
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json)
Hash identifier: NE52PeLRDlJxJRMElay55fRIA0Fj4R6e7CJcEy80Ae8=
Subject key identifier: 6E:24:D0:C3:41:E5:D8:1C:44:F1:2F:3F:40:E9:D9:6C:FD:C1:3B:CF
Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Certificate serial: 7F01E976FF2B33FE668F0A1C5A1668D020B619E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
Manifest number: 01D9
Signing time: Sat 28 Feb 2026 07:31:08 +0000
Manifest this update: Sat 28 Feb 2026 07:26:08 +0000
Manifest next update: Tue 03 Mar 2026 16:04:08 +0000
Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: BDD90sSQsBf6TcZNY5H5fSy8FBCNfWqRzrbG2rv5UwQ=)
2: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: 4UDVQni8MqOtfLyOWEhQ6tRIVSJUG03OBT7POLUxRwQ=)
3: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: koH5q5oLKcLR5X6MYFdU+MrvD6zwh8v3JGfpyVLK7F8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:01:e9:76:ff:2b:33:fe:66:8f:0a:1c:5a:16:68:d0:20:b6:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Validity
Not Before: Feb 28 07:26:08 2026 GMT
Not After : Mar 3 16:04:08 2026 GMT
Subject: CN=6E24D0C341E5D81C44F12F3F40E9D96CFDC13BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:79:58:95:c3:17:f8:54:8e:e1:f0:e5:a6:
ef:16:3e:5b:6b:5c:70:c0:ab:73:5d:31:2c:a3:28:
8c:f1:fe:4d:5e:0e:eb:f8:f4:0b:97:52:b9:e4:fd:
00:94:2c:36:e7:5d:03:54:06:a4:7f:18:ad:0a:23:
6f:dd:31:49:7f:93:a1:79:20:ea:d5:29:5e:2a:0e:
9c:90:c1:76:62:7f:da:04:ff:cf:3c:5a:f0:67:88:
a9:33:97:c9:ab:96:2f:2c:02:c9:82:81:ed:97:87:
85:05:e3:11:0a:9e:9e:9f:a3:81:5c:0c:43:9d:72:
bc:88:15:3b:c0:2b:6d:ed:05:42:49:0a:10:be:1e:
b7:80:2e:c7:19:d1:a1:3c:0d:e3:49:ea:2a:d2:6b:
0c:1f:a8:e8:05:3c:4d:ac:41:ff:f1:71:8f:b6:f6:
73:bd:a0:68:16:94:65:1e:ee:ce:71:04:17:1e:4f:
bb:a6:0d:36:89:1d:a4:33:cf:6d:92:09:00:38:32:
09:bb:7c:29:3a:77:90:dd:39:5d:c8:5f:44:bf:bd:
79:f0:00:b5:11:b1:0f:e1:ca:8e:f7:24:39:85:94:
ad:87:d9:73:5f:f7:3c:fe:4c:ab:64:79:11:7c:57:
96:1c:a3:72:22:66:5a:da:58:52:e7:08:8e:54:4f:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:D0:C3:41:E5:D8:1C:44:F1:2F:3F:40:E9:D9:6C:FD:C1:3B:CF
X509v3 Authority Key Identifier:
keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:94:bc:8d:10:d3:d3:ee:26:af:ca:92:86:bd:2b:50:48:
8b:b5:cf:52:a3:3e:cb:4a:7c:9b:1c:bc:c3:bf:b4:7c:5b:c8:
fe:cc:dd:c8:80:33:a0:17:1d:52:aa:48:c6:dc:07:16:af:9a:
79:4c:61:e2:01:b1:9d:61:02:f8:14:e6:87:ac:77:06:c5:71:
7c:a4:66:08:3f:75:a1:fc:e2:60:80:d6:63:bd:8f:0e:81:05:
1a:88:0f:37:d0:38:7d:09:ce:e2:db:ff:aa:1a:01:1e:b3:fa:
59:63:4e:f8:e6:19:8a:bf:02:b4:cc:bd:9f:f3:18:df:a1:81:
88:21:df:d9:1c:73:1b:35:cf:2b:2b:ef:c2:bf:28:48:75:a3:
f6:18:0f:ed:25:5d:83:cc:e1:3c:93:1e:29:46:fc:41:ee:a9:
0a:e6:2d:84:92:c7:89:89:67:dd:54:f2:d8:7f:75:57:2f:e1:
f8:12:d9:88:b8:86:cd:11:e6:b4:80:4a:67:86:43:15:f4:a2:
f6:ae:0c:75:d7:33:91:1d:b4:0b:8f:f0:77:ca:2f:66:3e:24:
d3:31:a4:d2:82:93:42:89:8f:89:9d:58:f1:f1:09:d6:98:fd:
df:1d:d4:dd:e9:a3:ee:4e:98:ff:6b:bc:5a:0a:97:00:e4:45:
39:bb:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:06 2026 by rpki-client