
$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier: Ms3ZdrIL5+mFQ9WSJx5hfkipSUUFQvFIoqX2tvMXb3c=
Subject key identifier: D3:92:F4:5C:25:22:DB:11:80:0B:A7:D5:CB:D5:90:46:6B:3D:71:BE
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial: 4CCC5C2041D091715F86CA37E9542E70CB223BFD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number: 01BA
Signing time: Sat 28 Feb 2026 23:11:18 +0000
Manifest this update: Sat 28 Feb 2026 23:06:18 +0000
Manifest next update: Wed 04 Mar 2026 04:17:18 +0000
Files and hashes: 1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=)
2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: /+JyO9Qf5Fw9ACt4xxwyKAAFFUy7uzNAygCiKKvWRfc=)
3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cc:5c:20:41:d0:91:71:5f:86:ca:37:e9:54:2e:70:cb:22:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Validity
Not Before: Feb 28 23:06:18 2026 GMT
Not After : Mar 4 04:17:18 2026 GMT
Subject: CN=D392F45C2522DB11800BA7D5CBD590466B3D71BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:7d:88:ba:75:8e:64:e3:9c:a0:12:e9:92:
69:5e:b9:8d:9d:58:af:12:f8:22:d1:13:96:37:fb:
ab:8c:69:3a:e8:93:dc:e4:6b:85:43:5b:67:a8:d3:
c5:e9:0b:12:0c:84:f6:b1:f7:83:85:98:f9:ce:c8:
1e:d6:22:2a:95:9a:4b:43:b1:6c:77:2d:b4:fb:2d:
62:44:89:e0:4c:f8:83:34:96:e6:85:fb:43:91:fd:
6b:6b:d0:e3:0e:97:c8:95:3d:f9:f9:d6:63:b4:46:
1e:87:1f:86:30:68:8f:30:5e:fa:6b:74:9e:7d:4b:
50:e0:5b:e4:fc:92:96:fd:16:0a:43:1a:88:e2:ce:
51:71:2b:cc:60:7d:83:b4:43:e7:ba:62:03:43:82:
2c:06:df:91:43:e5:c8:c9:fc:c5:ef:32:c8:48:aa:
58:e4:0b:82:3e:89:dc:24:a6:6d:20:ad:6c:dd:83:
0e:ea:22:20:a1:6a:38:bd:dd:ce:eb:2b:17:84:ad:
55:cf:12:d2:2b:7e:33:5e:76:a4:36:72:4b:e4:17:
a0:90:f6:b3:61:55:f8:9b:8f:a5:83:9c:6e:81:8b:
ad:07:69:c6:bb:36:c1:89:d3:c4:a5:ef:11:57:e8:
7e:0b:0e:25:6b:58:46:9b:42:3f:96:02:08:68:b7:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:F4:5C:25:22:DB:11:80:0B:A7:D5:CB:D5:90:46:6B:3D:71:BE
X509v3 Authority Key Identifier:
keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:21:7c:1f:41:40:86:6f:0a:6a:79:93:91:2d:de:d8:19:f9:
25:c6:65:d6:c7:75:9b:03:fa:39:6f:55:88:37:1b:eb:ab:93:
f9:a6:f3:65:dd:f1:7f:f9:87:e2:5a:9f:53:a5:4d:0a:17:f3:
be:04:dd:ed:f4:8c:be:d6:0a:fc:1e:7a:71:28:77:77:43:de:
e1:62:d9:26:a7:bd:98:36:5f:9d:af:58:16:8c:12:45:2f:24:
5c:58:2d:31:1f:a8:84:6f:90:56:c8:4e:be:49:e0:e3:88:f1:
6e:ff:f8:80:27:c1:b2:4a:8c:98:95:a8:25:d3:00:d4:ba:1f:
3a:b4:f3:06:25:67:19:5d:f8:1c:b2:8d:8c:28:e7:46:fb:16:
46:4e:e9:34:90:2e:73:f3:c3:3f:28:fc:04:01:80:30:83:c8:
2f:89:9a:3a:12:17:e9:52:f5:06:93:6d:ef:84:d9:b0:b1:19:
e3:90:4a:fa:33:ca:b3:2d:3d:b7:1a:0f:87:df:0d:81:52:46:
b5:42:be:8b:02:16:97:b4:1a:cf:03:c9:56:1b:39:cb:2d:7a:
e0:61:21:c6:ea:a4:30:57:f9:6d:95:fb:d0:f5:aa:7d:72:c2:
7e:21:62:a6:05:44:dd:74:a0:35:6e:2b:2f:0f:2f:6e:bc:cc:
a4:55:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:11 2026 by rpki-client