
$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json)
Hash identifier: 6eSp5JvA3pyLaGFMQMgRpd3MAuEqLrJ7g3eaFjR0ipg=
Subject key identifier: 32:D5:94:E0:27:C5:0E:FC:22:47:C0:ED:F8:29:46:BC:EE:B6:99:E3
Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212
Certificate serial: 5E1A11AFBFD48D06A346CFFA0F136B61D1B7FA35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
Manifest number: 0151
Signing time: Sat 28 Feb 2026 05:31:54 +0000
Manifest this update: Sat 28 Feb 2026 05:26:54 +0000
Manifest next update: Tue 03 Mar 2026 11:06:54 +0000
Files and hashes: 1: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: KKAMzBcO1UUj57H1UORaNayNNf3dxA4rlMaHWq/fzxA=)
2: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: VHpWx/ELEtp63dh9v37pcf0dfq0fnpuWymrPIJ3Qc9I=)
3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: JJoDtolcZE+KR7sFSmDxYz3v23eUKolYl+DqisOigZw=)
4: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: 1Y22heZzLW1uLBI2dj0FhbkrNAtQ677tG4XL0MCWVic=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl
rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 11:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1a:11:af:bf:d4:8d:06:a3:46:cf:fa:0f:13:6b:61:d1:b7:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212
Validity
Not Before: Feb 28 05:26:54 2026 GMT
Not After : Mar 3 11:06:54 2026 GMT
Subject: CN=32D594E027C50EFC2247C0EDF82946BCEEB699E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:69:1a:3a:77:ca:2e:91:31:bf:cb:f3:9b:
cf:97:d1:e9:97:59:90:28:bc:b0:51:b7:c4:1c:cd:
8b:13:47:8c:0f:bc:f9:b5:ad:cb:03:31:6e:a3:23:
6e:65:3d:f7:60:8b:2a:65:37:5d:72:e1:36:ee:52:
b3:35:45:03:15:5b:6c:27:e2:ad:81:7e:59:2b:bf:
56:82:9b:87:f4:c2:d9:ab:7a:b9:be:0e:35:12:ad:
e9:0c:db:b2:64:c2:39:43:e7:1b:0c:14:b4:6b:59:
10:88:53:84:71:fc:7b:1d:0f:09:1b:dd:a6:d0:a4:
b8:d3:e5:dc:26:69:25:84:e2:c3:00:53:12:81:60:
49:9e:71:71:e2:01:c0:9d:a1:00:e2:63:ea:9b:38:
df:ef:a0:fa:67:10:22:bc:f1:ab:cb:61:d3:80:b2:
66:63:c2:eb:41:07:6c:bf:fe:98:38:67:c7:0d:39:
b1:e7:7f:ae:0c:57:f0:67:d8:2a:5b:19:71:09:b1:
ce:18:44:4a:bb:7a:e3:ac:4d:fd:f6:14:1b:b3:2b:
7f:12:ce:6a:27:d3:8b:a6:42:e6:2a:0c:e0:d3:0b:
d6:bc:29:38:3c:78:f6:58:08:a1:86:c8:ae:df:e4:
9b:6a:d1:da:98:6d:19:27:ba:2e:2d:af:7c:96:3e:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:94:E0:27:C5:0E:FC:22:47:C0:ED:F8:29:46:BC:EE:B6:99:E3
X509v3 Authority Key Identifier:
keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:be:f1:5a:47:2d:22:51:c7:82:f9:33:a1:b4:8b:4a:d0:d2:
f5:68:84:57:08:70:cf:2d:17:b5:25:30:bb:c8:a6:e5:11:64:
b9:21:87:6d:13:73:e2:13:8e:1d:fb:4e:37:91:e9:c7:50:8a:
5d:4c:b2:e5:82:44:30:c3:7d:8c:3d:d2:2e:06:91:15:8a:e1:
fd:b6:24:83:99:01:9c:e6:15:14:9e:66:1f:a0:3b:03:c0:35:
55:df:cf:83:d4:be:6d:12:8d:44:31:d1:da:cf:73:96:dd:12:
cf:89:11:33:1e:70:4e:47:3c:9b:17:61:5b:55:2c:22:25:72:
34:03:f5:68:5b:04:9a:11:04:b2:67:45:58:af:e9:ef:25:59:
e3:6e:05:c9:9a:e4:1b:11:2c:20:91:72:9b:e1:c5:94:b3:30:
f0:09:1a:12:06:49:54:17:7b:47:36:dc:f9:c5:df:5b:fc:82:
34:61:30:79:ad:aa:86:77:40:20:05:b6:9e:ae:3b:6b:ad:8a:
16:ac:cf:10:b4:10:52:a7:b9:71:70:ef:4b:72:c0:6e:e4:9f:
8b:1f:ef:ff:5f:f9:f1:2d:1b:be:45:c0:4f:e8:52:96:57:b8:
71:ed:2a:0f:09:fb:04:21:1e:a9:dd:3c:30:4f:c7:5d:bb:89:
5e:39:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:34 2026 by rpki-client