
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json)
Hash identifier: Y3q9NPzx9jTdrFBzBFYQvHGz58fW9zRZw0ZcMParujE=
Subject key identifier: 73:79:E8:10:E0:83:0D:E5:03:31:C3:3C:32:E3:0D:35:38:E0:4E:96
Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88
Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
Certificate serial: 30B7D0BEFFBF1097765EAA36FA1777E157A930F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
Manifest number: 0551
Signing time: Sun 01 Mar 2026 00:11:27 +0000
Manifest this update: Sun 01 Mar 2026 00:06:27 +0000
Manifest next update: Wed 04 Mar 2026 08:15:27 +0000
Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 3MTfqouQ1MuPqfis6qPmEFcU540wVfABN1K6CmqiH4w=)
2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=)
3: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl
rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 08:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b7:d0:be:ff:bf:10:97:76:5e:aa:36:fa:17:77:e1:57:a9:30:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188
Validity
Not Before: Mar 1 00:06:27 2026 GMT
Not After : Mar 4 08:15:27 2026 GMT
Subject: CN=7379E810E0830DE50331C33C32E30D3538E04E96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:a3:93:ec:81:7f:49:43:d1:c7:ff:65:91:
b3:5c:07:ce:ac:a8:4c:7a:cb:e6:e4:26:26:3e:83:
43:66:72:90:03:42:d1:04:9c:60:aa:bf:e1:26:9d:
54:6a:56:e8:06:ec:08:2b:82:dc:ba:66:a0:95:59:
76:ac:8b:d4:da:6b:05:20:b7:b2:64:82:39:43:25:
2a:f1:ed:23:81:c2:b0:b3:f4:2e:3b:89:8a:c5:bb:
e9:d1:37:06:fa:09:b5:f6:bf:20:6f:ad:52:8a:9f:
c8:d0:c1:8c:c3:94:66:7a:d7:7b:e3:6b:d4:79:57:
b3:01:e9:b4:c6:c4:be:3c:f4:51:1a:96:78:a9:2d:
39:c5:40:79:2c:34:8a:41:58:79:b0:bc:cb:9b:73:
07:60:fe:30:c9:e3:96:4b:22:33:f8:8c:42:fd:ca:
91:07:83:d9:b6:d1:d2:1f:5e:b7:da:fa:6e:47:20:
14:ca:83:d9:da:6e:57:9f:47:76:1c:75:04:d4:e5:
b3:8f:1d:ac:f3:fb:a0:a8:3c:1f:a1:87:bc:70:78:
41:9e:7d:d4:10:04:5d:01:41:7e:dd:a9:15:73:02:
2d:a6:c9:41:1b:b4:8e:07:fe:ee:ee:8e:16:11:c8:
c1:7a:e9:cb:82:6c:48:d7:52:3e:87:3d:dd:e5:c3:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:E8:10:E0:83:0D:E5:03:31:C3:3C:32:E3:0D:35:38:E0:4E:96
X509v3 Authority Key Identifier:
keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:3d:0a:d2:a6:33:2f:b4:8b:3b:0a:83:6b:01:c5:68:33:
28:43:ab:01:a2:8a:6c:6d:1d:b0:03:35:a4:c8:9c:3a:87:98:
38:22:4c:3c:97:e5:a5:bd:e7:db:8a:58:d4:46:a2:9c:1c:00:
d0:fa:0d:33:e2:a0:04:74:b6:b1:03:43:c2:de:5a:45:bd:37:
d9:d5:25:a8:d5:44:50:e4:36:65:c3:c0:77:07:a0:d1:0c:64:
44:0d:6b:00:44:73:12:33:25:8c:b9:d0:fb:cf:88:a4:dc:56:
6d:4b:88:0e:e2:91:1a:21:22:cf:c6:f2:e9:22:04:50:46:f3:
1b:12:20:e5:d7:77:4e:9b:9f:b8:a8:b9:08:42:35:d7:50:25:
e7:64:bb:53:b2:15:70:d1:01:fb:1f:2d:06:44:0e:c2:01:96:
4e:1b:85:2c:07:46:5e:6a:c6:b5:eb:40:7c:b6:e4:06:dc:51:
6a:6a:69:90:3a:21:50:e7:86:53:af:96:4e:fc:ce:ac:5f:43:
16:e9:73:ad:9d:77:19:51:8c:9b:bf:af:b9:57:ff:12:55:75:
51:cd:ca:3f:b8:c8:6a:f7:13:8b:ed:9b:ea:d1:3c:d0:a8:32:
93:ba:92:e2:70:e7:22:72:9e:a4:61:6d:3f:33:60:95:5c:6d:
eb:65:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:14 2026 by rpki-client