
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
File: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft (raw, json)
Hash identifier: PItEmQj/hjZOaMDMXf264C5AM786eHvEHa0M0XbqHpE=
Subject key identifier: 1D:DB:03:0F:DD:A0:7F:0B:68:10:37:B8:49:76:24:90:3D:AB:7C:4B
Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
Certificate issuer: /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Certificate serial: 05872AE669ECFFD899F90600E9E253DED6F03C05
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
Manifest number: 01FD
Signing time: Sun 01 Mar 2026 14:42:10 +0000
Manifest this update: Sun 01 Mar 2026 14:37:10 +0000
Manifest next update: Wed 04 Mar 2026 16:20:10 +0000
Files and hashes: 1: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl (hash: NNBao0XgFPHX8ViBUCvdjgNCR33r5V/9URLOxDSvAdM=)
2: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: dOmtQ8xQIM/OxqNbVqEyr7os+kU4sc0vVqyQb/jy+M4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 16:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:87:2a:e6:69:ec:ff:d8:99:f9:06:00:e9:e2:53:de:d6:f0:3c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Validity
Not Before: Mar 1 14:37:10 2026 GMT
Not After : Mar 4 16:20:10 2026 GMT
Subject: CN=1DDB030FDDA07F0B681037B8497624903DAB7C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:5f:a2:99:b3:d7:76:35:f2:d5:e8:6c:53:
6f:fc:fc:35:a2:68:e1:ad:6b:d8:6b:be:9b:a6:0a:
4d:2c:0d:29:71:42:20:ac:03:79:44:65:da:27:0b:
36:97:06:2a:ce:54:7a:ce:57:11:65:fa:41:29:81:
8d:15:11:4b:02:52:ee:f1:cc:3e:e0:57:7f:58:a9:
17:b9:96:29:92:86:da:18:0c:34:af:30:c0:c2:7a:
e0:a4:4f:35:59:3b:8d:c6:d3:07:30:18:73:de:8e:
bb:d0:be:8b:cb:ba:18:71:c7:35:68:c1:bb:fb:26:
0d:fc:7d:00:16:81:f7:ca:bc:f2:a6:e2:b6:55:f9:
a0:f1:d0:63:df:4b:1f:7f:5e:5f:22:2d:52:d1:1e:
a7:af:c6:70:13:da:8d:06:28:67:01:d3:54:bf:cd:
49:c0:9d:a0:82:0f:65:b9:41:31:36:b0:5c:09:98:
48:1d:5e:b2:58:50:86:7e:5b:98:0b:56:04:88:39:
f0:35:82:41:3b:18:3a:76:dd:da:cf:1a:02:87:93:
28:b1:88:f1:5f:84:54:c4:cd:3b:f2:f1:64:52:a9:
12:71:61:28:7c:8b:09:51:58:6b:0f:5d:5f:84:d5:
dc:72:d5:2c:33:9a:b9:4a:12:7d:eb:e0:d2:f7:ea:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:03:0F:DD:A0:7F:0B:68:10:37:B8:49:76:24:90:3D:AB:7C:4B
X509v3 Authority Key Identifier:
keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ed:60:eb:f7:4c:fe:86:ee:2c:5c:f3:f4:ba:00:fb:c9:ac:
fb:b3:c5:91:13:96:e8:21:32:0e:aa:8b:62:c9:67:6e:98:05:
0f:ef:9a:8e:3d:9e:20:e6:82:62:87:11:a3:5e:f7:73:40:ab:
b9:db:a4:f5:a9:2f:77:4c:22:28:55:02:ca:bd:ad:ae:6e:13:
ec:79:39:fa:0c:2d:68:64:0a:b9:15:17:ea:40:f0:39:58:bd:
d6:9f:c2:17:66:7c:71:06:9e:60:58:5a:5e:2e:e4:d9:3f:ab:
c7:66:92:4c:8c:f0:13:a1:50:fd:40:33:89:52:be:6c:7f:aa:
7e:1e:17:10:24:c7:fb:e2:49:c7:90:be:6c:d1:bf:2f:7b:7c:
d1:9f:9a:28:44:0c:33:0b:0a:e3:ba:06:25:dc:46:80:34:1e:
03:90:05:e8:58:a7:c2:f2:78:df:40:bd:3c:07:07:8f:f9:d8:
1f:11:7d:16:8e:a4:38:8b:2f:e3:36:21:b6:fd:98:7a:f9:80:
06:9e:de:00:ec:79:09:ab:2d:2b:f7:d9:6a:6d:b1:7c:52:43:
94:e5:bb:6e:a9:07:e6:51:96:09:cf:d6:12:ca:04:a4:d3:24:
9c:69:2a:4d:c2:09:60:90:e3:9d:a2:c1:6f:46:55:19:46:7a:
75:82:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:32 2026 by rpki-client