
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json)
Hash identifier: MRwUIWntTifo4XWBWRfnS1YP+IMoV8Mt+8LKUqmt4HE=
Subject key identifier: 37:AB:E5:D5:FF:EC:B3:98:30:EE:63:44:9A:27:1F:15:35:E4:CA:E5
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial: 0EF59A1CDAAC42F0ECB0E6D7009216F625BC7DF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
Manifest number: 01E0
Signing time: Sun 01 Mar 2026 01:41:09 +0000
Manifest this update: Sun 01 Mar 2026 01:36:09 +0000
Manifest next update: Wed 04 Mar 2026 10:15:09 +0000
Files and hashes: 1: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=)
2: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: mTEDcoLdICoNvk7kfrQ0+/LXy8irj1YvMkO54g9PRRs=)
3: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f5:9a:1c:da:ac:42:f0:ec:b0:e6:d7:00:92:16:f6:25:bc:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Validity
Not Before: Mar 1 01:36:09 2026 GMT
Not After : Mar 4 10:15:09 2026 GMT
Subject: CN=37ABE5D5FFECB39830EE63449A271F1535E4CAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:77:3a:63:05:a6:1d:1e:1e:50:7a:c1:bb:
c6:e3:eb:4b:36:76:b0:39:d7:22:71:18:b4:df:03:
44:b4:70:10:e3:4f:2b:69:0b:1a:f2:41:95:68:16:
cc:90:bb:9e:ae:68:58:ee:07:dd:48:22:4f:0a:a0:
34:af:a0:ab:87:c1:32:a7:23:21:b1:51:35:57:86:
73:06:b3:4c:71:fc:93:4e:6e:a9:36:fd:fa:cc:a2:
27:9b:03:d9:27:64:61:9a:54:a8:5e:d5:14:17:b6:
56:c2:93:9a:52:36:59:52:eb:c2:28:85:97:fe:64:
e5:6a:2f:70:99:e4:7a:10:eb:23:ff:53:6c:3d:47:
90:8a:e4:91:43:29:9e:74:07:ed:76:18:1c:89:32:
57:d1:b0:1f:6d:8f:ae:ad:72:c4:3a:9b:be:18:bd:
01:0a:00:83:4d:2b:1f:67:06:1d:f1:2e:36:33:cb:
aa:75:dc:10:52:90:4a:79:fd:e6:ca:2e:bc:87:5a:
bd:4e:b6:3f:8f:e9:14:8f:00:c5:b7:d9:c8:ef:8b:
8d:0e:29:71:e6:4b:9f:2c:cb:3d:10:8a:a6:f4:24:
07:c8:7d:96:e4:81:82:b4:a2:8b:49:26:58:a1:69:
86:a5:79:5f:17:99:fa:89:08:7c:b6:28:2f:91:a0:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:E5:D5:FF:EC:B3:98:30:EE:63:44:9A:27:1F:15:35:E4:CA:E5
X509v3 Authority Key Identifier:
keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:19:69:b9:dc:87:92:8d:80:75:11:f0:f3:3d:7d:1c:e4:
74:ad:51:f9:42:19:0c:24:a9:11:ce:62:e7:c1:dc:56:62:3b:
71:88:49:a4:5f:ad:79:0b:97:ec:81:46:cb:c6:3a:0c:01:d0:
72:05:95:57:08:7b:ca:19:06:11:01:98:69:df:90:c3:87:5e:
09:76:0a:bc:d2:66:0b:05:56:dc:21:da:27:9a:da:35:0a:cc:
24:11:f9:3d:82:1b:3c:23:40:ff:01:fe:6e:77:67:0f:33:20:
62:4f:83:c0:95:c4:c3:6e:22:ab:50:e0:bf:60:a0:9a:4f:f2:
6f:d3:00:6d:1a:9e:3a:7c:19:63:91:c5:ef:27:16:be:89:07:
b5:64:dd:96:aa:13:5c:52:8a:ff:49:18:34:71:f9:8c:cd:2b:
0f:41:9b:60:3f:df:95:14:a8:76:30:b6:1d:6c:62:14:d8:46:
98:8d:97:15:28:ec:23:c5:c6:3b:2b:b8:b3:06:3e:7f:94:45:
47:15:08:db:4d:f9:0a:18:29:b5:5a:24:3c:e8:bd:66:49:98:
3f:eb:4a:a3:9e:53:06:a7:6f:22:c3:ec:73:a6:41:94:eb:d3:
c9:a7:13:92:c2:33:c1:53:88:27:6b:b7:8e:2a:be:69:06:ba:
b5:19:01:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDvWaHNqsQvDssObXAJIW9iW8ffQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD
NEU5NzhFNTAeFw0yNjAzMDEwMTM2MDlaFw0yNjAzMDQxMDE1MDlaMDMxMTAvBgNV
BAMTKDM3QUJFNUQ1RkZFQ0IzOTgzMEVFNjM0NDlBMjcxRjE1MzVFNENBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk5Xc6YwWmHR4eUHrBu8bj60s2
drA51yJxGLTfA0S0cBDjTytpCxryQZVoFsyQu56uaFjuB91IIk8KoDSvoKuHwTKn
IyGxUTVXhnMGs0xx/JNObqk2/frMoiebA9knZGGaVKhe1RQXtlbCk5pSNllS68Io
hZf+ZOVqL3CZ5HoQ6yP/U2w9R5CK5JFDKZ50B+12GByJMlfRsB9tj66tcsQ6m74Y
vQEKAINNKx9nBh3xLjYzy6p13BBSkEp5/ebKLryHWr1Otj+P6RSPAMW32cjvi40O
KXHmS58syz0Qiqb0JAfIfZbkgYK0ootJJlihaYaleV8XmfqJCHy2KC+RoD5rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUN6vl1f/ss5gw7mNEmicfFTXkyuUwHwYDVR0j
BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2
MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5
NzhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2
ODYtMWQ3MmFjYjg4MDI5LzAvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIx
QjRDNEU5NzhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGTBGWm53IeSjYB1EfDzPX0c5HStUflCGQwk
qRHOYufB3FZiO3GISaRfrXkLl+yBRsvGOgwB0HIFlVcIe8oZBhEBmGnfkMOHXgl2
CrzSZgsFVtwh2iea2jUKzCQR+T2CGzwjQP8B/m53Zw8zIGJPg8CVxMNuIqtQ4L9g
oJpP8m/TAG0anjp8GWORxe8nFr6JB7Vk3ZaqE1xSiv9JGDRx+YzNKw9Bm2A/35UU
qHYwth1sYhTYRpiNlxUo7CPFxjsruLMGPn+URUcVCNtN+QoYKbVaJDzovWZJmD/r
SqOeUwanbyLD7HOmQZTr08mnE5LCM8FTiCdrt44qvmkGurUZAeU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:58 2026 by rpki-client