
$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier: Skhw72H9KDY0ulzxvLrV9r8FYRsmmi7SMXgi7SNGwdQ=
Subject key identifier: 5D:1A:01:3B:51:D6:0B:CE:B7:5C:84:D9:6D:1A:81:CD:56:C4:4A:43
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial: 0E7D463BBCE8E66E809B33A89E2347B9BD8F5B14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number: 0100
Signing time: Sat 28 Feb 2026 03:21:23 +0000
Manifest this update: Sat 28 Feb 2026 03:16:23 +0000
Manifest next update: Tue 03 Mar 2026 05:32:23 +0000
Files and hashes: 1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
2: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: 7YsNBuwPmfYEzH+gCTpc4fzhKoI000siuiyB2eBX78s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 05:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7d:46:3b:bc:e8:e6:6e:80:9b:33:a8:9e:23:47:b9:bd:8f:5b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Validity
Not Before: Feb 28 03:16:23 2026 GMT
Not After : Mar 3 05:32:23 2026 GMT
Subject: CN=5D1A013B51D60BCEB75C84D96D1A81CD56C44A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:21:69:69:3c:1f:05:e5:6d:27:a5:ac:17:
11:4c:67:a2:15:d2:8b:fb:19:8d:a6:2d:96:a0:e5:
f6:b2:83:7d:81:89:93:2f:36:b1:b8:5d:5d:08:02:
01:bf:32:7e:a6:74:23:0e:63:d1:ae:ed:90:d9:e2:
d2:0f:bc:f8:b1:4c:a3:e2:9e:5f:5c:03:80:26:c6:
76:a7:6a:d1:06:24:a3:2e:d2:ca:24:d8:ce:3f:5c:
27:25:c1:11:8f:3a:f2:c7:63:2c:84:60:5d:aa:f9:
11:d4:03:74:41:46:9a:fe:eb:93:76:df:e7:bc:ee:
08:4d:ea:31:8a:5d:b5:b9:bb:63:70:08:0c:bc:75:
ec:17:61:38:97:31:4c:43:ce:78:72:85:a8:c5:fd:
4d:dc:ea:8f:86:a9:df:8f:2f:72:10:e8:11:b7:90:
f4:ae:b9:46:7b:ce:24:62:87:5c:37:0c:af:5a:bb:
6b:6a:61:f1:68:4e:ca:bc:75:86:29:94:12:8a:49:
71:f1:ec:32:ac:ae:8a:b2:52:09:30:fe:81:23:a6:
4e:d0:ad:6c:3b:d8:03:8f:5a:37:2f:8f:a7:63:fe:
aa:c3:96:9e:d2:ba:ad:87:f8:23:e3:b8:40:55:8b:
4c:29:a1:80:90:c8:9d:ab:0a:1a:84:b6:4f:b3:e9:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1A:01:3B:51:D6:0B:CE:B7:5C:84:D9:6D:1A:81:CD:56:C4:4A:43
X509v3 Authority Key Identifier:
keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a2:be:38:32:1f:68:2b:de:b7:e9:bd:ea:fd:64:32:7d:48:
a0:53:db:a0:3b:2b:7f:60:19:98:a4:57:92:e3:5a:21:26:05:
4c:ef:5d:fb:03:4a:a3:d4:a4:ac:f9:17:fd:86:aa:ea:ef:e8:
82:72:25:4b:78:a9:9d:f9:01:46:e6:ca:cd:6f:9a:cd:93:fd:
f5:a9:e9:34:dc:57:00:9f:6d:f9:fd:86:af:7c:5b:24:59:4c:
a3:28:ea:48:83:30:a8:77:d4:d6:85:f3:da:a7:51:03:aa:3d:
f7:e3:c5:ec:60:02:c7:f9:05:a8:0b:33:07:0a:00:df:11:6a:
fc:0e:06:ec:7a:22:f4:94:6e:81:96:61:cb:93:43:77:f6:f7:
eb:ae:ab:c1:3d:e4:0a:fd:5e:7b:e6:84:a3:53:f5:40:a3:4f:
ed:54:3d:12:8a:e8:3d:c0:6c:2b:f9:db:5d:1c:cb:8e:7b:b6:
2c:32:42:82:60:58:be:bc:12:78:ad:91:22:69:67:95:b2:ca:
b0:30:40:b1:6c:2b:c7:12:e8:51:89:01:35:bd:44:39:f0:5b:
1c:b1:10:a7:50:37:bd:4b:76:09:ee:d3:c0:67:68:c4:3a:8f:
62:77:12:a7:37:a1:0a:58:b4:c2:7d:03:ee:eb:37:3e:87:b9:
52:71:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:08 2026 by rpki-client