
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json)
Hash identifier: pJNg588ItcetrH7lnZQNs7WcHcD8+zLQmHA0gMQZnZ0=
Subject key identifier: 0B:44:68:94:06:D2:52:AA:EB:2C:39:92:EB:F5:51:B7:1C:80:A0:C3
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial: 6162A764567D89014175E37A8360366D3AB332A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
Manifest number: 03D4
Signing time: Sat 28 Feb 2026 20:22:45 +0000
Manifest this update: Sat 28 Feb 2026 20:17:45 +0000
Manifest next update: Wed 04 Mar 2026 07:56:45 +0000
Files and hashes: 1: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: 0wjXGMdfWxWlEtZXKPMs4Y5JhsAxTongqsn4pdyydKA=)
2: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: /QbKEGkgZ6Zf1dCgj1IISjlMhUePjNg75AEPaLGwCKU=)
3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: P29nyVRqMomiZ6dB6VWVkB4ydoNUSNTp5nt+iDG/MVk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:62:a7:64:56:7d:89:01:41:75:e3:7a:83:60:36:6d:3a:b3:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Validity
Not Before: Feb 28 20:17:45 2026 GMT
Not After : Mar 4 07:56:45 2026 GMT
Subject: CN=0B44689406D252AAEB2C3992EBF551B71C80A0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:e5:32:d8:ed:02:cd:df:72:3b:ae:62:b0:
0b:20:75:d6:1a:fd:47:54:77:51:56:70:8c:cf:ff:
3a:6d:3e:55:90:3e:29:55:90:5c:e6:5d:1e:eb:38:
45:3b:b9:41:eb:97:1c:3c:bd:9f:e2:69:16:9e:0c:
96:c8:4f:40:a8:80:89:5d:b6:f1:df:22:b9:48:54:
04:65:66:ef:cb:de:41:66:85:57:c4:34:36:ea:93:
a7:bb:da:30:2c:91:82:66:bd:d1:73:20:80:de:c2:
4c:89:08:88:68:45:70:a8:03:0a:ed:70:26:4d:82:
6f:95:7c:56:70:37:02:5e:3a:4a:f5:09:a8:a6:e7:
80:e2:65:67:82:35:df:92:5e:bc:b6:b7:35:2e:c1:
e3:98:c1:3f:86:ea:d9:ef:c5:a4:d9:aa:b5:93:4c:
51:2c:a7:c9:84:cf:19:81:bd:e8:fb:b3:f5:40:52:
b9:05:b4:9c:64:63:b5:7d:10:db:b5:11:8d:28:7d:
96:b8:c2:83:81:0f:6f:35:2b:ff:4f:1b:0a:04:45:
31:46:d6:f4:75:ac:d2:ff:62:d7:7e:e2:6b:de:8c:
e5:33:6f:3e:de:7b:f3:74:aa:c5:3d:73:3c:ff:44:
20:18:8b:e6:97:bd:02:8d:d0:85:09:05:8a:fc:af:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:68:94:06:D2:52:AA:EB:2C:39:92:EB:F5:51:B7:1C:80:A0:C3
X509v3 Authority Key Identifier:
keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e8:d3:60:17:fc:52:82:91:8f:34:f3:2a:db:97:68:bd:75:
88:30:6c:ff:25:af:aa:a1:d0:8e:be:8e:38:01:16:30:88:4a:
dd:bb:79:0a:e4:cd:a0:4a:de:a6:c0:7b:a0:b0:09:a7:86:d7:
c6:b2:b2:8e:ff:e6:ed:bb:56:c0:9d:19:e6:91:05:c0:e4:0e:
48:9f:0d:ca:dc:b5:9b:76:34:c1:80:db:d4:1b:96:40:a0:da:
0f:2b:f3:2b:c5:d2:44:99:95:5a:ac:7c:85:69:e3:b5:8c:45:
b0:5a:bc:60:01:8a:d8:c1:e7:ec:11:cf:d2:e7:1f:65:e0:d7:
f5:df:65:5e:f8:d8:83:dc:d9:54:f1:9a:ff:12:e0:76:21:eb:
f9:2a:90:f8:a7:1d:d4:d1:a6:ce:0d:49:2f:4f:ff:36:14:cb:
cd:ab:cd:11:bd:45:9b:a9:38:ba:e7:f2:89:4a:a4:7b:f9:1e:
81:7f:20:b4:4f:d8:bf:aa:1d:10:8e:53:e7:10:86:b2:99:ef:
c6:10:65:db:60:69:4a:37:5c:1b:74:c4:91:37:6c:86:86:a7:
d4:00:e0:66:05:17:55:3f:a3:92:95:bd:1c:70:0f:e5:7f:24:
d4:70:15:a7:d0:c0:73:b6:ae:87:3c:73:15:36:c7:09:74:58:
cb:b7:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:33 2026 by rpki-client