
$ rpki-client -vvf repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
File: 053084D88D32CFF591DBCBF3109B9137C3E74648.mft (raw, json)
Hash identifier: ekjgfg22a97NpElUfCIQLwj4wLtUs/oDdl5L5LqtW/U=
Subject key identifier: 72:E3:63:83:DB:43:94:6A:3C:C0:1F:FD:5F:B7:FE:F6:68:5F:30:A4
Authority key identifier: 05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
Certificate issuer: /CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Certificate serial: 702BBCFEAC5D63FF035BFABB20EE7B6F281B142A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
Manifest number: 01B3
Signing time: Sat 28 Feb 2026 14:22:27 +0000
Manifest this update: Sat 28 Feb 2026 14:17:27 +0000
Manifest next update: Wed 04 Mar 2026 00:04:27 +0000
Files and hashes: 1: 3130332e3230352e36322e302f32332d3234203d3e20313530393932.roa (hash: x0rdzW+Z+6mUhvRC+qwoD+PtRMhNjhgY1WA5KetHwXU=)
2: 053084D88D32CFF591DBCBF3109B9137C3E74648.crl (hash: rs4Exg21CxZZaD6T5/y9LuklkgE8phCf+E+wOThDiM8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2b:bc:fe:ac:5d:63:ff:03:5b:fa:bb:20:ee:7b:6f:28:1b:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053084D88D32CFF591DBCBF3109B9137C3E74648
Validity
Not Before: Feb 28 14:17:27 2026 GMT
Not After : Mar 4 00:04:27 2026 GMT
Subject: CN=72E36383DB43946A3CC01FFD5FB7FEF6685F30A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:f6:76:d9:79:b2:ca:cf:3c:f0:5d:1c:1c:
20:39:2d:ff:45:7f:8a:99:ef:38:8d:64:06:f9:27:
78:c8:47:9e:d8:a6:8e:d5:82:5f:bd:c1:6b:45:3f:
69:8a:10:60:3a:d0:4e:d7:fc:8d:22:fc:94:06:5f:
af:e9:9c:17:78:52:fb:fb:77:cf:01:5f:94:12:84:
af:89:04:b5:66:22:00:fe:0a:10:96:fd:50:e1:7e:
7e:a4:cf:ee:ca:b3:91:98:66:a7:a9:1e:79:33:d4:
25:2f:6b:20:8c:e6:37:7f:f7:c8:0a:30:3f:00:4f:
b9:26:7e:d6:91:af:d9:b0:6e:f5:83:4a:c4:66:e0:
70:4c:f8:ad:21:8f:73:83:94:14:f3:15:0b:e0:b2:
9d:f2:24:0d:ae:e1:a2:d1:06:4b:f6:c0:a4:d1:f5:
1f:67:7c:33:60:3a:52:0d:bd:6d:2d:4a:e8:0b:73:
28:0d:a0:2c:be:5b:fd:1e:1f:7c:ea:d4:d4:24:e9:
77:58:7c:b6:36:29:bc:5b:dd:c4:c3:7c:b8:70:10:
48:2e:74:e9:06:aa:d5:09:75:56:85:46:95:f8:8a:
40:c2:96:b6:cc:b3:46:ef:3c:70:60:a8:7a:81:97:
fa:a8:20:51:83:8c:5b:2e:ab:4d:5c:b0:44:d9:da:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:63:83:DB:43:94:6A:3C:C0:1F:FD:5F:B7:FE:F6:68:5F:30:A4
X509v3 Authority Key Identifier:
keyid:05:30:84:D8:8D:32:CF:F5:91:DB:CB:F3:10:9B:91:37:C3:E7:46:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/053084D88D32CFF591DBCBF3109B9137C3E74648.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34079bef-7f7d-43cd-927f-d5cf59a0b0fb/0/053084D88D32CFF591DBCBF3109B9137C3E74648.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:a3:1a:01:00:1b:dc:68:7f:9a:97:27:4d:f9:ae:21:42:
0a:e6:3e:95:2a:f1:d1:c8:2f:ae:59:af:8f:1f:af:25:9f:7a:
8a:95:44:0b:2d:78:04:b3:ac:51:21:22:c1:49:bb:41:80:e7:
4d:7a:8f:b4:62:d3:c2:d7:e4:66:99:45:82:9f:b5:5b:20:74:
2a:f7:eb:5b:f8:4f:bc:e8:f2:54:e6:4f:70:1c:62:bd:79:92:
9c:85:2f:14:7e:19:2d:ca:ed:75:1e:fd:a1:70:52:f7:72:5d:
a7:a2:0f:c9:8a:ce:ea:fd:5f:a6:da:e7:aa:cb:6c:c7:8a:46:
42:a4:15:1e:bf:49:93:8e:bb:2a:0f:d9:59:db:29:1f:33:cb:
fd:39:9d:07:c1:f1:b0:d2:a6:11:7b:79:64:1a:1a:67:61:4e:
20:2d:44:66:d3:06:9e:04:0d:d7:bc:51:f2:67:d0:d6:d4:9c:
0c:31:e3:bb:df:f4:81:3d:6a:f5:1f:67:c9:09:16:85:eb:f9:
82:47:18:c1:aa:9c:5d:d4:88:be:0e:b6:83:46:6b:51:4f:d3:
fc:2d:cc:60:b9:7d:32:ad:9c:5e:66:71:b5:9e:fd:07:a9:50:
cd:50:31:d0:bb:00:22:cf:4e:c0:6a:ea:95:9c:2d:f4:d9:91:
0f:c1:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:34 2026 by rpki-client