
$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
File: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json)
Hash identifier: /Q+ctWaY5WAAmlas/9the2JJXWbzXbluqTZkHOrFbEo=
Subject key identifier: 32:7A:53:F8:E4:20:B6:85:44:96:7E:CE:70:FF:6C:21:C9:53:3A:D2
Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4
Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
Certificate serial: 3DAF5CF006E5BFD4E0E0A2FC46ADE7739327DB54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
Manifest number: 030C
Signing time: Sun 01 Mar 2026 00:01:39 +0000
Manifest this update: Sat 28 Feb 2026 23:56:39 +0000
Manifest next update: Wed 04 Mar 2026 02:15:39 +0000
Files and hashes: 1: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: rkQIsU4mH+wmPkEwMYQGKlUQJZpq5skC0u2AtTeyAJY=)
2: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: Brdn2dLUZTxd6fnM4xWw5E67aagF7MF4tCt2gy0nMwM=)
3: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: Kwtm71D/Z6NhSfdr0MOgpN01lazOwL/r2/rIVuBoO7I=)
4: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: XFCtvmMAAUBkMVCFTzI1cVSJed8FZNsw+FTnuaIBLa8=)
5: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms=)
6: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: ityJsOJ59mqsAQMs5Du0Y/NoccFHhnyCRr7wzvD0asU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl
rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:af:5c:f0:06:e5:bf:d4:e0:e0:a2:fc:46:ad:e7:73:93:27:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
Validity
Not Before: Feb 28 23:56:39 2026 GMT
Not After : Mar 4 02:15:39 2026 GMT
Subject: CN=327A53F8E420B68544967ECE70FF6C21C9533AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:57:17:9c:71:82:c3:03:08:ca:b8:d0:7f:
5a:05:64:c6:96:c2:9b:5a:fd:4f:32:5e:54:10:60:
0c:bf:c3:41:9e:dd:e5:7a:c5:5f:43:57:c9:29:30:
b1:2c:c2:0e:9c:25:16:7e:ba:af:3e:99:30:e3:b2:
f2:41:ca:14:a1:99:7c:50:87:9c:d2:c9:0d:6b:c7:
a0:da:1a:27:6d:cd:a5:6d:22:bd:ac:a8:96:c4:92:
17:29:c6:bf:e0:5a:f2:3d:15:dd:eb:ce:81:1e:0e:
66:c8:5e:ec:81:bc:ed:ca:f3:2a:8a:da:4c:ff:f3:
59:6f:03:eb:1a:29:6d:e4:fa:b2:3e:8c:84:9a:4f:
61:0a:ac:f0:70:a7:af:7f:2f:9d:e8:d6:20:0d:f9:
1f:77:70:5c:e2:4a:7d:3e:80:6f:fc:75:a5:be:82:
47:d6:18:f1:af:a7:0d:78:ea:04:c8:69:f7:c0:55:
a8:0f:2b:aa:be:67:47:c4:35:24:e6:16:7e:4d:0c:
f0:3f:dc:40:8e:9e:6e:c4:00:fd:c3:89:47:30:51:
39:43:c4:92:7b:23:1f:d3:6f:a1:ce:72:d8:2d:ef:
c8:a2:78:88:f6:b1:41:5a:70:b2:db:6c:3c:6f:de:
fe:c4:78:ac:f0:40:07:a8:24:d4:e1:e1:b2:05:e3:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:53:F8:E4:20:B6:85:44:96:7E:CE:70:FF:6C:21:C9:53:3A:D2
X509v3 Authority Key Identifier:
keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5e:96:5d:71:ed:56:b4:c6:be:17:03:86:f9:92:d9:8e:2d:
74:ce:e1:a3:3f:c0:42:b8:0f:fe:5e:ea:87:e3:13:1e:87:62:
61:ce:88:0b:86:9d:b7:30:13:5c:e8:af:fd:0b:58:0d:59:73:
78:95:f4:be:be:e7:a4:78:3f:f1:2b:54:04:6a:d0:37:8d:56:
7a:ed:d1:8d:c5:d4:0e:94:fe:99:f9:40:5f:4a:98:f0:06:82:
b8:54:ec:f5:0f:2e:06:9b:16:07:4a:e6:5b:25:ad:da:14:ba:
66:54:78:9f:d9:f1:dd:ec:b9:31:88:aa:d2:09:f6:be:39:40:
b8:5e:5c:88:2d:8d:59:c1:a7:3d:ac:96:85:46:12:bf:8d:2f:
d0:f1:2a:28:59:c8:75:81:86:9e:02:34:7e:c4:dc:a2:8a:03:
02:60:f8:02:38:10:13:79:d3:88:6b:68:20:88:6c:3d:34:53:
06:f3:73:79:d9:cb:ed:77:d3:a1:18:ca:3b:dd:56:fa:aa:c8:
b0:6e:d4:22:aa:af:14:03:5b:21:e0:37:a0:f6:a7:45:f0:97:
a1:9f:75:83:e4:f0:f0:24:f1:e4:8a:8e:73:a0:04:e5:a3:32:
bd:90:0c:a1:c3:87:6e:93:2c:07:7f:2f:2f:24:0c:0d:d8:51:
0a:b4:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:19 2026 by rpki-client