
$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json)
Hash identifier: qd7LN3TT1zCPc2U3P5MBGMp6B507F95tcyDEGomQe58=
Subject key identifier: 9A:7C:05:26:97:F9:17:21:BC:B9:1E:0B:56:06:4F:20:5F:0D:48:A3
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial: 453B98018E4E7A1A376845256B529B68BE32DF46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
Manifest number: 0553
Signing time: Sun 01 Mar 2026 19:21:44 +0000
Manifest this update: Sun 01 Mar 2026 19:16:44 +0000
Manifest next update: Wed 04 Mar 2026 21:22:44 +0000
Files and hashes: 1: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=)
2: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: Cw//4MAI+0Xe7yI8g+IqbC/I2+3SBHHybxbGBFusvdw=)
3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=)
4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 21:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3b:98:01:8e:4e:7a:1a:37:68:45:25:6b:52:9b:68:be:32:df:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Validity
Not Before: Mar 1 19:16:44 2026 GMT
Not After : Mar 4 21:22:44 2026 GMT
Subject: CN=9A7C052697F91721BCB91E0B56064F205F0D48A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:da:65:d6:db:f6:51:74:47:9b:f7:0a:f2:12:
3f:8e:88:8d:72:af:da:10:05:47:8a:b9:60:9d:25:
68:75:37:a4:10:76:93:38:f2:43:c3:e9:b9:81:25:
32:f0:84:66:f0:f8:d9:a0:51:1a:86:f9:10:b7:53:
ad:6f:d2:84:98:28:d9:f0:e2:ed:f6:35:c7:87:9a:
67:da:ad:25:aa:26:7f:27:fa:d4:17:f1:d0:e3:f3:
b5:af:af:2e:99:0a:5b:62:fc:48:1e:32:c1:ff:d2:
ad:20:94:49:d1:0c:c2:85:e1:e1:10:7b:37:a5:f3:
a0:dd:b4:04:bd:11:0f:f6:74:52:8b:0a:e9:3c:4d:
97:40:6b:8f:65:4d:00:41:ed:8d:dd:1d:d9:13:66:
2e:2d:7d:68:97:05:37:45:86:31:04:68:b0:45:6a:
96:90:84:fb:08:be:56:51:a8:57:ec:39:b5:fc:79:
80:1a:42:8b:d9:ad:de:38:63:2a:c7:cc:89:bc:0b:
74:e4:50:83:cf:1a:29:33:c1:e7:4d:29:3a:53:23:
3f:53:4f:68:8d:c2:f3:75:61:a6:2c:4c:5d:77:aa:
90:00:f4:b8:67:d6:7d:08:f1:6d:b5:b2:e9:9f:6c:
cd:fd:4e:25:49:34:56:ca:08:1f:5d:74:06:bf:14:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:05:26:97:F9:17:21:BC:B9:1E:0B:56:06:4F:20:5F:0D:48:A3
X509v3 Authority Key Identifier:
keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:9f:97:ea:e7:dc:67:24:09:fa:60:5c:59:52:57:01:27:
61:03:70:4c:5e:ed:f8:af:7b:2a:be:56:b5:00:18:5f:29:20:
80:f8:65:cc:22:39:f3:b5:51:cf:24:91:f5:c6:1c:e5:cb:eb:
de:19:0c:7a:6d:50:83:3c:73:e5:92:15:0e:ad:c4:b4:eb:a2:
e4:bc:3e:ed:31:f8:29:10:0a:b1:db:d3:9c:86:50:0c:a7:cf:
58:06:cc:ad:ca:66:24:6e:36:12:56:76:b9:b9:91:ce:be:7c:
ec:5e:ef:06:c7:cd:41:df:3b:5f:97:12:e5:2a:52:5b:b7:54:
a7:c5:43:a3:4a:01:88:36:99:6a:92:be:03:a0:1d:47:0d:0d:
30:e4:34:02:43:02:14:16:c6:eb:65:fb:56:85:f1:f8:7c:e2:
06:ca:e5:ba:7f:68:28:51:2c:ca:da:6a:75:15:d1:ad:b5:1c:
8e:3e:89:62:08:b5:26:15:ff:fa:4f:a4:d9:7c:04:c2:4f:28:
af:ac:c4:87:8c:ab:8a:56:11:22:be:67:3d:91:ed:7b:a0:57:
10:06:eb:33:85:d3:a2:a8:0b:8c:12:d0:c2:90:09:06:9e:4a:
71:46:87:28:0b:d6:f2:a9:96:70:75:fb:50:99:e0:ef:2a:f3:
9a:ea:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:41 2026 by rpki-client