
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json)
Hash identifier: vui1PwA6Qghpg1+Abtu/mfbPvNwNex1heYKs8dGk9j0=
Subject key identifier: 3F:3C:8A:CC:89:2A:FD:54:BD:9D:54:06:AF:87:27:6E:DD:F6:2D:03
Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Certificate serial: 5838E715E2DC2BD2F3D3DA24AA1C6215B5A78212
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
Manifest number: 042D
Signing time: Mon 02 Mar 2026 07:31:30 +0000
Manifest this update: Mon 02 Mar 2026 07:26:30 +0000
Manifest next update: Thu 05 Mar 2026 15:07:30 +0000
Files and hashes: 1: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=)
2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 9uRpDkAyJrB9w8SxZpg5tgksTEBz89mgVqFkvCnufNs=)
3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: hsPYSfqnXcrLebXt6EBLTQfNTkLnhJb4Z1Vtv7TkCII=)
4: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: HOwwdKR3O7c8/kyMjxVZJkAdz+1G7QmLEi+h8X1E5h4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:38:e7:15:e2:dc:2b:d2:f3:d3:da:24:aa:1c:62:15:b5:a7:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Validity
Not Before: Mar 2 07:26:30 2026 GMT
Not After : Mar 5 15:07:30 2026 GMT
Subject: CN=3F3C8ACC892AFD54BD9D5406AF87276EDDF62D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:2d:6a:8c:a9:4b:fd:46:a7:a0:00:07:a6:
48:3e:71:a4:a5:f2:84:61:b3:ad:a4:5b:a4:50:fc:
0c:b1:7f:4e:be:79:a0:46:d9:0d:47:e5:df:a4:dc:
55:c7:7c:42:03:7d:6a:45:3c:62:c4:12:8d:ea:1a:
49:05:81:bd:8d:f7:2e:c7:3f:3a:99:60:16:d6:d5:
09:ad:70:32:9c:1f:29:e6:84:25:25:f2:bc:d0:f3:
33:cd:42:c2:21:0d:24:fc:90:4f:e5:7b:e3:61:9e:
29:36:15:0c:bd:a5:76:9a:e2:6e:05:ff:56:b4:8a:
5b:f2:96:51:a4:a4:fd:a7:6a:06:78:3e:95:d8:f6:
39:49:e0:19:fe:9d:08:61:9f:12:0c:52:f8:62:2e:
7f:aa:25:13:b2:30:fb:3a:f1:7a:59:06:a1:2d:ca:
14:92:8b:57:a1:e1:0b:16:bd:9f:a9:96:48:5b:93:
03:cb:44:d8:06:32:d5:86:c1:04:4b:f5:ec:94:83:
59:7d:ae:dd:c1:d3:79:21:e5:ca:11:a4:ef:49:7c:
6d:6f:e2:96:e2:78:7b:87:c6:af:ca:6a:c1:61:d8:
dd:93:17:a3:4c:8a:58:f1:25:ea:1d:18:4c:b8:5f:
a5:98:ee:0a:9a:ef:ff:88:12:c4:9e:62:8d:67:44:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:8A:CC:89:2A:FD:54:BD:9D:54:06:AF:87:27:6E:DD:F6:2D:03
X509v3 Authority Key Identifier:
keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:12:e1:3b:05:06:64:a0:f7:ec:c5:d7:51:2a:e8:8d:1c:
0f:93:81:c3:70:0c:2b:99:19:49:18:e7:da:38:c5:52:cf:1d:
4f:a2:f7:fa:c1:ea:1d:c9:2d:e0:64:e5:1d:b3:c9:cf:d5:0a:
1a:6e:f6:42:23:12:fc:43:09:42:65:58:db:55:4e:4c:5a:b2:
39:1d:a4:b4:00:0b:d5:2d:b4:a2:4f:c7:57:50:35:9b:3e:c1:
9b:5c:c6:c4:ec:0f:a9:96:45:e9:d2:fa:11:c9:98:b0:b4:7b:
0b:92:6d:60:f9:b7:30:4d:5c:f7:0c:6b:ba:61:fa:9f:79:d9:
20:0b:08:22:95:7d:25:af:79:50:e8:19:42:d5:2f:04:39:2a:
ce:ee:7e:7b:5b:2f:f1:a8:51:0e:d2:d6:7a:f8:05:52:ba:88:
49:6f:fd:51:23:68:e9:1d:88:a0:1d:a4:b9:4d:24:3a:5e:80:
5d:13:08:ac:81:94:ea:ca:fe:49:c5:c8:5d:33:5a:3a:31:9c:
d4:9f:72:a0:d7:be:92:60:81:e7:93:ad:6c:5b:d0:9b:82:80:
19:63:37:7c:6d:31:e1:bc:65:27:a8:e2:0b:67:8d:cd:ad:e0:
da:35:3f:a8:14:9d:e0:4e:7c:9d:96:ca:a5:fa:dd:bd:5c:91:
b7:9a:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:45 2026 by rpki-client