:
d6:6b:74:59:67:17:05:34:e5:a7:1a:d0:9e:b6:45:a5:58:a0:
cd:18:2d:f1:8b:c5:45:1d:8a:56:06:57:81:72:d4:ae:c6:61:
96:6c:fa:29:96:de:a6:21:d5:89:07:a1:e5:cf:ad:b0:d1:28:
9c:a4:5d:a4:1b:0d:5e:e5:c4:98:db:96:b1:0d:2f:98:67:ea:
22:35:af:b4:a9:31:38:5b:ec:ea:d4:66:de:c6:77:a5:d4:96:
b8:93:f6:b3:39:8b:f6:df:cd:92:1f:94:f9:d3:55:b0:c9:2f:
c4:e2:93:15:42:8f:51:4e:7f:b9:f9:cf:9d:50:19:39:61:f9:
b2:98:61:83:65:a6:68:fb:6c:56:64:27:b2:c8:7b:de:b8:a2:
25:79:9c:ef:23:f5:f2:5f:ba:32:82:fc:9a:d8:40:99:cb:3e:
c7:21:07:a4:4d:b4:92:59:58:e0:5f:72:de:ad:18:88:0a:36:
44:79:02:f1:cf:33:64:07:9c:4e:cd:b3:f1:e8:ce:cb:0c:ee:
7d:e8:37:fd:fe:38:34:ff:7a:fa:63:5e:09:a9:cb:73:89:9f:
f3:b3:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:13 2026 by rpki-client