
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json)
Hash identifier: XzAo7Ck9PPfM8Mh+gj75HPNHreiKOeHXBsa+DeAWJSE=
Subject key identifier: D8:B4:1E:39:98:22:DF:0A:1F:58:07:AA:9A:C5:72:02:A6:B9:BD:1D
Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03
Certificate serial: 7F3CFB81BB3C7D28FBC80FED5E2CE5CE5A3C1E37
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
Manifest number: 0108
Signing time: Sun 01 Mar 2026 19:22:29 +0000
Manifest this update: Sun 01 Mar 2026 19:17:29 +0000
Manifest next update: Thu 05 Mar 2026 06:50:29 +0000
Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=)
2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: hrWMp8XOXZnGBw93vKtwo3tH5fvqGIrRwA1k7RoYZFs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3c:fb:81:bb:3c:7d:28:fb:c8:0f:ed:5e:2c:e5:ce:5a:3c:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03
Validity
Not Before: Mar 1 19:17:29 2026 GMT
Not After : Mar 5 06:50:29 2026 GMT
Subject: CN=D8B41E399822DF0A1F5807AA9AC57202A6B9BD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:5b:cc:44:8c:c7:8a:81:d1:bb:9f:cb:f1:
98:e3:71:82:e3:8f:90:27:df:58:4b:69:66:9b:40:
70:7a:90:79:8d:64:46:17:05:59:e2:09:d8:01:d7:
2d:cd:8f:8c:7f:ce:8a:d1:5c:da:8f:06:d1:b5:a5:
80:7a:fd:0a:83:b0:fa:a4:85:6d:74:3f:d5:8a:d4:
95:a8:54:21:02:72:0d:2b:19:8a:c0:37:de:e6:76:
a4:22:7d:a8:0b:41:d6:4f:f0:05:9d:95:41:d2:80:
cd:0d:e7:ac:39:e6:22:92:34:2c:b7:3f:e5:96:b3:
5f:2b:16:1b:41:b8:37:48:98:d4:93:87:ac:e8:b7:
0e:1f:57:a7:97:49:85:f6:6a:5c:c0:2c:f9:fb:00:
92:14:bb:85:4f:8e:0c:e4:3a:4d:5e:8a:93:23:73:
59:2b:12:1a:9b:da:fe:cb:bb:3d:1a:50:5a:51:67:
77:9c:28:15:e2:e4:ca:19:69:5e:89:2a:69:b7:ce:
f5:9d:41:d5:32:4b:b4:17:4a:71:7d:e7:00:45:11:
71:6c:05:ef:f0:ef:7f:9f:3d:ff:40:20:66:1c:60:
c4:38:0f:6b:05:cc:f0:2b:bd:38:36:fb:08:55:3e:
d0:ea:db:80:52:1c:9a:ab:d4:1f:eb:3c:84:3e:47:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B4:1E:39:98:22:DF:0A:1F:58:07:AA:9A:C5:72:02:A6:B9:BD:1D
X509v3 Authority Key Identifier:
keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:1f:50:65:44:a8:3a:88:e1:c2:26:e4:79:5f:4c:95:c0:
96:cd:bc:ef:a8:f3:08:07:f2:10:31:29:2f:9b:c6:7d:10:7e:
d6:ba:52:50:b1:57:64:94:3e:9e:28:5f:17:ff:9b:93:eb:08:
8b:e3:95:c0:ab:06:fb:bb:74:e6:e0:53:89:ef:19:8d:26:eb:
e6:be:89:9b:46:df:64:36:c7:5e:1c:d2:23:3b:a9:14:25:16:
da:89:a8:7d:4a:ac:8c:9c:65:f5:47:9f:3d:4c:6c:6c:59:6e:
b9:30:a5:24:c4:81:55:d7:3a:34:f2:2d:d6:2a:38:02:75:c0:
de:4e:dc:56:86:13:09:c1:ec:29:ec:6e:14:1f:3a:a9:44:b5:
39:e5:08:e4:67:6b:9d:c8:c5:a2:b5:4c:d6:42:16:d0:c9:96:
df:81:b0:49:b9:73:b0:73:c7:06:24:da:61:2f:97:31:9f:71:
8c:f3:02:f9:f6:a7:ae:be:14:dd:ce:36:a9:08:44:05:6d:67:
1a:01:65:98:94:68:ad:80:f9:4f:ea:93:a2:bf:94:2a:99:7d:
38:25:d2:78:0b:53:69:25:da:64:35:25:f0:51:ac:63:0f:b8:
6b:91:bf:39:69:df:76:3d:30:07:af:d5:a4:22:a9:f3:ae:2b:
62:bd:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:43 2026 by rpki-client