
$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
File: 7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json)
Hash identifier: ZjofJzEl8rZ5rxZypOqkP4rX50OpsRsEsp0ohhnVoMk=
Subject key identifier: C4:25:CD:49:C3:64:F9:88:FE:DC:3A:D2:E1:3A:D6:1D:52:A5:DB:CE
Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48
Certificate serial: 170F7852E29F211818EDA67C1AFACCF58F07C71F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
Manifest number: 0248
Signing time: Tue 04 Nov 2025 19:22:00 +0000
Manifest this update: Tue 04 Nov 2025 19:17:00 +0000
Manifest next update: Sat 08 Nov 2025 04:16:00 +0000
Files and hashes: 1: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: m5hLcOE9fd57WO+rY+/tFsbRO/vy0DiodmB+8252DA0=)
2: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: sRruwoxKxC5v+4ajE2hcnIZkT8FBlsjjqaqL/hWChfA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 04:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0f:78:52:e2:9f:21:18:18:ed:a6:7c:1a:fa:cc:f5:8f:07:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48
Validity
Not Before: Nov 4 19:17:00 2025 GMT
Not After : Nov 8 04:16:00 2025 GMT
Subject: CN=C425CD49C364F988FEDC3AD2E13AD61D52A5DBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:36:07:02:aa:43:1f:1f:55:ca:4a:af:29:
a1:ce:26:bc:d2:e2:37:ef:78:21:33:0d:76:c6:a0:
68:61:02:a4:7e:06:46:a6:77:c4:74:b1:ea:24:5c:
c8:cb:71:d1:94:6a:a8:d4:07:c0:29:bc:b4:31:35:
ae:49:ee:bb:a4:bc:4b:cb:0e:fc:6a:c9:f5:76:19:
62:a5:b6:80:80:41:e1:a0:47:71:2f:8a:0f:fe:c4:
e0:b4:10:ba:41:50:26:bd:ab:e5:e5:07:a4:dd:84:
61:7e:c0:22:5e:5f:92:4d:86:17:6c:a4:ea:00:e8:
bd:2f:5f:f5:22:c1:1d:55:9e:d4:b4:e1:86:eb:a6:
9e:58:4e:66:c6:e6:15:b4:48:00:18:52:da:66:4f:
a2:c1:b7:96:6b:af:ff:7e:ed:31:1c:b8:13:9d:32:
74:c8:4b:f3:2a:39:4f:f4:53:74:7c:22:b5:13:42:
cd:86:62:a5:c3:78:08:c0:3f:ef:b7:02:b4:0e:fa:
f6:89:16:a6:01:d3:1b:17:f6:b0:46:6c:d5:58:3f:
c9:1b:a3:b8:bb:66:1f:9c:00:c5:fc:ab:89:f3:fe:
a6:1b:5d:b1:52:4c:b2:01:eb:b9:0d:50:54:25:4b:
71:66:96:23:d5:00:13:bb:60:6f:e6:45:a0:4f:16:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:CD:49:C3:64:F9:88:FE:DC:3A:D2:E1:3A:D6:1D:52:A5:DB:CE
X509v3 Authority Key Identifier:
keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:f7:f6:d5:e5:04:2f:f4:e2:9f:e8:89:51:41:58:79:b2:
9b:3d:a8:a9:2c:38:bf:27:6b:ef:de:fc:93:09:26:1d:09:24:
05:77:90:51:75:7c:dc:3b:6d:26:51:5a:da:44:43:9f:ba:76:
e1:38:f3:36:47:60:10:56:b0:b2:7e:54:52:df:80:a0:25:24:
21:61:a3:27:43:62:a9:3d:07:8b:c6:ec:5e:32:9b:3c:40:05:
de:6a:06:dd:e0:67:ea:2c:ee:d0:4b:74:c0:b6:fb:2d:e7:e0:
0f:51:3f:68:45:88:34:67:83:4d:db:f6:45:0c:c1:48:9d:84:
2c:39:9c:cc:cf:ac:3a:3c:15:da:22:7c:a8:06:fd:b0:ed:a8:
0e:7a:83:10:5b:e7:09:35:a2:0a:57:09:9b:b8:ee:a7:37:70:
5b:ca:7b:59:30:c9:7b:ce:d1:cd:92:98:8c:5c:7d:0a:6f:e7:
5c:80:d5:19:01:5c:90:30:52:db:e4:74:b5:e2:5e:b0:be:13:
df:82:f0:88:34:c9:d6:30:d9:9f:58:f6:6b:d5:ff:c6:f0:d1:
2f:ed:3d:49:09:bd:9b:89:83:f4:c3:74:fc:84:a9:39:a4:6b:
82:d9:e0:52:04:37:7d:31:77:0b:51:84:0a:d6:22:69:39:8e:
57:e7:27:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFw94UuKfIRgY7aZ8GvrM9Y8Hxx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcw
MTAwNUQ0ODAeFw0yNTExMDQxOTE3MDBaFw0yNTExMDgwNDE2MDBaMDMxMTAvBgNV
BAMTKEM0MjVDRDQ5QzM2NEY5ODhGRURDM0FEMkUxM0FENjFENTJBNURCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvTYHAqpDHx9VykqvKaHOJrzS
4jfveCEzDXbGoGhhAqR+Bkamd8R0seokXMjLcdGUaqjUB8ApvLQxNa5J7rukvEvL
DvxqyfV2GWKltoCAQeGgR3Evig/+xOC0ELpBUCa9q+XlB6TdhGF+wCJeX5JNhhds
pOoA6L0vX/UiwR1VntS04Ybrpp5YTmbG5hW0SAAYUtpmT6LBt5Zrr/9+7TEcuBOd
MnTIS/MqOU/0U3R8IrUTQs2GYqXDeAjAP++3ArQO+vaJFqYB0xsX9rBGbNVYP8kb
o7i7Zh+cAMX8q4nz/qYbXbFSTLIB67kNUFQlS3FmliPVABO7YG/mRaBPFm9fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxCXNScNk+Yj+3DrS4TrWHVKl284wHwYDVR0j
BBgwFoAUfpJC8vB1bB2yMkeSYYOMNwEAXUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTk2ODhhOS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83RTkyNDJGMkYw
NzU2QzFEQjIzMjQ3OTI2MTgzOEMzNzAxMDA1RDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcwMTAw
NUQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz
YmMtNTE3ODY3OTEyMGFkLzAvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhD
MzcwMTAwNUQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAYj9/bV5QQv9OKf6IlRQVh5sps9qKksOL8n
a+/e/JMJJh0JJAV3kFF1fNw7bSZRWtpEQ5+6duE48zZHYBBWsLJ+VFLfgKAlJCFh
oydDYqk9B4vG7F4ymzxABd5qBt3gZ+os7tBLdMC2+y3n4A9RP2hFiDRng03b9kUM
wUidhCw5nMzPrDo8FdoifKgG/bDtqA56gxBb5wk1ogpXCZu47qc3cFvKe1kwyXvO
0c2SmIxcfQpv51yA1RkBXJAwUtvkdLXiXrC+E9+C8Ig0ydYw2Z9Y9mvV/8bw0S/t
PUkJvZuJg/TDdPyEqTmka4LZ4FIEN30xdwtRhArWImk5jlfnJ7U=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:13 2025 by rpki-client