
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft
File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json)
Hash identifier: 5FHjW+ANeM21DqT3PfbiXKiFHog9xx2NLVanM6H3WKc=
Subject key identifier: 78:CE:5C:2C:16:11:B9:B0:F5:B8:FD:6C:86:FD:63:D2:8A:F1:C1:15
Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3
Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3
Certificate serial: 704B7649BF250F8C0D74C351B674A8016C285B70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft
Manifest number: E1
Signing time: Sat 28 Feb 2026 14:22:37 +0000
Manifest this update: Sat 28 Feb 2026 14:17:37 +0000
Manifest next update: Wed 04 Mar 2026 01:06:37 +0000
Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=)
2: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: Zpwlw//TRfkJ571jYPtWNTzHJpwMvpWsBzf5PqbJg74=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl
rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4b:76:49:bf:25:0f:8c:0d:74:c3:51:b6:74:a8:01:6c:28:5b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3
Validity
Not Before: Feb 28 14:17:37 2026 GMT
Not After : Mar 4 01:06:37 2026 GMT
Subject: CN=78CE5C2C1611B9B0F5B8FD6C86FD63D28AF1C115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:ff:02:dd:a0:c2:25:96:b0:19:fb:38:7b:
3f:40:fc:3a:7f:54:52:a0:5a:a0:d4:d6:04:64:56:
8e:6b:cb:57:1f:14:3f:da:83:ff:61:6d:b0:45:bd:
a2:d2:bf:83:51:39:13:6d:ff:74:f2:af:d3:27:29:
e3:18:f6:03:b0:e1:75:6d:dd:6a:9a:e8:78:e9:4f:
34:53:96:e1:0f:3c:fd:25:db:48:2a:d6:31:34:f7:
5c:66:a6:8d:a7:e8:4c:f9:fc:c2:a6:c8:c3:04:82:
0d:a9:34:0e:8d:41:24:c2:98:c9:a3:42:ad:9f:d7:
09:9f:3f:06:07:62:be:1a:d8:6e:fd:76:01:83:6c:
92:54:87:65:09:4c:3a:e2:f4:f1:22:0d:14:58:18:
a5:ff:0e:dc:91:5b:c8:b6:3c:4a:b4:49:e0:22:47:
c5:4b:ae:f7:82:d5:8a:d3:4a:17:62:7e:2f:81:17:
4e:99:dc:84:39:38:71:7a:74:64:a7:7b:fb:ed:1d:
ae:e9:90:fa:42:00:cb:61:9c:d6:c0:d9:85:cc:da:
70:c4:3c:89:0a:e5:c3:b0:6d:31:7b:d0:20:ce:f5:
16:9c:cc:92:3d:e6:ac:de:77:ce:1d:d3:77:1e:36:
12:29:53:3f:c1:e2:e8:3a:14:ce:6c:c9:31:eb:a5:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:5C:2C:16:11:B9:B0:F5:B8:FD:6C:86:FD:63:D2:8A:F1:C1:15
X509v3 Authority Key Identifier:
keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:96:52:30:7d:2f:16:2c:20:16:c3:e5:2a:b5:2a:eb:fd:
89:70:6f:56:6f:35:20:fe:dd:40:c5:73:23:06:0d:52:71:a1:
d5:1a:73:da:e0:81:65:d6:28:6c:ea:f9:bf:d6:6c:b0:d1:8d:
1c:e9:8e:bc:92:6a:95:4f:72:08:dd:a1:69:0b:5a:cc:e2:c4:
ed:b0:24:01:1c:96:0b:9d:b0:36:67:3c:f3:be:5a:11:29:28:
58:85:6f:f0:a0:f7:66:6d:aa:1b:85:02:25:ca:e8:44:50:2e:
59:6b:07:40:7c:b0:15:39:f4:87:cd:35:ff:b4:52:a5:34:b9:
52:3e:8c:87:15:66:8c:ab:f1:01:ad:6d:34:b7:1a:6e:92:63:
37:dc:a4:75:84:81:9f:1c:94:48:f0:a5:93:a7:fe:dc:a6:f5:
e2:b3:20:68:89:42:68:5a:29:17:3e:9c:78:a7:e7:c4:48:09:
ae:fe:b9:5a:32:ce:c5:cc:60:b9:9b:93:55:1c:91:8c:6f:85:
ba:da:ad:e8:db:49:df:93:53:86:63:fd:4f:fd:c4:44:8e:89:
f0:41:db:0a:01:25:d1:05:d0:ae:67:03:0e:71:f7:ed:2b:60:
64:8a:dd:40:04:07:63:e0:ef:e4:77:13:30:08:4e:89:07:b1:
c5:93:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:36 2026 by rpki-client