
$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json)
Hash identifier: GqMA9IzsNBwo9Pb/Zj6S4oFoNthwC2yfBVJug/5fQyM=
Subject key identifier: 47:9A:9F:60:C8:37:86:2A:DF:98:6C:56:95:68:4C:0A:78:85:0B:5C
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial: 06E4DCC31C73971F85C454F2307F10E96A3138B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
Manifest number: 051A
Signing time: Sun 01 Mar 2026 14:30:04 +0000
Manifest this update: Sun 01 Mar 2026 14:25:04 +0000
Manifest next update: Wed 04 Mar 2026 20:14:04 +0000
Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=)
2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: K2BHvHOswNyTOCHKSwiuhrajUDBtUHgOGImx+1lKe1Y=)
3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e4:dc:c3:1c:73:97:1f:85:c4:54:f2:30:7f:10:e9:6a:31:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Validity
Not Before: Mar 1 14:25:04 2026 GMT
Not After : Mar 4 20:14:04 2026 GMT
Subject: CN=479A9F60C837862ADF986C5695684C0A78850B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:1c:f9:ec:22:47:a8:97:b4:b9:a7:14:11:
c2:92:f1:f2:7a:84:7e:b2:45:e9:0e:93:92:1b:1e:
5d:54:6f:c6:01:f5:9a:91:9f:df:e0:7d:38:5e:be:
fc:fd:6b:4e:80:0b:02:07:7e:42:0b:30:03:d6:5c:
20:a0:c7:22:cd:da:ab:89:d5:70:69:80:71:23:47:
f9:ad:33:ad:d0:d6:72:4a:d7:1e:33:40:6b:ef:03:
9e:b4:1e:04:e1:03:4c:4d:0f:30:8f:00:8e:41:16:
06:0d:00:7a:9b:98:c9:a8:c5:42:1e:20:08:43:23:
80:cf:1c:f9:af:d7:c5:3e:b9:73:be:b4:5e:22:a1:
c4:fb:01:92:12:34:67:84:fa:6c:11:dd:5c:97:c4:
16:08:e6:86:65:ca:a1:dd:a0:30:71:f8:2f:80:cf:
96:81:31:df:eb:a0:46:c1:aa:94:6d:46:f5:35:26:
38:8b:aa:dc:2e:58:7f:ea:26:3d:4c:6b:42:8c:36:
b1:c7:92:0f:a0:f2:74:5e:c7:b0:00:41:ba:4a:72:
bc:47:a4:75:b4:35:9b:0f:c4:b9:64:50:72:0f:52:
99:76:bb:4e:88:9b:f2:ab:01:75:7d:6c:c2:a6:3c:
cd:89:d6:6a:d0:9a:36:1d:7c:26:0e:af:cd:53:a7:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:9F:60:C8:37:86:2A:DF:98:6C:56:95:68:4C:0A:78:85:0B:5C
X509v3 Authority Key Identifier:
keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:c0:23:d8:6a:36:27:c7:8b:86:c3:11:48:78:03:a1:d2:
1a:d4:a3:be:4a:67:93:94:cd:a2:77:23:78:f1:8a:3d:45:8c:
57:36:16:17:10:28:e2:f2:dd:f0:b4:58:6e:f1:31:1d:cc:93:
d1:81:6d:e1:0e:20:3d:22:4f:1b:e9:65:48:3a:73:3e:34:c0:
04:ec:eb:fd:8a:bc:cc:52:62:1b:19:73:f6:b4:c8:02:20:2b:
d9:2e:2b:12:58:b7:00:a9:1d:04:3e:3d:90:66:e7:07:7b:67:
a6:c6:6d:d9:c4:2e:da:6e:9f:ca:4a:99:cc:a5:f3:c2:c5:8a:
57:69:e1:8b:6a:c7:05:4a:3e:f9:08:2a:73:ec:59:c6:0d:ba:
ec:1c:02:17:ad:f5:e7:14:88:b8:6f:ce:72:2a:0e:db:c1:d1:
aa:04:32:e2:21:87:e0:49:56:cf:85:00:10:f8:15:87:81:6e:
75:2e:23:29:a6:19:ab:93:ac:24:fe:9b:b5:7f:75:a5:46:d6:
95:01:13:04:25:0c:5a:b0:b6:1e:30:d9:3e:7b:58:4b:cd:ae:
d4:1a:b3:10:01:a3:cf:b5:14:26:82:58:a5:5a:cb:6a:93:e8:
0e:dd:45:e6:1d:b8:e9:6c:88:25:84:fc:e3:c7:62:fc:a3:70:
89:d7:a0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:58 2026 by rpki-client