
$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
File: 348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json)
Hash identifier: 8Pvnj2SfUorRVQaV+nNZQ9/4Nv9sNQWBoSzUEdfqh8E=
Subject key identifier: 96:40:87:87:C2:17:A0:C0:16:3E:34:AA:75:C6:57:2C:9B:DB:5A:07
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Certificate issuer: /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial: 6632137712662BD38A9A836165A1B4CE7BC0367C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
Manifest number: 0553
Signing time: Sun 01 Mar 2026 00:02:25 +0000
Manifest this update: Sat 28 Feb 2026 23:57:25 +0000
Manifest next update: Wed 04 Mar 2026 08:47:25 +0000
Files and hashes: 1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: c79IxRRmzbppbDgCMDja0qpBKOKWVv/EWBpGFag3d6I=)
2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:32:13:77:12:66:2b:d3:8a:9a:83:61:65:a1:b4:ce:7b:c0:36:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Validity
Not Before: Feb 28 23:57:25 2026 GMT
Not After : Mar 4 08:47:25 2026 GMT
Subject: CN=96408787C217A0C0163E34AA75C6572C9BDB5A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:60:02:a8:38:df:c7:0c:9f:44:3d:87:53:
30:e3:ae:d4:81:19:4e:e9:43:fe:c6:b0:4a:73:ba:
4f:cd:31:cc:20:70:34:1d:3c:74:1c:62:8a:e5:10:
26:6f:f9:4c:46:7a:d7:22:c5:61:a9:62:07:e1:ad:
d8:8a:ec:8f:3f:56:3d:b0:7d:3a:ac:c9:89:ef:aa:
39:3b:62:9b:41:ee:69:d0:42:f0:0e:de:14:5c:8b:
ef:78:01:31:d8:bb:9b:bc:8b:e7:13:27:2f:6e:74:
cf:b6:de:53:b0:30:13:92:fd:c2:21:62:a3:cf:89:
23:de:16:a5:cb:ef:65:7f:ff:be:d9:2a:b3:9f:8c:
ef:ec:f5:92:df:c6:d4:21:42:23:e2:7e:49:dd:46:
45:89:04:92:1b:39:98:3d:b7:73:63:31:c4:64:f3:
85:8d:2f:27:3a:8b:63:1b:2d:98:16:7f:49:c4:f0:
b4:8e:aa:c3:b8:cb:47:e8:d1:d4:c4:b5:8b:21:f3:
74:1a:7a:e4:ab:ba:39:2d:51:a3:ae:57:a8:54:e1:
ee:d3:ab:fe:d1:fd:b1:cc:6a:34:cb:37:9d:30:1c:
fd:33:96:fb:54:2c:a3:99:db:ff:9a:2d:e9:66:cd:
a7:27:2c:ad:79:36:b5:87:cf:c2:93:f0:a0:50:fa:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:87:87:C2:17:A0:C0:16:3E:34:AA:75:C6:57:2C:9B:DB:5A:07
X509v3 Authority Key Identifier:
keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:26:dc:01:07:f1:7e:68:02:0c:76:45:3f:cc:85:d2:36:
69:31:78:19:71:9d:93:7e:3a:67:0c:02:9b:63:e7:2a:4a:4c:
81:29:d3:83:09:d2:0e:35:db:35:38:b7:50:db:92:46:9a:a1:
e5:d6:e3:78:15:3f:e2:51:17:07:36:5f:4a:27:fc:71:f4:70:
3d:da:90:b0:36:95:93:cf:3b:ec:75:1f:8d:ff:55:d5:e2:ad:
0c:7d:dd:c4:a7:85:dd:31:7d:04:a0:96:59:88:cf:40:9d:50:
59:d1:14:6d:0e:14:5b:69:2b:ff:53:46:41:5d:3f:1b:a8:d9:
18:4b:46:20:fe:cd:bd:2e:da:b2:0f:1b:07:e6:87:fb:9f:77:
1c:bc:81:38:1a:70:d4:75:91:6c:4d:18:91:58:bb:48:98:4b:
9e:34:f1:d4:e7:ba:b7:d3:c1:42:55:83:d3:db:6a:61:91:11:
ef:63:bc:50:78:2c:ed:f8:29:aa:78:17:e6:49:f2:38:bc:87:
f4:98:fe:b8:85:9a:7d:93:6a:eb:57:bb:c2:9c:2e:fe:59:39:
03:a0:53:85:ef:3c:57:f1:62:35:7d:82:30:b8:01:a5:b6:55:
60:c6:8b:ab:67:9e:80:31:0a:3d:dd:5e:ff:fa:00:61:91:6c:
14:20:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:59 2026 by rpki-client