
$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json)
Hash identifier: bSHqYECi1gk8ESibTLdx7aqjlEoO4auy7HfQiHqKgbk=
Subject key identifier: 20:44:D8:D2:E4:9F:9B:ED:05:71:A2:1B:B3:67:67:62:99:D9:5B:DF
Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191
Certificate serial: 68A83F91A79A64ABD044087245BED3FDAE012BA9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
Manifest number: 0320
Signing time: Wed 05 Nov 2025 11:00:50 +0000
Manifest this update: Wed 05 Nov 2025 10:55:50 +0000
Manifest next update: Sat 08 Nov 2025 13:20:50 +0000
Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=)
2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: gNcFsDg4Ub+G0Ap+7Y4M0jOLgLA9hqdlL+AYNARR2H0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl
rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 13:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a8:3f:91:a7:9a:64:ab:d0:44:08:72:45:be:d3:fd:ae:01:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191
Validity
Not Before: Nov 5 10:55:50 2025 GMT
Not After : Nov 8 13:20:50 2025 GMT
Subject: CN=2044D8D2E49F9BED0571A21BB367676299D95BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:b8:22:cf:41:62:2a:26:1e:49:4f:2a:71:
0b:d0:65:ae:e8:5b:66:e8:31:f9:38:79:92:f2:ab:
ca:8a:ca:0b:d9:62:29:42:12:ec:a2:15:ea:33:ea:
3a:42:f9:59:93:23:e2:96:03:f4:1e:17:e0:c9:a1:
f9:50:c9:bd:44:57:8f:52:a7:7d:75:fb:9b:a5:37:
06:e2:1d:d1:74:9d:54:64:72:b0:9e:12:87:86:52:
5a:ee:60:d9:47:41:eb:64:33:92:d7:a3:7e:29:be:
c7:f6:50:8f:f3:48:ce:86:f8:96:b6:d9:6e:26:9f:
e1:44:b3:05:5c:12:29:6a:a3:7c:2e:9f:5a:9d:d5:
5d:ae:85:d0:93:38:d9:56:14:4e:32:fe:70:d3:2b:
7c:79:05:a5:13:7c:74:3a:1e:e1:1a:62:af:46:ac:
fa:e2:3e:56:cb:ef:9b:31:43:38:5a:e1:9e:42:5e:
a9:27:58:b2:38:56:81:0c:d5:f3:25:67:3d:09:0d:
10:57:dd:d4:d4:ae:46:ba:7a:78:ba:bc:bd:5b:0b:
3c:4a:3e:22:e3:53:f0:36:a9:d6:34:19:9c:8d:b0:
62:9b:bc:81:e5:ac:1c:c0:8c:aa:53:42:b9:6d:b3:
5e:5d:63:43:4a:d8:32:f6:ad:1c:67:17:a0:6e:ce:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:D8:D2:E4:9F:9B:ED:05:71:A2:1B:B3:67:67:62:99:D9:5B:DF
X509v3 Authority Key Identifier:
keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:b9:2d:39:fa:16:e5:4b:a2:28:8e:6f:f1:de:6e:85:5c:
87:44:f3:e0:b3:d4:82:71:52:fc:6b:62:d8:20:a8:18:07:4f:
37:0d:32:6a:d4:2a:f4:9c:bf:f1:04:9c:0a:3b:80:ec:94:fe:
8d:88:db:ac:3d:b3:ce:91:9f:f1:17:0d:79:2c:c9:a0:3c:26:
c9:88:ea:17:05:d1:e5:2f:9f:f0:1c:52:69:b8:90:76:cc:4f:
64:2a:ba:39:bd:61:27:f3:07:59:59:66:f0:4f:ea:10:ff:9b:
29:7d:41:c2:92:ad:98:3f:f4:81:cf:93:39:e5:84:4f:2c:99:
3f:15:c8:4f:9b:b8:3b:e3:fe:25:a5:81:ba:80:ff:8d:36:cb:
7d:f6:bf:89:03:52:d8:42:cb:4a:c8:74:be:d1:74:d2:14:8a:
3b:65:aa:4e:a4:dc:cd:4d:7d:0b:3c:87:19:c2:4d:17:af:54:
bb:97:7f:2f:6c:dc:b2:5a:5a:22:d4:cc:49:c9:34:cb:0f:ba:
20:81:26:d9:9d:39:c0:7b:76:4d:0b:54:93:63:df:ea:67:46:
c8:ac:4b:48:50:98:6a:37:04:e7:b3:f5:a2:27:e0:8f:38:57:
b0:a8:6f:56:e5:d0:ef:0f:6c:a0:52:95:78:dc:ad:c2:c6:87:
d6:92:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:08:53 2025 by rpki-client