
$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json)
Hash identifier: U/HErBi+LIcP4mahR05yC9dJxaAI3JHl6poBxE9C+04=
Subject key identifier: 0D:01:A3:50:CE:7D:EB:33:35:AA:70:93:0A:40:CD:2F:98:8A:7A:98
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial: 240E37F2F191CEC7F597CAFFD6FEA9DDDEC4B7D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
Manifest number: 052C
Signing time: Tue 04 Nov 2025 06:42:21 +0000
Manifest this update: Tue 04 Nov 2025 06:37:21 +0000
Manifest next update: Fri 07 Nov 2025 09:15:21 +0000
Files and hashes: 1: 3130332e32382e3232342e302f32342d3234203d3e203538343832.roa (hash: 6xVTWVhJwHlTuupRqckmEH+2N+SG40cJCesUx/LAQVI=)
2: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: oU26K1WNdmD4+eVmiwc4bkVkpstGiJjSdrNC9yEyagk=)
3: 3130332e32382e3232362e302f32332d3233203d3e203538343832.roa (hash: 4fMJzq8Nq1YJP9z1+S+a93o7lbnttq7OojId/hUDTmM=)
4: 3130332e32382e3232362e302f32342d3234203d3e203538343832.roa (hash: znVQQu+fIshyxf4G9mODoMFhYbJt3eH/0GuMVl8IwkA=)
5: 34332e3235342e3132362e302f32342d3234203d3e203538343832.roa (hash: DbGnB1DqBC848hiKo1po0MqE4Gsa4J0OUdCykpEG2OQ=)
6: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (hash: hBuj8wbQYmHqntGj0o/eUNV+3o0v8DMJLG22gmNYBVk=)
7: 3130332e32382e3232342e302f32332d3233203d3e203538343832.roa (hash: 6VLiq/I44WcMCT+b35Hhj3WDvps84mPpDnwbEu/ZNyQ=)
8: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (hash: QBHhnk1VzpNswo5xP4biYnK0qXDI4z1xHEPaP9wifbk=)
9: 34332e3235342e3132342e302f32332d3233203d3e203538343832.roa (hash: iXtClCML1N9IxFKEnUu67jBHGm8QPJyw41HrxTVVN1g=)
10: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (hash: 9k0Dch7Ak/Z6QMfcr+CZARJzHwZAuvWS8RON6gwZ8+8=)
11: 3130332e32382e3232372e302f32342d3234203d3e203538343832.roa (hash: 9Ew1E8zQmp44/WcA6xsjn9DG+Pj2XFS0Nowbj2INal8=)
12: 34332e3235342e3132362e302f32332d3233203d3e203538343832.roa (hash: eZci8ugTs0KdDJxBSy4Gimtbte6tWVKKsSs87Z+r/R0=)
13: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=)
14: 3130332e32382e3232352e302f32342d3234203d3e203538343832.roa (hash: BGVByiTWnar+G9klrtY285yoFDo2RjE2YjBcwnHtPF0=)
15: 34332e3235342e3132342e302f32342d3234203d3e203538343832.roa (hash: q6ov1LjBJ1C3MscONi3jd31fdQpeg7xo73ISZgsB13M=)
16: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: MGTDiC9rge0OKJ3iv4ER7Wcue8qTGkvI7ogCJejFr5A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 09:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0e:37:f2:f1:91:ce:c7:f5:97:ca:ff:d6:fe:a9:dd:de:c4:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Validity
Not Before: Nov 4 06:37:21 2025 GMT
Not After : Nov 7 09:15:21 2025 GMT
Subject: CN=0D01A350CE7DEB3335AA70930A40CD2F988A7A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:91:0e:f9:44:30:ed:f2:2e:a0:06:44:a7:
a1:6a:8d:25:5c:07:71:e9:ce:92:94:7c:98:4c:e6:
72:e8:f5:a1:41:aa:83:7d:40:f4:f0:d8:91:03:7e:
fe:43:5c:60:ad:c9:38:1f:77:17:fd:1a:ac:71:dd:
42:59:c6:c2:72:a9:83:67:ea:50:46:3d:60:2c:c4:
89:fd:87:59:77:82:4f:8d:82:da:7a:34:20:3f:18:
b7:52:ec:d1:f2:2c:6f:7f:cb:0a:71:de:3b:46:da:
ad:d9:e7:31:7b:a0:60:df:d0:c6:79:37:1a:a1:5d:
d7:8c:a5:3d:cc:fb:98:65:d3:3e:d3:46:07:ca:11:
56:70:d1:8b:8f:2b:82:b9:f8:5a:87:80:58:58:12:
cf:2b:18:ea:1d:e1:3c:87:61:e2:c7:02:2c:81:46:
0e:67:5d:ba:6a:5d:ee:61:a1:0b:8b:4b:9c:a5:7d:
27:05:f9:cd:17:b6:d0:9d:8e:fa:e4:47:35:92:0e:
5f:60:b5:8d:d0:d4:eb:ff:fd:f6:47:22:f9:d4:50:
05:8b:1e:7e:6d:21:16:4b:9f:3b:70:a4:fb:b2:3a:
bf:a9:06:de:ff:a8:d1:25:90:c4:f2:dc:57:c5:d9:
25:a7:3b:3b:f3:82:bd:6b:e8:0a:04:01:3d:36:54:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:A3:50:CE:7D:EB:33:35:AA:70:93:0A:40:CD:2F:98:8A:7A:98
X509v3 Authority Key Identifier:
keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:c7:dc:b6:5d:93:4c:5e:fc:44:5f:2c:80:6c:57:04:55:
e7:9f:7f:10:ef:0c:e9:b1:d6:be:2c:7f:ff:3f:11:92:21:82:
af:69:20:08:59:e5:8a:f1:bd:bd:98:c5:9c:b4:2b:79:1d:56:
85:f9:b3:a8:b4:01:78:e8:3b:f4:b0:69:15:34:32:6e:ef:37:
f7:c9:71:89:fa:ff:71:d0:2d:aa:d5:11:50:0e:ed:71:41:39:
85:9d:9e:cd:63:78:8e:64:7f:57:4d:b1:01:2f:d7:81:d5:e7:
83:f1:c1:f3:8c:67:4e:d0:1f:0a:84:97:7b:54:aa:39:91:be:
ff:c1:13:8b:3d:f6:d6:17:8f:0f:68:de:c9:a3:16:22:7a:3c:
4d:01:c4:cc:f0:5a:27:17:2c:34:c6:a7:75:17:1b:8c:64:01:
dd:83:e3:a4:5a:7f:06:fd:8b:30:4e:49:6a:1c:aa:6e:bc:e6:
40:64:4f:8c:f9:13:bf:ce:28:5d:eb:e1:1e:c6:ea:d7:64:b8:
95:17:6c:7d:84:2f:d6:37:c0:6d:de:b8:98:bc:a8:e4:12:71:
6c:70:9a:89:cf:d6:6b:d8:ff:00:e5:0e:aa:96:8a:e8:39:ed:
84:dd:3a:14:60:1d:71:e0:bb:7a:a6:65:b7:9c:6c:03:94:51:
f6:fe:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:29 2025 by rpki-client