
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier: +ha+/58handhp9Rr98ChBFQF9tYpRhv9y7vqf7VYpRQ=
Subject key identifier: A1:F9:85:15:77:F8:BA:E0:9A:2E:C5:16:B6:2D:16:B8:A9:3C:88:7B
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial: 6F2EBD1981BD6836BEE49D80883B834AD5F5EC5D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number: 01F9
Signing time: Sat 28 Feb 2026 15:11:19 +0000
Manifest this update: Sat 28 Feb 2026 15:06:19 +0000
Manifest next update: Tue 03 Mar 2026 19:10:19 +0000
Files and hashes: 1: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
2: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: oADZBrokiF15pPzYTJWVA9ltX+MdfPHvSqSAthAN17U=)
3: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2e:bd:19:81:bd:68:36:be:e4:9d:80:88:3b:83:4a:d5:f5:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Validity
Not Before: Feb 28 15:06:19 2026 GMT
Not After : Mar 3 19:10:19 2026 GMT
Subject: CN=A1F9851577F8BAE09A2EC516B62D16B8A93C887B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:bc:85:9b:63:5a:b5:07:10:94:8c:55:e5:
fa:67:5b:9f:fd:8d:ba:9c:a6:0c:5c:10:fa:b9:fa:
79:fc:7d:57:3b:77:5d:6b:e2:15:66:b9:4c:ba:44:
83:9d:28:fd:03:04:64:37:60:78:ac:c9:09:0e:bc:
70:09:96:c5:c6:b2:7a:dc:39:1e:c9:38:89:a5:d6:
39:1d:e9:4f:72:a4:51:0c:b5:1c:81:bc:37:70:d0:
87:b4:b7:53:44:da:ec:ae:16:59:47:52:d0:f3:3f:
fd:46:09:10:f5:08:13:67:9a:34:9b:20:c6:21:2f:
ed:a6:c3:1d:17:0d:11:a4:62:3d:d0:cc:30:7c:f2:
f8:62:56:72:d5:70:4a:62:8a:fd:91:0b:57:05:4f:
91:58:07:33:23:f0:5f:e2:67:a1:5a:54:6c:df:a6:
c6:bb:dd:83:8c:15:b4:cc:89:87:17:a6:4a:89:4f:
4e:5d:64:32:9f:4b:09:c8:71:23:ab:25:9f:1e:f6:
7b:5b:dd:c2:84:8c:7d:0c:4b:c4:35:87:5c:aa:da:
b9:16:0c:97:92:de:3f:26:e3:12:af:1c:b6:b5:58:
f1:d4:2d:0b:2e:2f:39:15:34:08:54:da:9b:ae:84:
1f:cb:a5:04:22:95:7f:f3:7e:07:0f:8f:7a:19:64:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:85:15:77:F8:BA:E0:9A:2E:C5:16:B6:2D:16:B8:A9:3C:88:7B
X509v3 Authority Key Identifier:
keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:27:58:e2:ba:22:7a:c3:0b:bb:7e:5f:e5:fc:d9:cb:b7:
7e:de:75:60:bf:06:21:4d:3e:f8:8d:93:17:38:1e:f3:50:58:
ff:9a:cb:83:47:82:f5:cf:7d:1a:19:9d:38:8f:1c:af:dd:08:
b3:be:05:1a:0d:49:e3:3a:d2:c7:7c:21:2d:bd:75:7d:7e:98:
f1:99:dd:9d:ab:b7:8e:1e:42:44:60:d2:cc:bb:cd:d4:98:c2:
36:5a:f1:c9:d2:ac:9a:b4:47:6f:45:2c:22:71:64:45:a6:6d:
78:9b:5a:1b:cc:84:a6:33:bd:94:a9:87:73:69:a3:d3:b1:4e:
38:f6:7f:d8:1f:1c:84:df:4e:19:ed:0f:0f:ba:52:c9:b4:89:
14:87:02:62:ac:1c:99:9e:ca:69:22:a3:79:af:a8:d5:4a:d3:
73:06:37:fd:ec:e2:ac:32:b5:75:0a:4c:e7:67:10:dd:52:fb:
f9:97:55:99:a3:6f:dd:d1:2b:65:48:6e:5e:22:84:26:e1:3d:
45:52:47:f1:19:20:fb:dc:bf:69:c5:98:2e:58:93:7f:e1:47:
33:b8:e8:84:b4:22:b3:a3:96:e1:05:a6:2b:f9:71:cc:ba:1d:
b3:87:80:be:e1:5c:a0:04:79:a5:cb:9a:b8:c1:4d:b9:4b:8a:
8c:63:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:48 2026 by rpki-client