
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json)
Hash identifier: +e7VdJ2eV7oycl3z7R8v604YsVxuqUY9egG0aUfKk4c=
Subject key identifier: BC:A5:3C:27:F6:CB:2B:DB:93:27:BD:72:2F:70:27:43:9D:C5:87:1F
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial: 3B4900158FDC6D55C6D392D23B18EF85E03F1BD8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
Manifest number: 0255
Signing time: Sat 28 Feb 2026 21:21:20 +0000
Manifest this update: Sat 28 Feb 2026 21:16:20 +0000
Manifest next update: Wed 04 Mar 2026 04:03:20 +0000
Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=)
2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: TzUkQM1v2fO8PxnVQcNzUXfXXQno6h42f7mRb0epEY4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:49:00:15:8f:dc:6d:55:c6:d3:92:d2:3b:18:ef:85:e0:3f:1b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Validity
Not Before: Feb 28 21:16:20 2026 GMT
Not After : Mar 4 04:03:20 2026 GMT
Subject: CN=BCA53C27F6CB2BDB9327BD722F7027439DC5871F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:78:8f:28:9f:dd:9b:45:e1:16:0b:84:af:
40:e3:04:a4:64:04:9a:50:70:ae:c5:7f:cf:15:c8:
ce:08:a1:6e:19:78:c9:4a:a2:c6:a9:96:4d:f1:97:
30:39:21:2f:40:9a:f1:9c:e2:a7:6e:5e:bc:3e:b4:
70:ce:1b:04:9a:33:9e:5d:5d:33:ab:0c:c7:cb:42:
b5:6e:b8:e9:ad:99:6d:be:79:f7:a0:00:57:24:3b:
f5:9b:81:95:0d:18:a1:97:2a:3e:39:c3:73:e0:6e:
c2:00:f1:d5:50:40:44:58:31:e4:f7:f7:f1:e6:62:
5f:50:1c:0d:b8:92:81:05:f3:71:5d:de:0d:33:a2:
ba:6f:b6:4a:76:6f:0d:98:df:1d:9f:f5:2c:12:1d:
f6:10:81:5d:63:81:53:3d:3c:6a:97:48:fc:dd:d3:
a9:c6:19:40:a4:8c:09:24:fb:78:8c:94:f9:03:5f:
d4:f5:29:45:b9:17:e3:83:2f:93:1d:6b:ef:57:b3:
e7:5a:ea:08:1c:02:70:40:01:4e:ca:46:80:d9:38:
34:04:3f:f8:84:3f:93:e6:73:35:12:fd:2b:1d:1b:
ee:c4:d2:6a:85:25:ea:09:87:e7:16:05:d8:6e:21:
8a:cc:b4:c5:56:36:93:08:67:39:5e:4e:5a:03:12:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:3C:27:F6:CB:2B:DB:93:27:BD:72:2F:70:27:43:9D:C5:87:1F
X509v3 Authority Key Identifier:
keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:62:df:32:87:46:f5:a4:96:2d:da:3a:73:60:e8:99:e2:
7b:21:b1:dc:45:ff:eb:14:76:d0:cc:9a:a6:25:a9:2f:9e:1c:
74:f8:3a:54:ae:2e:8d:f5:f5:43:6e:31:4e:fe:05:78:52:cc:
5f:bd:77:f1:db:cd:c3:39:4c:72:ec:87:6a:9b:8f:ba:7a:5d:
b3:a7:db:f9:8f:b6:7f:af:3c:bd:f8:81:a3:19:24:05:fc:29:
fa:8e:ff:34:c0:27:fc:94:23:ba:a8:98:77:42:75:b8:80:e6:
76:ec:af:42:13:d1:ca:de:db:a1:99:b6:7b:01:a8:72:69:23:
ae:87:f1:e6:dd:22:01:8a:86:be:9b:ee:38:f3:64:57:79:22:
7d:cf:4b:a7:c2:c2:ed:4a:47:81:ad:70:12:0c:71:da:4d:e7:
47:f5:63:34:2b:9d:70:c4:41:19:a2:31:92:8b:b8:ee:77:12:
21:79:34:07:a4:95:9f:1c:df:69:4c:03:7d:8e:4b:31:09:ef:
8e:89:56:8c:78:07:c6:56:39:68:61:f8:71:3e:1f:d2:0f:3f:
b5:f5:fd:ba:e8:df:44:3e:cc:6c:f5:9a:92:cb:0b:24:de:ef:
fc:1f:82:b7:a5:62:4e:38:69:b8:d7:01:e7:75:36:7e:da:da:
f5:ac:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:59 2026 by rpki-client