
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json)
Hash identifier: HDIMddQI2InB/w1jBtR7+FL32eNL6ZCVkMEoMGfpEe0=
Subject key identifier: 2C:3C:ED:81:20:49:C2:09:0D:BF:92:FD:6A:22:2D:8F:D2:95:D2:DC
Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19
Certificate serial: 7A577DD029B58CCB0D24515DEA5D5F5670E15E3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
Manifest number: BB
Signing time: Sun 02 Nov 2025 10:40:44 +0000
Manifest this update: Sun 02 Nov 2025 10:35:44 +0000
Manifest next update: Wed 05 Nov 2025 17:38:44 +0000
Files and hashes: 1: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 2gWgTQ4Z+tGyRrEoZsoKq4rQS9QUc5mKoFU6ARsUw8Y=)
2: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: YOzOakCqawjOiEAoX04D0Kn5J3c7ITaSUGH+lePncvE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 17:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:57:7d:d0:29:b5:8c:cb:0d:24:51:5d:ea:5d:5f:56:70:e1:5e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19
Validity
Not Before: Nov 2 10:35:44 2025 GMT
Not After : Nov 5 17:38:44 2025 GMT
Subject: CN=2C3CED812049C2090DBF92FD6A222D8FD295D2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:52:7b:52:03:a1:cb:ae:0d:d3:9c:b0:49:
be:53:70:76:e3:4d:7b:75:8c:98:6e:11:87:8e:f5:
7e:b9:39:55:40:a1:2d:87:3d:73:58:01:92:12:f6:
5e:56:66:18:07:c2:1f:63:1b:f0:30:2b:13:41:1a:
d4:89:84:51:04:f5:aa:d7:35:fb:7a:b2:d2:4a:52:
f0:a9:da:8e:51:bf:89:56:08:58:1b:1a:2c:0e:f0:
c4:22:10:cd:fa:93:30:96:93:31:99:ac:9a:7c:48:
26:02:37:94:1d:ff:4f:b0:7e:d8:cc:1d:54:25:fc:
15:c9:84:da:89:e0:66:94:bc:0f:ec:7c:7d:f4:71:
37:d2:5d:b5:44:45:f1:98:f3:33:0b:8c:fe:fb:a0:
2f:e3:4e:13:e3:9a:a4:4b:11:34:fc:9b:74:5f:5f:
e2:ce:46:b9:25:28:85:8a:12:e7:c4:4b:a3:9c:13:
88:c4:ae:12:dc:8e:8c:51:1b:b2:33:31:58:39:b9:
01:77:1e:b4:1e:e4:c3:bf:85:c4:b1:a5:21:b3:f3:
a1:b6:a1:24:cf:c7:b1:1d:dc:60:8f:59:b7:84:84:
9b:7d:70:4e:bd:74:86:d9:d4:6a:a0:4c:f7:31:1b:
fa:a0:27:45:4e:56:69:77:fa:f4:d8:d8:45:ce:6b:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:ED:81:20:49:C2:09:0D:BF:92:FD:6A:22:2D:8F:D2:95:D2:DC
X509v3 Authority Key Identifier:
keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a6:c8:52:26:74:2d:a3:c6:f1:b7:69:42:87:07:93:c6:16:
93:5f:c6:30:75:43:ce:c3:5b:d2:8e:7b:b3:9e:6b:c1:68:75:
96:b0:6b:a0:04:ae:9e:b6:94:8a:91:a2:2d:88:d7:03:06:40:
9f:bf:fc:22:5f:52:73:a6:f9:99:95:e2:9a:61:f9:e5:71:9c:
f6:a7:6f:08:c5:1d:18:5f:57:14:5e:04:b6:c1:93:ba:0d:c8:
43:67:44:35:9b:51:6b:74:18:7c:fd:32:42:65:b7:13:9c:9e:
5d:bc:b5:2f:83:25:88:78:6f:3a:05:ee:31:cb:d6:04:62:c5:
59:ae:2c:19:ca:42:0f:af:5e:b9:11:8a:47:cf:1b:74:be:60:
6c:89:3f:c8:b0:55:a2:c9:4b:87:6f:e5:62:bf:d8:fd:27:1e:
3c:ac:86:d5:f5:89:22:f2:64:28:69:54:53:e2:03:0b:e7:90:
ae:7b:8f:0a:2e:49:7a:b2:45:c6:2c:73:ef:ee:cf:8f:35:4d:
88:a5:e3:6d:63:6c:ab:22:3d:59:25:e9:85:79:bb:4b:99:17:
29:8f:87:9d:c6:66:fb:a2:73:8d:1d:8c:2d:8d:04:7a:af:1c:
99:00:bc:41:37:23:db:ec:c5:f3:20:4e:24:c6:a1:b7:6d:1c:
22:ba:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:25 2025 by rpki-client