
$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json)
Hash identifier: ZFni5TftkTYMqnJAD1Ye0lGE4otiYeMAoe1jPK4XgeQ=
Subject key identifier: 81:DA:07:F9:3A:A8:AD:87:1D:DD:27:EE:02:04:57:10:5E:AC:5B:18
Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Certificate serial: 2C1AC4FD703A514002B2FF9593DA20AA666521E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
Manifest number: 0233
Signing time: Mon 02 Mar 2026 17:21:58 +0000
Manifest this update: Mon 02 Mar 2026 17:16:58 +0000
Manifest next update: Thu 05 Mar 2026 19:19:58 +0000
Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: 18+Uxc1jSA4VQvLfyacGK/E/AyMbHRVeILdlLz0bvwI=)
2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl
rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1a:c4:fd:70:3a:51:40:02:b2:ff:95:93:da:20:aa:66:65:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Validity
Not Before: Mar 2 17:16:58 2026 GMT
Not After : Mar 5 19:19:58 2026 GMT
Subject: CN=81DA07F93AA8AD871DDD27EE020457105EAC5B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:f0:e7:36:39:5b:54:7b:b7:d6:a4:12:d7:
14:99:59:6a:0f:c0:35:d5:fb:68:8c:4e:10:fe:37:
9a:b0:69:03:5e:07:8f:57:68:d4:98:2c:15:5e:3f:
e4:ff:40:26:92:4f:31:1b:ba:75:11:c4:02:7b:9a:
9b:41:f3:f2:3a:7c:a0:7d:9a:8b:87:e3:d6:ec:f1:
97:06:37:64:9e:2a:68:24:5c:9b:dd:0a:4b:5b:d6:
d2:ff:ef:c7:67:39:0b:52:50:6e:c1:4e:eb:19:3c:
6d:d2:ea:24:6b:09:e0:cb:32:8f:ca:ad:12:39:67:
6a:4b:16:3b:2a:14:82:5b:00:7d:c5:ca:a9:e1:5c:
15:74:4a:1a:7b:95:74:1e:9b:f4:4a:d0:d2:93:54:
c8:38:bb:40:f7:0f:10:31:a3:4c:ea:13:46:ee:e8:
1e:59:5b:03:55:be:57:2f:6a:4a:5e:66:64:62:c6:
ed:b2:83:3b:01:de:f2:c3:a7:ca:91:cc:01:e0:d1:
32:34:f2:2f:08:ce:1b:fe:31:08:25:dc:cb:17:1a:
14:5f:fd:1c:97:73:7d:ea:b4:53:e4:40:df:8b:da:
1c:b7:cf:d2:89:b1:c6:c6:2c:d9:4f:c9:1f:bd:e9:
87:71:74:4a:d7:61:27:cd:cb:d3:3e:ec:c7:64:21:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:07:F9:3A:A8:AD:87:1D:DD:27:EE:02:04:57:10:5E:AC:5B:18
X509v3 Authority Key Identifier:
keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:24:16:95:b9:f5:da:25:88:16:d5:6b:35:6d:2a:db:b2:
31:74:98:d9:cf:bb:70:60:92:8f:ce:e8:09:16:21:d1:4d:87:
d1:fa:e0:4c:ef:1c:eb:63:fe:92:d5:c6:a8:bb:94:32:bf:53:
4a:f9:46:da:3e:19:aa:6e:04:27:91:b2:d6:9c:e8:92:90:1c:
00:02:e0:1c:fc:0c:29:44:03:72:f6:a0:67:78:a6:df:79:86:
6a:53:dd:74:a0:63:8a:d0:f8:dc:32:d9:3a:af:0c:a5:1c:15:
31:19:89:f3:3e:88:9b:15:fd:36:60:ad:dd:ef:af:20:27:94:
ea:71:de:16:bc:2d:53:4a:d6:f1:6c:c8:b0:60:52:43:7c:86:
9f:88:14:82:60:29:09:a8:50:ec:69:76:80:03:b5:3f:4b:1e:
8a:17:10:94:39:b9:01:89:4c:35:af:88:b4:7b:2d:b8:bb:a7:
a2:ec:49:8d:33:b7:38:f6:ca:67:b5:8b:56:2a:cc:c6:c1:f9:
9a:25:a4:cc:40:75:97:6e:64:28:f9:54:55:ed:e7:14:3b:eb:
93:d8:9e:c9:ba:0c:f6:24:98:af:a1:75:23:96:9b:53:26:2d:
38:c5:39:b1:f4:02:a4:c5:48:da:ca:2e:7a:cd:85:69:de:04:
e6:39:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:57 2026 by rpki-client