
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier: tEP6vfUH5VxUau6pYLOubRQr4cM/7CbPK3ohp4Uoz+g=
Subject key identifier: 56:3F:A1:2F:40:39:DA:D6:AB:06:7C:EF:23:0F:C1:36:5A:6F:6A:38
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial: 28029880892DEDCF072770B1BAA769EB9E60A12F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number: 03CF
Signing time: Sat 28 Feb 2026 01:21:32 +0000
Manifest this update: Sat 28 Feb 2026 01:16:32 +0000
Manifest next update: Tue 03 Mar 2026 04:09:32 +0000
Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: +8wPRZypo9IApHsCJ8TJKO66N2zRBGHgbsboCfdp9uU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:02:98:80:89:2d:ed:cf:07:27:70:b1:ba:a7:69:eb:9e:60:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
Validity
Not Before: Feb 28 01:16:32 2026 GMT
Not After : Mar 3 04:09:32 2026 GMT
Subject: CN=563FA12F4039DAD6AB067CEF230FC1365A6F6A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:98:bd:a2:df:ef:7b:ee:9b:dd:82:79:94:
90:8d:5e:72:a0:88:3a:9c:82:4d:64:f2:09:46:ab:
16:ba:26:d2:c5:43:7a:4a:ef:eb:3f:26:a9:8e:f7:
8e:6a:90:85:92:bd:68:3e:19:15:c5:b0:f5:35:46:
d8:c9:ff:ed:96:61:85:f7:98:9b:b7:af:43:a3:df:
6a:79:f3:69:12:a4:7e:0c:93:06:7d:ce:bb:f3:08:
9a:3c:cb:79:60:70:d0:0a:ee:44:e2:d9:ba:06:59:
c8:3c:81:91:ee:41:f7:94:b2:59:82:70:34:70:32:
8d:d3:01:2e:aa:c0:5b:df:5c:8a:f8:2c:2d:a2:99:
6a:0b:f6:89:96:9f:fe:a7:c6:6e:3b:4c:83:6a:dd:
b5:42:cb:50:c3:e0:86:3e:10:44:9d:ea:b8:dc:45:
8b:40:74:e4:3b:ce:7b:4b:24:e3:71:92:00:cf:f8:
5a:9c:cd:24:46:f7:e6:44:98:55:9f:99:a8:0e:44:
c4:2f:65:d5:84:44:70:02:2f:e8:61:04:8b:4f:ea:
ed:cd:20:56:59:47:ed:b0:e1:3f:39:f0:3e:18:f3:
a9:a2:71:e4:42:6d:62:ea:c2:32:d2:61:f7:8d:11:
0c:75:38:db:46:c2:5d:22:2b:6a:33:f2:1a:4f:e4:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:A1:2F:40:39:DA:D6:AB:06:7C:EF:23:0F:C1:36:5A:6F:6A:38
X509v3 Authority Key Identifier:
keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:96:39:4c:06:d1:a1:fe:cd:1e:22:29:54:4c:d1:50:4a:
9a:87:f3:54:25:70:8b:d0:a6:9b:9c:c4:bd:ab:70:18:1b:48:
5c:a3:a0:4a:3e:fc:96:cc:97:e6:4c:20:79:1b:54:3b:cf:19:
fa:dc:3e:fb:6a:0a:5f:55:9a:0b:1a:a6:fe:40:0c:1d:6a:cc:
44:9a:e3:b2:93:a7:80:2a:6d:df:dc:41:2c:6a:13:d2:0a:66:
ac:f7:11:82:5f:2e:c4:e5:96:d7:71:20:3a:46:6d:34:34:2e:
e3:46:07:d5:85:a2:b4:4a:dd:8f:b0:41:64:57:ae:b9:4d:10:
d3:a2:45:0a:45:c3:e8:ea:37:f8:a7:b3:0f:07:13:f8:7f:cb:
62:a4:20:c6:9b:ee:5c:f5:1f:ce:32:43:8e:a7:03:4f:55:2d:
d1:42:5b:47:8a:ec:e8:af:1a:5a:86:9c:6e:1d:9b:79:d9:01:
cc:4f:73:ed:da:77:c0:64:61:0b:8b:5e:71:49:71:f9:f8:1f:
ef:ea:6d:ff:3e:d4:16:45:2c:4c:d3:29:53:f3:77:ff:6c:1f:
9c:a0:e0:cf:dd:5d:35:9c:3b:f8:45:73:d9:4d:23:4f:6a:2b:
42:a3:b6:aa:c5:af:f9:66:f0:0d:71:4f:c7:aa:40:69:df:ec:
82:63:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:02 2026 by rpki-client