
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json)
Hash identifier: ZA9NT+sU2ZgFskJCVBcQuxK2hKgFwakhem5HzkTJ/TE=
Subject key identifier: 55:C7:73:35:16:B8:0D:3C:1E:3C:E4:41:65:A0:63:2C:6F:9B:16:DA
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 77F437DFB901C3C96443C1CED99F63B5199F833C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
Manifest number: 055B
Signing time: Sun 01 Mar 2026 02:22:28 +0000
Manifest this update: Sun 01 Mar 2026 02:17:28 +0000
Manifest next update: Wed 04 Mar 2026 11:14:28 +0000
Files and hashes: 1: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=)
2: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: uZNmmKqa1n8Tbegti14/3I+0mjAqdKPnvZRDjBN2bb4=)
3: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=)
4: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: a/l5Zx5rwp7NSRqoYQhRrllZMVnmts+C/3rebqc1wt0=)
5: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=)
6: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 0ks7Jrq8I5HGi1Y9q/tMRilmkwLdHpbwinToV9LEMG4=)
7: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 11:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f4:37:df:b9:01:c3:c9:64:43:c1:ce:d9:9f:63:b5:19:9f:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Mar 1 02:17:28 2026 GMT
Not After : Mar 4 11:14:28 2026 GMT
Subject: CN=55C7733516B80D3C1E3CE44165A0632C6F9B16DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b4:50:a5:d0:54:d6:43:15:97:2f:c5:03:6e:
67:20:49:5d:81:e2:a1:0c:56:0e:a4:6b:04:ba:b9:
04:52:06:79:f5:aa:5e:e0:d1:12:70:3e:42:9a:c0:
3c:26:f5:21:29:85:2f:ee:9a:cd:7b:66:cc:24:30:
eb:14:c6:30:f7:8c:74:59:3f:63:b8:81:b0:7a:04:
3e:7f:24:63:78:77:b5:2b:36:4b:09:5e:8f:2c:1b:
ac:23:e9:cc:c8:d5:9e:f8:b6:86:cd:e4:22:9a:64:
d1:0b:ad:28:90:a3:95:cc:92:65:34:20:65:db:1d:
90:64:1a:ee:b7:dd:c3:0b:5e:99:1c:07:80:74:0f:
3b:cb:30:bb:47:86:3c:8a:bc:68:c0:d9:87:11:63:
da:5d:70:d2:61:7f:85:48:3c:66:43:fd:06:e8:d1:
94:43:5d:09:59:b4:77:ec:14:df:ff:d5:58:a9:e2:
34:85:82:6c:86:6c:a7:da:c3:23:c1:03:09:bb:f7:
bb:97:c4:c0:a0:f2:a4:4c:8c:53:c2:08:1a:24:30:
5c:21:0b:de:b6:49:35:8f:be:b5:01:c0:cf:6b:37:
8e:7e:81:c1:d9:4d:27:7b:1d:be:5f:5e:bc:b3:2b:
89:c2:32:7a:4f:00:74:cd:68:64:8d:ad:ac:eb:a3:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:73:35:16:B8:0D:3C:1E:3C:E4:41:65:A0:63:2C:6F:9B:16:DA
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:55:f1:90:b5:b1:f2:0e:76:36:df:89:4e:f2:a3:ff:a3:
7e:2b:3f:ee:9f:89:62:9c:87:d0:d8:3f:41:92:74:8e:49:3b:
88:c4:28:07:16:31:6a:3b:9b:d7:66:e8:3b:36:7a:20:10:07:
cf:0b:c8:e0:fd:c8:1c:c5:ff:7e:cb:2d:c1:67:26:0a:aa:84:
ca:ea:20:8b:11:75:cf:7d:52:cf:69:42:4a:5a:76:39:aa:58:
da:5d:15:a0:a2:9e:14:9e:36:d3:a1:59:48:72:a7:a7:9f:e7:
6d:82:11:30:26:45:1d:18:1f:a1:7e:1d:c6:a8:13:0f:6e:8e:
f8:b7:5b:8b:1f:d2:12:ea:a4:41:87:86:21:c5:df:38:0d:2e:
4e:15:51:6a:c3:66:80:8a:62:f0:40:80:5b:87:8a:4e:2b:9b:
41:22:14:2d:6b:7a:78:07:dc:01:3e:09:1d:55:fc:cb:c9:75:
66:67:cd:ad:53:73:dd:b6:1d:ea:db:b7:19:94:ed:7e:a3:68:
61:d7:03:51:69:4a:da:ed:5b:b0:11:dd:9e:5c:92:43:15:05:
ba:3e:f3:16:43:7b:5b:36:ba:81:96:01:a4:3e:e3:38:c1:0e:
22:90:4b:29:b2:a4:24:b9:18:04:9d:a4:48:ab:30:b8:45:a7:
70:f3:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:04 2026 by rpki-client