
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json)
Hash identifier: dbkNhmGexBJgwhHBaEhj5cCEobQrUqHdMDNspJ9ut6U=
Subject key identifier: 45:1A:D5:3A:36:82:8B:19:F9:D1:66:E6:64:44:DB:EF:F1:B4:15:45
Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753
Certificate serial: 7050AF76FEB7A10000E8FCF4313AD069626A13A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
Manifest number: B3
Signing time: Wed 05 Nov 2025 11:00:53 +0000
Manifest this update: Wed 05 Nov 2025 10:55:53 +0000
Manifest next update: Sat 08 Nov 2025 16:09:53 +0000
Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=)
2: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: 7qgk9q2ZNItwjjCQmm+bvQXTVn+wfRdlnkzqIadw4Uo=)
3: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl
rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 10:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:50:af:76:fe:b7:a1:00:00:e8:fc:f4:31:3a:d0:69:62:6a:13:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753
Validity
Not Before: Nov 5 10:55:53 2025 GMT
Not After : Nov 8 16:09:53 2025 GMT
Subject: CN=451AD53A36828B19F9D166E66444DBEFF1B41545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:34:82:cc:c0:87:40:4d:cf:f3:69:53:9c:
c4:99:0c:c4:02:8a:80:7d:c7:98:25:e5:91:c1:e4:
58:d2:e2:c6:31:fc:91:d3:63:e6:9d:dd:c6:fb:47:
61:34:6c:bc:e1:2c:ef:c8:27:4b:bb:4c:02:91:d4:
fb:e5:21:6b:9a:6a:7a:32:27:6f:df:8d:d4:33:e1:
a6:8f:91:d4:79:c8:47:63:b8:7f:08:ca:a6:a9:b5:
bc:d4:18:e8:ed:e4:20:41:7c:22:ac:9b:53:5e:93:
a5:58:a1:7a:84:17:02:93:82:c7:f7:45:99:c2:95:
6e:10:b9:4c:34:69:0a:d8:f6:d8:8e:66:2f:74:4f:
a2:0d:38:5e:fa:25:63:bd:52:45:37:32:f8:c3:72:
de:10:b0:b9:dc:36:f8:8b:d5:03:91:53:de:47:bb:
47:7b:e3:c7:d0:8a:09:9f:9b:69:a4:86:b2:4a:81:
3f:c9:c7:94:3e:fa:e9:e6:b5:25:b1:8b:29:7a:c1:
06:6f:48:ce:6b:00:5c:c1:50:88:00:53:89:46:c2:
e7:5a:83:97:6d:ad:80:c4:ef:a8:53:43:e9:c4:b6:
0b:28:c2:c5:93:a1:e3:ea:cc:b1:2a:9f:26:20:0f:
39:a5:10:09:cb:89:53:0b:11:26:b7:33:c9:d3:18:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:D5:3A:36:82:8B:19:F9:D1:66:E6:64:44:DB:EF:F1:B4:15:45
X509v3 Authority Key Identifier:
keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:be:53:25:3e:33:df:94:89:2c:d7:34:c2:52:96:ad:f0:bd:
f0:ea:e6:17:5a:4c:12:52:52:25:75:d7:f7:81:d6:5d:3b:e8:
00:76:32:8d:32:7d:f5:c8:b7:ec:cd:93:65:12:1f:c1:fd:4c:
ed:5b:f1:fd:0f:49:61:34:52:2c:77:db:6a:36:98:64:c8:72:
e4:42:3e:dd:9f:7a:30:4c:bf:15:0b:60:5d:b2:a8:17:e8:4d:
f6:9b:ec:7a:ee:eb:02:cc:63:0e:43:40:12:57:72:dd:59:df:
c1:12:82:95:52:c4:fc:cc:4a:9f:43:bf:e0:b8:bb:17:d5:94:
2b:ee:c2:43:d3:4a:0b:72:9a:b4:e5:2a:26:18:47:31:85:3e:
27:b7:f4:7c:c8:b5:47:53:87:6b:34:db:61:9f:a8:a1:bf:fe:
28:54:75:d0:0e:40:0a:48:07:93:47:4e:0b:5e:ab:ef:c3:fb:
7e:70:e0:97:5a:ab:b7:61:0f:47:a2:ac:6d:8f:21:1a:e5:38:
f1:06:96:55:ce:9f:66:72:42:cf:e6:4d:f3:11:a5:15:e2:41:
50:1d:1d:cd:c5:d5:42:e9:a3:35:46:7e:ed:ee:9f:ac:45:96:
be:78:82:14:b7:73:d6:c3:dc:32:4f:30:0a:66:7c:aa:ae:77:
9d:af:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:17 2025 by rpki-client