
$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json)
Hash identifier: +qPI64sQY5l1PnJNHy1iLzw2qOpi4V98RbVLkTo+dIs=
Subject key identifier: E8:FC:83:65:F6:C1:E4:4C:69:B2:03:46:69:17:D8:2A:ED:71:81:CE
Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA
Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA
Certificate serial: 0EAEDB0477F7A1856934C89EE9A5EFEF61560EB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
Manifest number: 01FA
Signing time: Fri 27 Feb 2026 22:40:00 +0000
Manifest this update: Fri 27 Feb 2026 22:35:00 +0000
Manifest next update: Tue 03 Mar 2026 06:48:00 +0000
Files and hashes: 1: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=)
2: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=)
3: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: r4xf9Wiehg3t2B/FkKhhQaYcOVYUyfScAGISmd5z8is=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl
rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 06:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ae:db:04:77:f7:a1:85:69:34:c8:9e:e9:a5:ef:ef:61:56:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA
Validity
Not Before: Feb 27 22:35:00 2026 GMT
Not After : Mar 3 06:48:00 2026 GMT
Subject: CN=E8FC8365F6C1E44C69B203466917D82AED7181CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:63:72:5a:c7:6b:3a:aa:a6:0d:fe:8d:e5:
19:24:aa:16:55:ee:36:0e:bd:8b:e2:ac:65:66:3c:
bd:d8:7c:e0:6c:41:d7:ab:e3:71:0c:b1:4c:2d:50:
fe:45:2b:51:b8:86:6e:e4:10:61:98:8a:75:5f:78:
db:b4:92:d6:be:86:44:dc:8c:e4:60:4f:dc:28:49:
17:bd:d1:a0:1a:22:49:98:5f:9a:09:62:9e:72:33:
c2:f8:f1:e7:a6:ba:75:13:33:b8:f7:53:f8:35:63:
50:c5:42:a7:b9:ba:3c:e8:a2:0e:c0:2e:da:4b:63:
64:8b:1c:27:d6:c5:df:3e:3a:86:ae:f1:13:31:ea:
b7:f5:42:5a:e7:77:5d:1c:52:c7:5e:49:16:bf:54:
7c:1c:85:a1:c2:e2:b6:68:ed:6d:2c:99:66:60:89:
d3:e0:fa:60:80:c0:c9:8d:ce:e5:f6:b6:81:1c:f1:
e9:d3:fd:e4:c2:cf:c3:bf:b6:2f:0c:9a:4e:34:e5:
72:0f:41:80:46:9b:de:5f:78:e6:3c:6f:94:71:a4:
87:de:90:a4:69:04:cd:0d:c2:29:56:b5:03:1f:4f:
6b:db:33:50:0f:79:02:f4:6b:c9:c8:9d:cd:f7:ec:
99:99:d1:3e:9a:19:3d:a7:d2:df:1d:41:5a:65:84:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:83:65:F6:C1:E4:4C:69:B2:03:46:69:17:D8:2A:ED:71:81:CE
X509v3 Authority Key Identifier:
keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1a:25:cd:98:5f:b0:1a:3a:d2:36:d1:81:3c:53:41:f0:4e:
3d:a5:9d:96:26:0f:c6:78:41:d5:07:6c:d6:2b:f7:43:82:bd:
62:b6:26:9e:88:f9:c5:e1:02:16:85:f8:8d:28:43:21:eb:11:
d6:9d:fa:e1:88:9a:19:1e:94:f4:65:c2:ef:ea:75:7e:2f:e5:
c7:18:79:5e:5d:bd:00:14:fa:b8:43:c1:38:cb:e8:52:00:51:
b5:1f:d4:50:6d:1c:3b:fa:88:a9:34:e2:38:2f:f9:c7:1a:1d:
3c:fa:b4:0e:c5:da:76:92:ff:d4:75:22:7c:97:34:93:1b:86:
31:fb:cb:78:0b:76:a7:f6:3b:54:96:3b:48:04:42:e8:85:eb:
82:78:f0:b1:d5:34:6d:b7:18:0e:37:c1:03:20:b7:40:78:01:
00:70:13:97:6c:32:78:5e:e3:1f:bc:6e:b7:b2:40:71:ff:73:
ce:57:61:ad:b1:e2:e9:a8:09:6f:4b:dd:36:f8:f1:29:19:7b:
ae:98:a7:c5:0f:47:56:bd:0f:97:2f:59:5e:a2:7c:1d:94:03:
18:70:d4:25:a3:08:b6:95:53:de:ed:1a:83:22:51:7a:0b:b8:
e9:27:3a:bd:85:d6:8c:03:f7:d1:07:00:25:f2:1a:ea:79:1d:
89:31:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:48 2026 by rpki-client