
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json)
Hash identifier: X4bMLvrtu0fvY9Vm3YsXSwQ8m2692o3tgt3QuiFdl6U=
Subject key identifier: CE:03:FD:E5:8D:01:6D:9D:B2:4A:5A:8E:91:00:6B:FC:D0:3F:B7:56
Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Certificate serial: 2F13F32195CD50BD4D6AD27E5FCC1297C354B8C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
Manifest number: 0551
Signing time: Sat 28 Feb 2026 20:52:36 +0000
Manifest this update: Sat 28 Feb 2026 20:47:36 +0000
Manifest next update: Wed 04 Mar 2026 07:54:36 +0000
Files and hashes: 1: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: Bq7oyIIoZyjgiDbfETI9YwfHD5MavnkoO+xCh1PcfZY=)
2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:13:f3:21:95:cd:50:bd:4d:6a:d2:7e:5f:cc:12:97:c3:54:b8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Validity
Not Before: Feb 28 20:47:36 2026 GMT
Not After : Mar 4 07:54:36 2026 GMT
Subject: CN=CE03FDE58D016D9DB24A5A8E91006BFCD03FB756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:0e:29:c3:dd:bc:07:7e:5f:48:81:da:9b:
6f:f3:99:94:44:9f:83:e3:b2:f6:22:36:b9:42:68:
52:b6:f8:0b:f7:02:12:78:1a:fc:54:77:6f:ca:f3:
32:f2:bc:00:4d:6b:9c:59:6f:05:b2:ee:9e:4d:f8:
fc:dc:2d:2d:b9:8c:bd:8f:70:3a:8e:75:61:5a:44:
fb:a9:73:90:eb:e9:05:32:95:46:41:b5:e1:ac:0c:
5e:c0:fd:0d:6b:e0:ca:a3:78:11:27:ad:29:86:87:
e6:77:f7:1a:6c:34:19:4e:8e:0b:42:f8:b5:fe:a4:
28:43:06:5d:d9:f4:67:e5:88:b4:aa:57:cd:9c:c1:
2d:6c:56:ba:55:56:7a:c1:39:5d:73:d6:f5:d3:91:
0e:10:91:ae:54:74:af:5b:e9:22:43:39:2c:5a:2a:
ba:e4:a5:7e:8f:8c:5c:7c:d0:88:5e:18:8e:4d:97:
a1:42:19:b2:47:f2:4a:de:bb:7a:b5:88:d2:d5:be:
59:e0:df:5e:69:81:2a:52:98:da:e3:3d:55:2c:4f:
5b:b2:69:45:4e:d7:18:71:3e:99:d4:89:46:3a:d5:
4b:d6:a7:e2:28:78:bf:c1:d2:db:3d:af:6a:69:96:
18:1e:da:c1:a3:61:b6:30:67:8c:e7:bb:09:12:c0:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:FD:E5:8D:01:6D:9D:B2:4A:5A:8E:91:00:6B:FC:D0:3F:B7:56
X509v3 Authority Key Identifier:
keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d6:53:ca:f4:e9:28:43:85:37:02:ac:b0:43:fd:3e:c9:32:
7a:bf:9e:de:86:1e:4e:53:42:4b:9a:dd:9e:91:c6:b1:1e:ca:
8a:7d:c1:19:75:17:d6:4c:aa:56:88:67:81:20:ec:06:f7:ef:
a9:7b:93:d3:98:64:d5:c9:70:07:43:59:8b:e9:51:72:64:e7:
e2:1c:18:0d:14:9a:3e:72:a8:99:cf:56:97:20:3a:f7:4e:eb:
eb:6d:4a:5c:30:e1:f9:db:1c:b9:bd:88:d0:dc:82:f0:53:b7:
53:bd:6b:83:d5:b6:01:cd:97:2f:b0:cc:0e:f9:ca:c4:82:13:
c8:de:89:fc:6a:c1:27:6c:bb:2d:50:74:84:db:2d:f0:fb:1c:
18:f5:2a:7b:09:9c:e8:0d:69:92:95:43:b6:01:f0:1c:c0:d5:
7b:36:d7:85:aa:fd:6a:f5:f9:dd:a5:f4:3c:10:b8:72:4b:46:
88:7c:24:05:0b:38:21:6c:7e:20:c3:75:03:37:09:eb:b5:e2:
f9:fd:c9:61:31:b1:82:31:38:09:d2:db:03:f4:75:24:81:04:
7a:f2:75:25:a7:89:ef:bc:04:ff:a6:09:26:23:cc:fd:44:38:
43:00:b7:b4:77:de:12:4b:ff:b2:4e:bd:db:28:9e:d6:af:9e:
c1:62:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:04 2026 by rpki-client