
$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
File: 755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json)
Hash identifier: 82nPoFZkU4kzMkF/PavSmKKrbnSxe20wrNX0W/4dFHM=
Subject key identifier: FA:0E:FE:0C:96:B8:B8:A4:C4:F3:33:BB:3F:BB:8D:83:08:74:17:A3
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial: 15E31E6FDA43974A5FD8420A93C8C0BE01B31DC1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
Manifest number: 021C
Signing time: Sun 01 Mar 2026 08:41:20 +0000
Manifest this update: Sun 01 Mar 2026 08:36:20 +0000
Manifest next update: Wed 04 Mar 2026 14:12:20 +0000
Files and hashes: 1: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: 0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=)
2: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: OtnuZnBYA/uSUocxG3Zgx8AFDKqaMfzATo6BEZ40pHg=)
3: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8=)
4: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e3:1e:6f:da:43:97:4a:5f:d8:42:0a:93:c8:c0:be:01:b3:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Validity
Not Before: Mar 1 08:36:20 2026 GMT
Not After : Mar 4 14:12:20 2026 GMT
Subject: CN=FA0EFE0C96B8B8A4C4F333BB3FBB8D83087417A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:99:df:de:94:f8:63:25:21:68:7a:0c:54:
ca:e8:1d:60:64:9f:7e:81:55:d3:dd:c6:cd:ac:0c:
15:16:b3:88:cf:09:9f:4f:98:2b:0d:36:75:7d:44:
16:d8:10:59:c9:0b:00:91:05:be:a4:0c:ec:38:c9:
e6:88:3e:d6:78:69:cb:7a:51:d1:e8:8d:c8:cd:b6:
be:50:38:0d:73:3d:42:f0:38:6c:3a:e4:d4:82:9b:
cb:0c:a3:74:49:68:6a:14:f8:f5:c1:26:b9:44:fe:
05:8a:be:db:dd:4f:97:ca:a1:67:5e:a0:19:8e:93:
ab:e3:e9:cc:5b:c2:1f:30:0f:9b:b0:bd:0a:63:99:
9d:1a:dc:8e:ef:16:98:f7:67:46:bd:a5:66:37:36:
e8:e1:91:72:ab:bb:08:5b:1a:f2:26:1d:95:28:c6:
b4:d8:d5:33:cd:e1:42:40:c7:3e:5f:27:68:b5:af:
80:27:59:db:68:0c:e4:7e:0f:2f:69:37:74:81:d9:
f3:72:62:f2:2c:1a:8f:1a:64:62:56:c6:77:c4:6f:
10:c4:a6:5f:aa:45:ab:42:8c:18:3e:af:ca:e2:6e:
b1:14:f4:ee:c1:75:b4:e8:2d:c9:bd:87:83:cf:98:
27:6b:f5:e4:c9:4b:01:b4:a4:14:3b:94:17:6a:82:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:FE:0C:96:B8:B8:A4:C4:F3:33:BB:3F:BB:8D:83:08:74:17:A3
X509v3 Authority Key Identifier:
keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:98:5c:04:ba:63:50:98:8a:e6:6b:59:d0:85:45:6c:a6:
1a:f2:f7:c4:78:46:44:7c:66:74:60:86:18:42:ca:42:96:1d:
fd:6a:04:89:36:61:73:29:eb:4c:9a:34:bf:f3:b3:23:24:53:
16:90:82:7e:88:6f:68:0b:66:75:f9:cc:c2:73:d2:3e:3b:97:
fd:f4:26:a6:19:56:c6:10:bb:59:63:5c:4d:08:21:85:c8:fc:
6a:f4:50:77:23:03:ac:0e:d0:1b:f7:b0:48:93:33:b5:e2:a0:
d6:8b:14:2d:31:12:b0:2b:5d:0b:36:63:14:02:70:ea:06:d1:
bb:33:51:97:d9:5e:c7:e6:15:bf:6d:bc:5b:18:a0:11:5e:ee:
48:36:12:4c:7b:a7:1f:1c:e9:06:b6:f3:f9:1e:8b:41:6d:c9:
ab:fc:03:d0:a9:9e:78:bd:b8:cd:7a:6f:30:9b:a8:f6:44:14:
2a:16:9d:80:db:49:f7:34:00:9b:cc:46:87:d9:db:a1:42:16:
d7:95:45:b6:92:bd:08:78:59:c0:3b:4d:44:c1:db:d3:02:fa:
96:82:bd:ae:5e:f3:1e:48:5d:ed:18:52:0b:b5:33:4d:63:e4:
55:ce:04:16:77:3f:72:67:31:25:50:5c:a9:46:39:00:f9:44:
40:78:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:18 2026 by rpki-client