
$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json)
Hash identifier: 7miOT/+DdoTW5Fi/gRqyCadrKDe8KpENzx56/Kez04E=
Subject key identifier: DE:68:85:69:FA:6D:9B:05:20:13:34:03:8E:A9:A0:6C:F9:7D:8E:E9
Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Certificate serial: 27D3B0EC41CA496A8FB6EEEAA42ADDBBFD9C460D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
Manifest number: 0555
Signing time: Sun 01 Mar 2026 23:50:02 +0000
Manifest this update: Sun 01 Mar 2026 23:45:02 +0000
Manifest next update: Thu 05 Mar 2026 04:48:02 +0000
Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=)
2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: TiDYdScLr3CpNE0YxWULmC8PHf2Imj3vkzquezxD5dM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:b0:ec:41:ca:49:6a:8f:b6:ee:ea:a4:2a:dd:bb:fd:9c:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Validity
Not Before: Mar 1 23:45:02 2026 GMT
Not After : Mar 5 04:48:02 2026 GMT
Subject: CN=DE688569FA6D9B05201334038EA9A06CF97D8EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:ba:24:54:33:79:76:b7:75:3e:c3:1e:b5:
41:1d:bb:36:85:2e:73:30:73:f0:8d:14:d6:a5:f2:
3b:4a:23:d8:17:f6:7f:a9:21:9b:74:ff:ca:6f:0d:
87:20:dd:5d:fb:ac:1a:ee:c2:3d:1c:16:34:7a:73:
8a:be:d1:1f:9c:40:db:88:64:f0:1b:4a:49:b6:75:
f6:72:24:8a:ec:ed:c3:a9:d9:80:83:1f:a0:34:f6:
e8:44:81:ee:a4:fb:47:dc:75:0e:bc:39:85:be:73:
8e:a9:30:8a:7b:bc:c1:22:43:b8:e5:08:9b:3d:44:
9a:9e:28:b5:2d:3f:ba:a4:75:f7:69:c0:69:d9:3e:
d0:d6:da:8f:68:05:fc:f5:53:fb:00:a5:40:18:6d:
4a:1e:c2:59:fb:3b:35:97:2c:30:c1:4a:b1:91:32:
6c:0c:3c:7a:94:f3:06:43:8d:52:55:7a:94:63:a4:
91:fc:3e:79:fe:73:aa:4d:d9:1f:78:ac:f5:16:12:
bb:6a:d9:ec:f1:ac:0c:92:8f:ed:e7:3e:52:17:82:
91:dd:99:d2:fb:70:ae:cf:ef:ca:22:b7:64:b3:f9:
46:c3:a2:f3:aa:48:67:67:e2:02:46:ed:ed:ce:73:
4c:14:2c:c1:28:6d:83:93:d3:b8:05:6e:0e:67:2f:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:85:69:FA:6D:9B:05:20:13:34:03:8E:A9:A0:6C:F9:7D:8E:E9
X509v3 Authority Key Identifier:
keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e8:90:d3:df:e1:71:7b:2b:65:af:ae:4f:07:91:d3:2f:4b:
0e:66:da:55:b3:18:87:62:fd:8f:e9:6d:a5:fd:20:d0:57:28:
e7:06:ad:c9:4c:80:06:8c:7d:97:26:e2:ed:12:72:ae:e7:23:
c1:01:ef:eb:ce:80:a5:cd:da:8a:c4:2a:03:cc:68:7d:14:a5:
46:ff:d2:22:56:06:6e:8d:72:68:45:30:a8:75:f6:db:be:e7:
bb:8b:e4:3d:5b:27:90:f1:b7:b8:ee:67:34:fc:ee:e5:02:67:
e9:df:d5:45:f8:95:ad:20:38:90:da:ae:74:2b:eb:a8:af:f2:
67:13:13:53:59:a3:df:46:e7:29:75:7f:7a:47:4b:23:fd:58:
fe:70:8f:75:4f:b7:e8:fe:5b:a2:9f:cf:0a:8a:51:11:d6:30:
1f:31:d4:ec:17:46:15:61:02:3b:27:6d:00:a4:e7:54:5a:df:
e1:af:5c:22:c0:69:01:f3:f1:34:e7:5a:e3:a0:06:a4:80:8a:
d1:ba:05:54:9c:58:f8:f8:9f:a2:06:e6:43:78:00:d1:12:10:
e7:d0:40:c5:94:49:8a:75:bd:02:2c:e0:d8:5e:67:b6:39:04:
1c:ce:7d:85:13:e9:c9:db:d1:4d:85:97:db:47:b6:4a:33:7d:
e9:95:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:29 2026 by rpki-client