
$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json)
Hash identifier: 9Vah3wMFn9g2JMHftY6L9F71Rl7zKr9RA5vbjABuXSs=
Subject key identifier: 54:6A:99:30:82:F6:FE:C4:49:2A:A6:00:66:C4:B4:F9:CE:B4:C9:E0
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial: 5C765C4DE8FD6FBFBB05467428F30CBF04A05172
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
Manifest number: E9
Signing time: Sun 02 Nov 2025 15:41:16 +0000
Manifest this update: Sun 02 Nov 2025 15:36:16 +0000
Manifest next update: Thu 06 Nov 2025 00:17:16 +0000
Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=)
2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: hTq819H9x6p2co/BshGe09d/+2f20fy4LRlsYQPVgAc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 00:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:76:5c:4d:e8:fd:6f:bf:bb:05:46:74:28:f3:0c:bf:04:a0:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Validity
Not Before: Nov 2 15:36:16 2025 GMT
Not After : Nov 6 00:17:16 2025 GMT
Subject: CN=546A993082F6FEC4492AA60066C4B4F9CEB4C9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:06:44:de:94:63:3c:be:93:3b:69:6c:ea:
16:84:72:e3:3f:93:f0:fb:eb:df:64:17:9e:fd:69:
7e:1f:b4:76:ee:b5:2e:3c:48:4e:33:b6:10:c1:df:
95:f2:b5:ea:26:54:33:ad:4a:0f:3f:f6:69:51:a8:
a8:07:a9:d8:c4:4e:2e:2b:f5:99:45:93:c8:21:f3:
63:17:b7:e3:f0:39:86:2a:f7:a9:99:32:94:c5:7a:
75:18:4e:ed:6e:b2:df:89:23:2e:21:b3:d0:ee:1b:
5b:90:51:5b:c7:5d:55:e4:09:5f:b9:44:64:63:af:
1c:60:b6:1c:50:17:4b:82:8c:7c:14:be:fd:78:b5:
d0:99:ee:e3:c7:ad:b8:d7:d3:fe:b8:1e:ca:ac:a8:
a1:93:8d:01:69:3b:49:17:53:6c:b2:83:16:5c:94:
ae:11:dd:24:59:42:ec:70:ea:ab:65:0d:82:4f:f2:
ef:58:99:e0:d5:f6:57:f1:09:f0:74:fe:43:a9:63:
9e:90:98:a5:ec:53:cd:5c:3e:db:5a:8d:fd:24:82:
57:d6:09:7b:aa:1c:76:19:26:04:2d:e4:f3:cf:e0:
51:4e:d2:03:28:15:53:bc:6d:50:ed:29:08:0b:1b:
5e:fc:8b:96:db:96:21:91:1c:37:67:19:62:a2:4f:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:99:30:82:F6:FE:C4:49:2A:A6:00:66:C4:B4:F9:CE:B4:C9:E0
X509v3 Authority Key Identifier:
keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f2:21:0e:1f:fc:0e:52:88:7a:9c:eb:02:25:7c:22:84:fe:
71:6a:38:ee:0c:80:6e:a5:76:15:54:e5:3a:35:da:31:5f:86:
09:e0:63:97:03:0b:90:9f:84:83:36:3a:32:aa:b8:76:30:52:
1d:af:e2:72:da:dc:16:bc:70:d3:6b:2b:a2:4f:f1:2a:89:1e:
b0:bc:fa:c2:15:d7:98:29:24:d6:a2:ec:84:54:cf:19:b2:c1:
da:b2:37:34:f7:e5:29:c0:82:09:5a:78:c1:4c:b8:69:64:a3:
0d:99:74:65:04:7b:d5:4a:65:2b:db:15:38:8f:10:bb:65:87:
a2:ea:8c:7a:92:d0:4d:69:04:6e:b6:29:c0:b2:98:cc:bd:a6:
77:ec:93:91:e6:a9:b6:e5:26:98:d6:bb:d3:65:da:a2:d7:f0:
38:56:8b:29:80:63:07:6e:db:08:68:6a:5e:5c:9c:0b:94:5b:
36:28:01:cb:42:f6:7c:ab:2e:db:3e:47:e2:3d:65:17:e1:7f:
ae:02:39:e3:b3:cd:d5:fe:b8:b3:69:6c:06:2a:30:ff:58:0f:
0f:fc:8b:d8:e7:13:58:47:41:85:38:23:33:17:e4:a3:54:e7:
40:1a:89:fa:47:4c:ef:48:58:49:b6:4c:21:70:99:f3:51:3d:
ef:ab:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:30 2025 by rpki-client