
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json)
Hash identifier: IkwL/Ek5jljmkzKxTNQSs5Ld8O4aukf2sXld9BsnjZ4=
Subject key identifier: 9D:11:56:FD:C2:81:E8:FE:F5:85:47:56:09:F5:5E:47:23:E2:68:8F
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial: 2E450EFB3DF8BE235DD7F6110CAA2CA8D211302B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
Manifest number: 021B
Signing time: Mon 03 Nov 2025 09:00:03 +0000
Manifest this update: Mon 03 Nov 2025 08:55:03 +0000
Manifest next update: Thu 06 Nov 2025 09:04:03 +0000
Files and hashes: 1: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=)
2: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=)
3: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=)
4: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=)
5: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=)
6: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: KNwFtK3PfYh55d0WwFfVlr4z5HgHk5E2J0rb7Cv0A+w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 09:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:45:0e:fb:3d:f8:be:23:5d:d7:f6:11:0c:aa:2c:a8:d2:11:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Validity
Not Before: Nov 3 08:55:03 2025 GMT
Not After : Nov 6 09:04:03 2025 GMT
Subject: CN=9D1156FDC281E8FEF585475609F55E4723E2688F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:73:9c:49:60:a4:62:88:17:9d:83:73:cb:
77:be:fd:e5:f6:22:70:24:d3:f0:35:e5:f6:de:8c:
17:e1:ed:d7:0a:df:f4:81:1a:da:50:ef:82:3f:79:
bd:a2:a8:92:d2:84:72:21:93:1f:23:ca:d3:fe:0c:
65:7c:53:8d:32:16:2f:99:97:c0:6d:da:7a:87:c7:
1e:c2:e7:4b:9e:66:59:15:5a:fb:4f:fd:02:01:35:
53:e7:3e:aa:a7:50:c4:90:e0:7c:25:0d:bf:f6:2c:
d2:99:41:3b:13:ae:af:75:1e:f6:96:a2:7f:a6:6d:
e3:ac:62:f4:c7:a1:ee:45:98:54:6e:47:e7:fe:9f:
25:30:a3:f9:d9:e4:10:7d:dd:25:1f:2e:77:8f:ac:
ba:a6:be:fe:54:3b:8e:33:e7:46:e0:b1:9a:85:8c:
24:3a:98:99:91:9d:94:59:e7:ac:32:fe:fa:34:1b:
47:af:a8:84:de:1b:30:0a:fa:06:26:ef:c2:1a:31:
52:48:a8:79:dc:8c:e2:ac:14:44:ef:fa:34:c0:73:
f7:b7:16:3c:56:38:f6:b0:3e:ef:58:e0:21:f5:12:
94:4e:3e:3d:2e:08:2a:e3:8a:96:b5:77:d5:d0:d8:
e4:f3:27:6d:69:29:39:bf:9f:7d:66:61:ab:ef:ae:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:56:FD:C2:81:E8:FE:F5:85:47:56:09:F5:5E:47:23:E2:68:8F
X509v3 Authority Key Identifier:
keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:f8:d2:9e:c5:87:16:4b:95:29:62:29:cf:51:d4:24:73:
4f:0d:81:11:3c:9b:aa:bb:1c:02:4f:f2:30:50:4e:de:5a:f7:
00:ea:58:75:dc:cc:60:ba:b5:89:94:57:14:0f:77:18:74:7d:
e1:19:60:06:bb:e9:90:4e:d4:fe:d8:1e:cf:eb:2e:7b:ce:4e:
b0:c7:6a:7e:c9:60:fa:22:cc:f1:e2:b7:be:12:2d:ef:b7:25:
b8:f3:97:e0:af:28:1b:5c:b8:79:98:70:ca:42:fd:d2:20:9d:
95:41:d5:0c:f0:69:49:32:d0:34:98:2c:a3:49:5b:17:fa:bc:
16:24:6e:38:59:d2:58:22:4a:17:27:69:fc:9b:5b:84:e9:ac:
cd:cd:1a:bd:fe:38:4a:35:f9:69:58:82:9f:ba:99:83:7d:cb:
ba:4f:c8:0e:c7:a7:41:53:45:a8:eb:2e:c6:01:02:20:84:d8:
84:f1:ed:9f:fa:49:42:9a:43:42:81:5f:95:56:63:32:ad:c9:
03:b6:00:d6:93:56:01:98:68:5c:ec:3e:ff:eb:53:b6:d8:09:
2a:1d:17:c1:f4:74:65:23:75:f5:69:07:58:51:01:32:41:a6:
35:82:87:72:12:27:e2:ea:5d:66:bb:69:6f:4f:41:8d:e6:f1:
f1:bf:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:53 2025 by rpki-client