
$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
File: 07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json)
Hash identifier: 4NsQ2c91xKI2uZAaVEOwEB40sBDXHDoWGQz4nUL6KyU=
Subject key identifier: 50:5C:91:82:AD:28:B0:01:B1:DF:E2:F7:97:2E:7B:E1:39:53:9D:4F
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Certificate issuer: /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial: 2E05B23BCAB1BF70CD26B7AB8C024E32C2000538
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
Manifest number: 033C
Signing time: Sun 01 Mar 2026 11:13:04 +0000
Manifest this update: Sun 01 Mar 2026 11:08:04 +0000
Manifest next update: Wed 04 Mar 2026 14:46:04 +0000
Files and hashes: 1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: Dk+kadZF8jy8Jr2gvM5PjhVeLC3W+zlB4SeDi9Hh4BA=)
2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: XvudsJ65Sz+qPoabS8oxtwRaUz34vvosAucvzW7cd9o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:05:b2:3b:ca:b1:bf:70:cd:26:b7:ab:8c:02:4e:32:c2:00:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
Validity
Not Before: Mar 1 11:08:04 2026 GMT
Not After : Mar 4 14:46:04 2026 GMT
Subject: CN=505C9182AD28B001B1DFE2F7972E7BE139539D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:d9:d2:2d:67:0a:c7:9a:e4:ef:97:b7:e5:
40:ba:2d:5f:08:40:7b:9f:a5:e4:17:12:06:9b:63:
6e:d2:4c:67:d9:e9:68:5c:52:4e:e6:b6:8f:67:c6:
55:53:db:f1:55:f8:78:fb:f2:5f:79:97:2b:d0:ac:
aa:bc:64:29:23:0d:75:bc:1c:83:9f:81:14:d3:96:
ba:99:17:bb:84:94:d2:8c:47:52:35:4b:7e:67:08:
82:bf:24:a8:b9:65:f7:6a:b6:d2:b0:c4:61:35:19:
79:ee:d3:6e:2c:32:d8:15:d9:51:02:53:40:32:54:
2f:80:01:64:06:69:66:59:1e:55:a6:ec:01:f5:5f:
78:1a:ec:23:68:08:b5:12:8c:22:52:b6:f5:60:c0:
02:92:65:42:e2:76:5e:c7:57:a7:c4:b1:33:25:80:
9b:75:b5:02:0e:4e:7a:41:1b:fa:10:9a:93:4c:06:
7b:18:88:f8:a5:8b:f4:80:05:2b:e2:9e:bd:e5:a0:
18:99:c6:41:62:33:7e:26:87:a3:c8:30:ad:00:ee:
61:89:2f:6e:d6:52:2d:13:6a:02:05:44:3b:b4:2b:
1a:25:22:81:c9:fd:6c:e9:fb:0f:52:94:01:77:e7:
70:10:42:32:f3:5f:0d:d5:8b:cd:fc:52:69:9f:a6:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:91:82:AD:28:B0:01:B1:DF:E2:F7:97:2E:7B:E1:39:53:9D:4F
X509v3 Authority Key Identifier:
keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:db:e5:b4:4c:30:89:1d:27:03:e2:42:55:3a:55:eb:29:
91:c7:8d:7f:6c:f1:f6:a0:44:c8:25:a8:ab:b0:3a:c7:c3:2b:
b5:af:51:90:a2:c4:f9:2b:2e:e7:cc:af:3f:60:b5:ce:51:74:
24:5a:58:4d:17:fe:e8:d9:7e:f4:68:cb:34:00:98:c8:72:bc:
05:e8:f3:bf:f0:b3:be:b8:ea:98:8e:f6:27:53:c0:26:e3:46:
4f:0a:0e:e5:0f:6e:54:2c:8c:ee:96:65:9a:28:5b:5d:f0:50:
93:f5:b3:bc:4e:d2:b0:3c:f1:fc:1b:d0:75:4c:28:38:8c:20:
0a:43:b8:2f:64:d3:d4:39:b0:6f:df:e4:ad:a3:22:88:db:83:
3b:bc:96:ef:ac:ea:c2:a3:0d:1e:5a:bb:c5:9d:3a:46:76:02:
19:2c:e6:90:8b:3e:44:f6:63:86:cb:8a:f6:05:55:ab:87:a9:
57:8a:67:09:df:0d:6f:b8:ac:a0:f6:45:0a:7e:0e:12:6a:af:
c8:7b:aa:5d:5e:2a:eb:7e:9a:9d:a9:43:7e:d7:88:5d:3e:05:
f4:7e:cf:b8:15:e5:34:7f:07:b0:a1:4a:47:76:8b:4a:a6:a5:
c4:0d:e2:14:5e:46:ef:c3:e5:61:9d:65:c1:6a:dc:55:fd:8a:
c6:ce:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:22 2026 by rpki-client